1+ hour, 54+ min ago   (345+ words) Researchers at the University of Wuppertal have analyzed TutaCrypt, the hybrid encryption protocol used by Tuta Mail to protect email against both conventional and future quantum-computing attacks. Rather than identifying a vulnerability, the researchers reconstructed TutaCrypt in a form suitable…...

23+ hour, 12+ min ago   (400+ words) WhatsApp is rolling out support for multiple passkeys, stronger two-step verification passwords, and additional information for calls from unknown numbers. The changes, announced today, are intended to make account authentication harder to compromise while giving users more context before answering…...

5+ day, 18+ hour ago   (336+ words) One cluster, tracked as UNC7005, has gone so far as to trick victims into linking WhatsApp accounts to attacker-controlled devices and recording their audio and video through fake calls. Google tracks the activity as UNC6293, UNC7005, and UNC5976, assessing with high confidence that all…...

1+ week, 3+ hour ago   (513+ words) European standards body ETSI has begun the approval process for a new cybersecurity standard for VPN products, part of a wider package of 17 standards designed to support the EU Cyber Resilience Act (CRA). The VPN standard, EN 304 620, introduces defined technical…...

1+ week, 5+ day ago   (305+ words) Encrypted messaging provider Threema says a series of large-scale distributed denial-of-service (DDoS) attacks disrupted its services this week, leaving users unable to connect for several hours on Tuesday and causing intermittent outages on Wednesday morning. The company disclosed the incident…...

1+ week, 6+ day ago   (578+ words) Meta has unveiled an early version of Scam Alert, an optional WhatsApp security feature that uses an on-device machine learning model to identify messages that may be part of a scam. The company says message content remains on the user's…...

2+ week, 3+ hour ago   (373+ words) Signal has introduced automatic key verification, a new security feature designed to detect attempts to secretly replace the encryption keys associated with users’ accounts. The system, which has been under limited user testing since earlier this year, uses key transparency,…...

2+ week, 1+ day ago   (491+ words) FirewallFalcon, a free Linux server management tool promoted to VPN resellers and “free internet” operators, has been found secretly hijacking network traffic and giving its developer control over systems that install it. Researchers say FirewallFalcon Manager combines legitimate tunneling features…...

2+ week, 5+ day ago   (509+ words) The company announced IPVanish Secure Browser, citing the recently disclosed use of Windows telemetry in a US cybercrime investigation, in which Microsoft records helped identify an alleged hacker despite the use of VPN infrastructure. According to an unsealed federal criminal…...

2+ week, 6+ day ago   (397+ words) Signal has introduced broader linked-device support, allowing users to connect additional Android phones, Android tablets, and iPhones to an existing Signal account. The changes are rolling out with Signal Android version 8.20 and Signal iOS version 8.22. Signal developer Jim Lund detailed…...