Data and Information Security

Microsoft’s .NET Framework security updates further effort to phase out RC4 encryption

The company advises customers to stop using the RC4 cipher in TLS connections because of known weaknesses in the algorithm

Brown HIV researchers make Dropbox secure with nCrypted Cloud

Here’s how to chat with your Facebook friends using encryption

Cryptocat can now pull a person's buddy list from Facebook

Rush to defend against Heartbleed leads to mistakes with certificates, patches

Some reissued SSL certificates use the same vulnerable key as the ones they replace, and some sites moved to a vulnerable version of OpenSSL

Heartbleed-like bug in OpenSSH dismissed as a hoax

Scammers claim they found a bug in the remote access tool two years ago

11 reasons encryption is (almost) dead

Google speeds up encrypted Web communications in Chrome on Android

The company is pushing for widespread support for faster encryption algorithms on mobile and wearable devices

Mozilla to strengthen SSL certificate verification in Firefox

The software maker will pay US$10,000 for any critical vulnerability found in its new certificate verification code

Satellite communication systems rife with security flaws, vulnerable to remote hacks

Researchers found critical vulnerabilities in satellite communications devices used in the defense, maritime, aerospace and other sectors

Tor anonymity network to shrink as a result of Heartbleed flaw

The Tor Project banned 380 vulnerable entry and exit relays and is eyeing 1,000 more