Today, people’s lives are heavily surrounded by the internet and various technological applications, which makes protection more crucial than ever. When using a website or even browsing the internet, we should have the guarantee that the website is safe to use and our information is secure. This is why SSL…
Have you ever wondered how websites, emails, and digital transactions remain secure? Every time you log in to an online banking platform, sign an important document electronically, or visit a secure website (HTTPS), you’re relying on a system called Public Key Infrastructure (PKI). But wait, then what is Public Key…
You open a regular-looking email. Nothing suspicious, no attachments, no links, no typos. You click “Summarise this email” using Google Gemini for Workspace. And bam! A fake security warning pops up in the summary, telling you your Gmail password is compromised and urging you to call a support number. Except……
If you’re using PHP in your applications, it’s time to stop what you’re doing and check your version. Recently, security researchers disclosed two serious vulnerabilities in PHP that could allow attackers to perform SQL injection (SQLi) and denial-of-service (DoS) attacks. These issues affect widely used components, PostgreSQL and SOAP extensions,…
“One day. One certificate. Every single day.” Sounds like a security stunt, right? Nope. It’s Instagram’s new normal, and it’s about to rewrite how big tech thinks about trust on the web. Wait… did Instagram just change the rules of web security? Yes. While the rest of the internet is…
CVE-2025-49826 is a serious vulnerability in Next.js, a widely used web framework based on the React platform. This vulnerability enables attackers to poison the cache and redirect users to blank pages. This results in a denial-of-service (DoS) attack. This vulnerability affects Next.js versions 15.1.0 to 15.1.7. The cache poisoning occurs when…
Introduction Ransom Denial of Service (RDoS) attacks which is a relatively new form of assault in the cyber security continuum are fast becoming a worry to organisations globally. These are hybrid attacks that incorporate the DDoS attack on targets’ resources with ransomware threats, making them a serious threat to various…
The most prevalent Java servlet container, Apache Tomcat, is present in most enterprise and cloud-based web applications. Because of its agile, open-source framework, Apache Tomcat is prevalent in many fields of technology. However, widespread adoption also carries widespread risk. In June 2025, the Apache Software Foundation reported 4 critical vulnerabilities…
Imagine downloading 10,000 HD movies in under a minute. That’s exactly what happened to one hosting provider’s server, only it wasn’t a movie night. It was the largest cyberattack ever recorded. In mid-May 2025, Cloudflare stopped a 7.3 terabits-per-second (Tbps) DDoS attack dead in its tracks. To put that in…
Introduction Possibly one of the most important things that have not changed at all is that, regardless of the constant growth of new technologies and new payment solutions, the issue of security remains extremely important. The standard with which organizations have been comparing their payment card data security programs for…
If you’re still relying on a perimeter firewall to protect your network… you’re already behind. The way we work has changed. Remote teams, cloud apps, and mobile devices they’ve all shattered the traditional idea of a secure network boundary. That’s where Zero Trust Architecture (ZTA) comes in. And NIST just…
What Is a TLS/SSL Port? A TLS/SSL port is a portion of the network used for the creation of secure connections on the Internet using the Transport Layer Security or Secure Socket Layer. Such protocols are used for encryption and authentication so that data being exchanged between a client, like…
If you’re using Trend Micro Apex Central or Endpoint Encryption PolicyServer, here’s some urgent news. Hackers could take full control of your system, no login required. On June 10th, Trend Micro released urgent patches for ten security flaws, including six unauthenticated remote code execution (RCE) vulnerabilities rated critical with CVSS…
The Common Name (CN) in an SSL/TLS certificate is a field that identifies the main domain name that this certificate belongs to. It is used mainly as the primary means for verifying the identity of the domain while conducting safe communication over the World Wide Web. Originally, the CN field…
Google Chrome announced that it would distrust new TLS/SSL certificates from two certificate authorities (CAs): Chunghwa Telecom and Netlock, effective August 1, 2025, with the release of Chrome version 139. Apart from releasing new TLS/SSL standards, the Chrome announcement represents another significant step in Google’s campaign to demand accountability for…
Loading...
(11 votes, average: 4.64 out of 5)
