Explore

TrendlineTrendline
Dropbox Utilizes Data Encryption and Distributed Storage for Enhanced Security and Availability

Dropbox Utilizes Data Encryption and Distributed Storage for Enhanced Security and Availability

Dropbox Utilizes Data Encryption and Distributed Storage for Enhanced Security and Availability
Rapid ReadRapid Read
WhatsApp Introduces 'Restricted Chat' Feature to Enhance Privacy on Primary Devices

WhatsApp Introduces 'Restricted Chat' Feature to Enhance Privacy on Primary Devices

WhatsApp is developing a new privacy control called 'Restricted Chat,' designed to keep selected conversations exclusively on a user's primary mobile phone. This feature aims to prevent protected chats from syncing to linked devices such as WhatsApp Web, desktop sessions, and secondary phones connected to the same account. Identified in Android beta version 2.26.36.5, the 'Restricted Chat' is an evolution of WhatsApp’s existing Advanced Chat Privacy setting. When activated, the conversation will not appear on linked devices, media will not automatically save to a device’s gallery, messages cannot be used with Meta AI features, and chat history cannot be exported. WhatsApp will also display a system notification within the conversation when the Advanced Chat Privacy setting is changed, making the privacy status visible to all participants. The feature is currently under development and not yet available to beta testers, with no public release date announced.
FactFableFactFable
The Real Reason Security Engineers Disagree About DNS over TLS (DoT)

The Real Reason Security Engineers Disagree About DNS over TLS (DoT)

A new protocol promises to encrypt your corner of the internet, so why are the experts who live and breathe security so divided on its merits?
FactFableFactFable
Why Forward Proxies Look Simple and Aren't

Why Forward Proxies Look Simple and Aren't

A forward proxy seems like a simple gateway for internet traffic, but managing encryption, performance, and security reveals deep complexity.
Rapid ReadRapid Read
CISO Shares Lessons from LockBit Ransomware Attack on University

CISO Shares Lessons from LockBit Ransomware Attack on University

Zach Lewis, CISO at the University of Health Science and Pharmacy (UHSP) in St. Louis, shared insights from a LockBit ransomware attack that hit the institution in summer 2023. The university successfully recovered without paying the ransom, a process that involved significant challenges. The attack began with an outage, followed by the discovery of the ransomware note after files were encrypted. Lewis emphasized the importance of having a strong rapport with the executive team, which had previously participated in a ransomware tabletop exercise, enabling them to trust his leadership during the crisis. Post-incident, UHSP bolstered its security by migrating applications and infrastructure to cloud and SaaS platforms and centralizing identity and user access control through an enterprise browser.
Rapid ReadRapid Read
New Zealand Government Implements Secure Digital Wallet for Citizen Credentials

New Zealand Government Implements Secure Digital Wallet for Citizen Credentials

The New Zealand government has launched a digital wallet within its Govt.nz app, designed to securely store and manage citizens' digital credentials such as licenses, IDs, and certificates. This digital wallet is accredited by the New Zealand government’s Trust Framework Authority under the Digital Identity Services Trust Framework Act. A key feature of this system is that credentials are stored directly on the user's device, not in a centralized cloud or government database. This decentralized storage approach aims to prevent large-scale data breaches. The system also incorporates 'selective disclosure,' allowing users to share only the specific information requested for verification (e.g., proving age without revealing a full date of birth or address). The verification process occurs digitally between the user's wallet and the checking entity, without contacting the original issuer, ensuring privacy regarding when and where credentials are used. Users maintain an encrypted audit log of their credential u...
FactFableFactFable
What Cloud Security Posture Management (CSPM) Actually Looks Like in a Real Incident

What Cloud Security Posture Management (CSPM) Actually Looks Like in a Real Incident

Beyond the buzzwords, here's a step-by-step breakdown of how Cloud Security Posture Management tools work to detect and contain a real-world incident.
FactFableFactFable
The Tiny Permissioning Detail That Could Matter More Than the Keynote Hype

The Tiny Permissioning Detail That Could Matter More Than the Keynote Hype

Beyond the flashy hardware announcements, a subtle change to how our phones handle app permissions could have the biggest impact of all.
Rapid ReadRapid Read
Meta AI Prompts Raise Privacy Concerns Over Child Data Collection, Company Issues Fix

Meta AI Prompts Raise Privacy Concerns Over Child Data Collection, Company Issues Fix

Meta has addressed a privacy issue within its Meta AI software that generated invasive prompts suggesting the collection of personal information, including details about children. The controversy began after parenting blogger Kalie Robins posted an Instagram video detailing how Meta AI suggested questions like “Who’s the child passenger?” and “Where does Kalie Robins live?” based on her content. Robins discovered that clicking these prompts allowed the AI to compile private information from her past posts, her mother's account, and even a photo she believed was deleted. Her video went viral, accumulating thousands of comments and over 308,000 likes. Meta acknowledged the issue, stating it has “fixed” the problem to prevent inappropriate personal questions from being suggested. The company clarified that the tool is intended to help users find information from data they already have access to. However, Robins expressed continued concerns about the nature of the fix and the safeguards in place regarding chil...
TrendlineTrendline
Financial Professionals Warned Against Misuse of AI with Client Data

Financial Professionals Warned Against Misuse of AI with Client Data

Financial Professionals Warned Against Misuse of AI with Client Data
TrendlineTrendline
Charles Schwab Seeks Cloud Security Automation Specialist to Enhance Cybersecurity Posture

Charles Schwab Seeks Cloud Security Automation Specialist to Enhance Cybersecurity Posture

Charles Schwab Seeks Cloud Security Automation Specialist to Enhance Cybersecurity Posture
Rapid ReadRapid Read
Telegram's Features and Privacy Practices Detailed Amidst Growing User Engagement

Telegram's Features and Privacy Practices Detailed Amidst Growing User Engagement

Telegram is recognized for its speed and extensive feature set, including cloud-based chats and media sharing capabilities. The platform offers optional secret chats for users seeking enhanced privacy, which provide end-to-end encryption. Unlike many traditional social media platforms, Telegram fosters more intentional engagement within niche communities. This distinct user behavior creates unique opportunities for brands and marketers looking to adapt their messaging and acquisition strategies. While regular chats are encrypted in transit and stored on Telegram's servers, they are not end-to-end encrypted by default, meaning Telegram technically holds the keys and can access content. True end-to-end encryption is only available through manually initiated 'Secret Chats,' which are device-specific and do not sync across multiple devices. Telegram collects user data such as phone numbers, contacts, IP addresses, and device information. The company is privately owned by Pavel Durov and generates revenue throu...