Notices tagged with infosec, page 5

Dragonblood–vulnerabilities in WPA3 standard:

https://papers.mathyvanhoef.com/dragonblood.pdf (PDF file)

– the paper describes 5 different vulnerabilities (DoS, downgrade, side-channel attacks)
– researches believe that WPA3 "does not meet the standards of a modern security protocol"
– the Wi-Fi Alliance published a security update for the standard: https://www.wi-fi.org/security-update-april-2019

#wpa3 #wifi #wlan #infosec #security #cybersecurity #dragonblood #dragonfly #kex

Facebook–security team spots 146GB dataset containing 540 million records of Facebook users:

https://www.upguard.com/breaches/facebook-user-data-leak

– dataset includes comments, likes, reactions, account names, Facebook IDs, and more
– origin of the leak is the Mexico-based media company Cultura Colectiva that develops third-party apps
– a second dataset contains 22,000 cleartext passwords from 2014

#facebook #leak #culturacolectiva #privacy #infosec #cybersecurity #security

Google is truly the new Microsoft, moving to the second phase of Embrace-Extend-Extinguish with regards to e-mail:
https://www.theverge.com/2019/3/26/18282636/amp-gmail-shopping-rsvp-forms-inbox-google-beta
https://gsuiteupdates.googleblog.com/2019/03/keep-data-secure-with-gmail-confidential-mode-beta.html

#InfoSec

Mozilla releases updates for two critical security vulnerabilities in Firefox:

https://www.mozilla.org/en-US/firefox/66.0.1/releasenotes/

https://www.mozilla.org/en-US/firefox/60.6.1/releasenotes/

Fixed versions are:

– Firefox 66.0.1
– Firefox for Android 66.0.1
– Firefox ESR 60.6.1
– Tor Browser 8.0.8

#firefox #mozilla #update #vulnerability #security #infosec #cybersecurity #pwn2own