Better web security has become so commonplace that most sites don't make a big deal about it anymore. Reddit quietly announced on Tuesday it would soon move all users over to HTTPS encryption by default.
Congress is losing sleep over the possibility other nations could endanger web security, and now it wants the four major browser makers to weigh in. The House of Representatives' Committee on Energy and Commerce recently sent letters to Apple, Google, Microsoft, and Mozilla with questions about how the backbone of HTTPS security could be violated.
Potentially millions of WordPress websites may be exposed to hackers through a flaw that has seeped into multiple plugins through unclear recommendations in official WordPress documentation.
Microsoft's Bing has no plans to rank websites higher if they use HTTPS encryption, unlike rival Google.
Jared Newman | 04 Oct | Read more
One month after the Heartbleed bug put Web security on notice, more than 300,000 servers worldwide are still vulnerable. That's the word from Errata Security's Robert Graham, who came to that number after scanning millions of Web servers on Internet port 443, which is used for TSL/SSL communication.
This guide details the threats common to websites and web applications and what you can do to mitigate them. • The data centre perimeter is dead. But its memory lives on in the way many IT departments continue to secure their infrastructure. • Businesses must determine which of their assets are most at risk and determine their tolerance for risk. • Managing that risk means extending security controls to the cloud