Ransom demands are down, email is the top way attackers get in 2026-07-16 at 08:00 By Mirko Zorz An employee opens an email that looks like any other, clicks a link, and gives up a password without noticing. A stolen login opens a door deeper in the network. Files stop opening a few days later. […]
Ransom demands are down, email is the top way attackers get in Read More »
Chatto: Open-source team messenger with privacy at its core 2026-07-14 at 07:30 By Anamarija Pogorelec Teams that want their group chats off commercial platforms have a growing menu of self-hosted options. Chatto joined that group when its developer released the code under an open-source license and posted binaries for anyone to run on their own
Chatto: Open-source team messenger with privacy at its core Read More »
OpenSSH 10.4 arrives with security fixes and a post-quantum signature option 2026-07-06 at 16:05 By Anamarija Pogorelec Operators who manage remote access to Unix and Linux systems keep a close watch on OpenSSH, the software that carries most SSH traffic across the internet. The project released version 10.4 with eight security fixes, a set of
OpenSSH 10.4 arrives with security fixes and a post-quantum signature option Read More »
This supercomputer encrypts your data even while it’s running it 2026-07-01 at 08:30 By Sinisa Markovic Most people who handle sensitive data already encrypt it in two places. They lock it down when it sits on a hard drive, and they lock it down when it moves across a network. There has always been a
This supercomputer encrypts your data even while it’s running it Read More »
Encrypted DNS still tells an eavesdropper where to look 2026-06-22 at 08:00 By Mirko Zorz Encrypted DNS runs across much of the Internet. DNS over TLS, HTTPS, and QUIC keep the contents of a query away from anyone watching a network link. The encryption covers the message inside each packet. The packet still carries plaintext
Encrypted DNS still tells an eavesdropper where to look Read More »
Your browser tab could become encrypted storage for someone else’s files 2026-06-19 at 08:30 By Mirko Zorz Decentralized storage networks already hand pieces of people’s data to strangers’ machines. The lasting question across these networks is whether the machine holding the data can read it. A research paper by Gregory Magarshak, a professor at IENYC,
Your browser tab could become encrypted storage for someone else’s files Read More »
Cybercriminals are moving away from mass phishing campaigns 2026-06-12 at 13:47 By Sinisa Markovic Phishing activity declined by roughly 20% in both 2024 and 2025, according to research from Zscaler’s ThreatLabz team. The drop followed years of growth that pushed phishing activity above 2 billion hits in 2023. “Phishing volume measured by blocked emails is
Cybercriminals are moving away from mass phishing campaigns Read More »
The security in smartphones is helping send them to landfills 2026-06-10 at 09:55 By Mirko Zorz Billions of working smartphones reach the end of their service lives each year and move into drawers, recycling streams, and waste piles. The WEEE Forum estimated that 5.3 billion mobile phones became electronic waste in 2022. Many of these
The security in smartphones is helping send them to landfills Read More »
Let’s Encrypt works toward post-quantum certificates at web scale 2026-06-05 at 15:49 By Anamarija Pogorelec Let’s Encrypt plans to pursue a post-quantum-safe Web PKI through Merkle Tree Certificates (MTCs), a new approach that adds post-quantum authentication to the web without sacrificing the speed and reliability that have made TLS universal. The project is targeting late
Let’s Encrypt works toward post-quantum certificates at web scale Read More »
Attackers obtained encrypted password vaults from some Dashlane user accounts 2026-06-05 at 14:34 By Sinisa Markovic Dashlane has disclosed new details about a brute-force attack that let a threat actor access some customer accounts and copy encrypted vaults. Dashlane said it found no evidence that the attackers compromised its internal systems. The company first acknowledged
Attackers obtained encrypted password vaults from some Dashlane user accounts Read More »
What CISOs need to do about post-quantum migration in the next 24 months 2026-06-03 at 07:40 By Help Net Security In this Help Net Security video, Garfield Jones, SVP Global Strategy and Research, QuSecure, lays out what CISOs should do over the next 24 months. A recent Google paper moved the expected arrival of a
What CISOs need to do about post-quantum migration in the next 24 months Read More »
The end of unencrypted Discord calls is here 2026-05-19 at 15:35 By Anamarija Pogorelec Discord has protected voice and video calls in DMs, group DMs, voice channels, and Go Live streams with end-to-end encryption (E2EE) by default. The company began experimenting with E2EE for voice and video in 2023, starting a long-term effort. End-to-end encryption
The end of unencrypted Discord calls is here Read More »
WhatsApp adds Incognito Chat for private Meta AI conversations 2026-05-13 at 18:24 By Sinisa Markovic The company launched Incognito Chat with Meta AI, a feature that lets users hold AI conversations the platform itself cannot read. The rollout will reach WhatsApp and the standalone Meta AI app over the coming months. How Incognito Chat works
WhatsApp adds Incognito Chat for private Meta AI conversations Read More »
iOS 26.5 is out, bringing encrypted RCS messaging to iPhone and Android users 2026-05-11 at 23:59 By Sinisa Markovic Apple is bringing long-awaited end-to-end encryption to Rich Communication Services (RCS) messaging between iPhone and Android users in iOS 26.5. The feature is launching in beta for iPhone users running iOS 26.5 on supported carriers and
iOS 26.5 is out, bringing encrypted RCS messaging to iPhone and Android users Read More »
Instagram messaging encryption removed, and privacy advocates are pushing back 2026-05-11 at 13:57 By Anamarija Pogorelec After introducing optional end-to-end encrypted messaging in 2023, Instagram announced in March 2026 that encryption for direct messages would be discontinued, and the feature was removed on May 8. The change allows Instagram to access direct message content, including
Instagram messaging encryption removed, and privacy advocates are pushing back Read More »
Meta adds proof-based security to encrypted backups 2026-05-05 at 13:21 By Anamarija Pogorelec Meta has updated its infrastructure for protecting password-based and end-to-end encrypted backups, introducing over-the-air fleet key distribution for Messenger and a commitment to publishing evidence of secure fleet deployments. How encrypted backups work These updates build on the company’s HSM-based Backup Key
Meta adds proof-based security to encrypted backups Read More »
Researchers build an encrypted routing layer for private AI inference 2026-04-21 at 07:31 By Sinisa Markovic Organizations in healthcare, finance, and other sensitive industries want to use large AI models without exposing private data to the cloud servers running those models. A cryptographic technique called Secure Multi-Party Computation (MPC) makes this possible. It splits data
Researchers build an encrypted routing layer for private AI inference Read More »
Half of the 6 Million Internet-Facing FTP Servers Lack Encryption 2026-04-20 at 14:37 By Ionut Arghire The continued use of the half-century-old protocol exposes enterprises and end users to various types of attacks. The post Half of the 6 Million Internet-Facing FTP Servers Lack Encryption appeared first on SecurityWeek. This article is an excerpt from
Half of the 6 Million Internet-Facing FTP Servers Lack Encryption Read More »
Product showcase: Syncthing for secure, private file synchronization 2026-04-20 at 07:52 By Anamarija Pogorelec Syncthing is a free and open-source application that synchronizes files directly between your devices. Instead of uploading data to a central server, it uses a peer-to-peer approach, transferring files whenever peers are online. This decentralized model ensures that your data remains
Product showcase: Syncthing for secure, private file synchronization Read More »
Product showcase: Ente Auth encrypts, backs up, and syncs 2FA 2026-04-16 at 08:11 By Anamarija Pogorelec Two-factor authentication (2FA) is an essential layer of protection for online accounts, and Ente Auth makes it easier to manage securely across devices. Ente Auth is a free, open-source authenticator app designed to generate and store one-time passcodes for
Product showcase: Ente Auth encrypts, backs up, and syncs 2FA Read More »