Explained: Domain fronting
Domain fronting is a technique to hide the true origin of HTTPS requests by hiding the real domain name encrypted inside a legitimate TLS request.
Read moretls
Public and free WiFi: Can I safely use it?
Categories: News Categories: Personal Tags: Free Tags: public Tags: WiFi Tags: HTTPS Tags: TLS Tags: VPN The Internet has changed. A lot. Does that make it safer to use public, free WiFi? |
The post Public and free WiFi: Can I safely use it? appeared first on Malwarebytes Labs.
Read moreRecord breaking HTTPS DDoS attack
Credit to Author: Pieter Arntz| Date: Wed, 15 Jun 2022 15:25:28 +0000
The number and power of DDoS attacks keep growing at an incredible rate year over year. Recently a new HTTPS DDoS attack record was broken.
The post Record breaking HTTPS DDoS attack appeared first on Malwarebytes Labs.
Read moreLet’s Encrypt to revoke “mis-issued” certificates
Credit to Author: Christopher Boyd| Date: Thu, 27 Jan 2022 21:44:42 +0000
 | |
| In one day’s time, Let’s Encrypt will begin revoking a number of mis-issued certificates. Check now if you’re affected Categories: Privacy Tags: certificatesecuritySSLTLSwebsite |
The post Let’s Encrypt to revoke “mis-issued” certificates appeared first on Malwarebytes Labs.
Read moreNearly a quarter of malware now communicates using TLS
Credit to Author: Luca Nagy| Date: Tue, 18 Feb 2020 13:30:07 +0000
Encryption is one of the strongest weapons malware authors can leverage: They can use it to obfuscate their code, to prevent users (in the case of ransomware) from being able to access their files, and for securing their malicious network communication. As websites and apps more widely adopt TLS (Transport Layer Security) and communicate over […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/XXvUtjG7XVU” height=”1″ width=”1″ alt=””/>
Read moreIs encryption rendering your firewall irrelevant?
Credit to Author: Chris McCormack| Date: Fri, 22 Nov 2019 12:09:36 +0000
Encryption is great for privacy, but it’s also creating a vast blind spot where current firewalls are not up to the task of inspecting great volumes of encrypted traffic.<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/PEQT8bzYpxQ” height=”1″ width=”1″ alt=””/>
Read moreRSAC 2019: Why attackers need domain fronting
Credit to Author: Nikolay Pankov| Date: Mon, 08 Apr 2019 17:29:23 +0000
A story from RSAC 2019 on how domain fronting is used to disguise communications between an infected machine and a command server.
Read moreRSAC 2019: Grand Theft DNS
Credit to Author: Alex Drozhzhin| Date: Fri, 29 Mar 2019 15:23:59 +0000
At RSAC 2019, a SANS Institute instructor talked about how DNS manipulations can be used to hijack a company’s IT infrastructure.
Read more