January 12, 2022

Wormable Windows HTTP hole – what you need to know

One bug in the January 2022 Patch Tuesday list is getting lots of attention: "HTTP Protocol Stack Remote Code Execution Vulnerability".

Naked Security

March 27, 2020

Firefox 76 will have option to enforce HTTPS-only connections

The aim is to block the browser from reaching the small number of sites that cling to HTTP, closing security risks.

Naked Security

March 17, 2020

Slack fixes account-stealing bug

Slack has fixed a bug that allowed attackers to hijack user accounts by tampering with their HTTP sessions.

Naked Security

March 02, 2020

Let’s Encrypt issues one billionth free certificate

Thanks to this flood of free certificates, the web is a lot more encrypted than it was a few years ago.

Naked Security

February 10, 2020

Google Chrome to start blocking downloads served via HTTP

Google has announced a timetable for phasing out insecure file downloads in the Chrome browser starting with desktop version 81 due next month.

Naked Security

February 06, 2020

Google’s Chrome 80 clamps down on cookies and notification spam

Version 80 of the Chrome browser is out with some new features designed to save your security and your sanity.

Naked Security

October 24, 2019

Vulnerability in content distribution networks found by researchers

Researchers have found a flaw that could lead to denial of service attacks on content distribution networks around the world.

Naked Security

August 19, 2019

Multiple HTTP/2 DoS flaws found by Netflix

Netflix has identified several denial of service (DoS) flaws in HTTP/2, a popular network protocol that underpins large parts of the web. Exploiting them could bring servers grinding to a halt.

Naked Security

June 12, 2019

FBI warns users to be wary of phishing sites abusing HTTPS

Why you shouldn't trust a website simply because it's secured using HTTPS and backed by the green padlock symbol.

Naked Security