Back in 1996, Quake's shareware CD locked id Software's entire catalog behind flawed encryption that made it a free-for-all
A flawed CD copy-protection scheme cost id Software 150,000 unsold discs
Encryption articles
Researchers found a way to bring expired credit cards back from the dead
"Zombie card" exploit uses two smartphones to rewrite credit card expiration data
WTF?! Credit cards aren't meant to last forever, but a team of researchers just found a way to keep expired ones alive for a little longer than intended, and not for the cardholder's benefit. Not every card is affected, but the flaw sits deep enough in how contactless payments are verified that exploitation isn't just theoretical.
AMD's TPM implementation includes two high-severity flaws, but fixes have been available since May
TPM was supposed to prevent these types of issues
GigaWiper malware can wipe your hard drive, spy on you, and stream your screen live
Microsoft discovers GigaWiper backdoor combining Crucio, CutBrooch, and FlockWiper malware families
The EU just revived a law that lets Meta and Google scan your messages – critics call it mass surveillance
Encrypted messaging services are currently exempt, but a proposed stricter version could change that
AMD quietly disabled RAM encryption on some Ryzen CPUs and users want to know why
AMD's latest firmware update sparks a security feature controversy
Windows Server is getting new network safety capabilities with DNS over HTTPS
The feature has been available on client Windows editions for quite some time
Proton Mail now lets you send email from your Gmail address
New feature lets you transition away from Gmail gradually, so you never have to open Google's app again
Windows BitLocker exploit sparks messy feud between Microsoft and the researcher who exposed it
Researcher says Microsoft ignored BitLocker flaw before banning his GitHub account
A security researcher says Microsoft secretly built a backdoor into BitLocker, releases an exploit to prove it
YellowKey exploit bypasses BitLocker full volume encryption via USB stick and WinRE
Apple is rolling out end-to-end encryption for iPhone to Android RCS messages
The long, slow death of SMS gets a meaningful milestone
Kaspersky warns that passwords hashed with MD5 algorithm can be cracked in minutes using a GPU
Moving away from insecure passwords is now a critical priority
Microsoft Edge stores all your saved passwords unencrypted in memory
The behavior was first documented in 2022 and has persisted for at least four years
New ransomware is so badly coded it destroys your files instead of holding them hostage
Is this a vibe-coded experiment or sheer incompetence? Either way, victims' data is gone for good
A federal agent said WhatsApp's encryption is a lie. Then the investigation was shut down
A 10-month Commerce Department probe concluded Meta could view all WhatsApp messages in unencrypted form
Android wants to replace email verification codes with one-tap credentials
Editor's take: Google is once again trying to simplify something that was already fairly easy and convenient. Mountain View's latest target is email-based authentication, which is now dropping the email-checking step altogether thanks to a new Android API update.
Open-source tool decrypts all private data collected by Windows Recall on Copilot PCs
Editor's take: Windows Recall continues to raise security concerns. Microsoft has redesigned the feature to improve data and identity protection following public outcry, but a new tool is now reigniting the controversy. I have to suspect that few people in their right mind would choose to enable or use it at this point.
Gmail encryption goes mobile, but email itself remains the weak link
Despite Google's best efforts, encrypted emails can still be a pain in the neck to deal with
Quantum computers might crack today's encryption far sooner than we thought
Encrypted banking information, cryptocurrency wallets, and other sensitive data may be in danger
Google sets 2029 deadline for quantum-safe encryption, years ahead of government targets
New post-quantum cryptography roadmap signals Q Day could arrive sooner than expected
Operation Alice: The dark web isn't as hidden as it seems, as global crackdown shows
A single operator ran hundreds of thousands of dark websites – now he's wanted
Qihoo 360 accidentally exposed a private SSL key, putting its platform at risk
An AI security tool designed to "never leak passwords" included its own private key in the installer
Meta is pulling the plug on Instagram's encrypted messages
The company says few people used the feature
Windows Secure Boot certificates are expiring after more than 15 years
Windows 11 and supported Windows 10 PCs will get updates automatically
Lawsuit alleges Meta can read WhatsApp messages despite encryption
Plaintiffs cite whistleblowers to argue that end-to-end encryption doesn't work as advertised