Google Android malware

Google Kills 3rd-Party Cookies — but Monopolizes AdTech

Firefox looking good right now: “Privacy Sandbox” criticized as a proprietary, hypocritical, anti-competitive, self-serving contradiction ...
Security Boulevard
Google Chrome 3rd Party Cookies Crumbling — Finally!

Google Chrome 3rd Party Cookies Crumbling — Finally!

Om Nom Nom Nom Nom: Privacy Sandbox inching towards reality. But concerns remain ...
Security Boulevard
Google ‘Delays Making Less Money’ — Third-Party Cookie Ban on Hold

Google ‘Delays Making Less Money’ — Third-Party Cookie Ban on Hold

Google’s plan to kill third party cookies is delayed—yet again. And it’s probably not surprising ...
Security Boulevard
certificate Menlo states cyber

Shorter Certificate Cycles Shouldn’t Mean Ignoring Extended Validation

In terms of browser buzz, the imminent removal of tracking cookies has dominated the headlines. Chrome, for example, has announced it will remove support for third-party cookies in favor of privacy-preserving application ...
Security Boulevard
Chinese malware attack

Is Your VPN Tracking (and Leaking) User Activity?

The VPN industry touts all sorts of privacy protocols and encryption methods that purport to protect users. While this is, undoubtedly, important information, and is a decent way to compare and contrast ...
Security Boulevard
Cybersecurity Researchers Targeted, Three iOS Zero-Days, Google FLoC

Cybersecurity Researchers Targeted, Three iOS Zero-Days, Google FLoC

In episode 158: Cybersecurity researchers targeted by North Korean hackers, Apple patches three iOS zero-day exploits, and details on Google’s Federated Learning of Cohorts (FLoC) which may one day replace third-party cookie ...
Companies Can Build Accurate User Profiles from Online History, Mozilla Research Finds

Companies Can Build Accurate User Profiles from Online History, Mozilla Research Finds

Users are sometimes tracked online despite no-track options Online profiles are accurate most of the time Large companies can build online profiles with little available data Advertisers can quickly identify users from ...

Waving the White Flag: Why InfoSec should stop caring about HTTPOnly

As a company that is constantly working with our penetration testing clients on understanding where they should focus their efforts, qualifying risk is second-nature to us. On one hand, we never want ...
Safari

Apple Turns the Anti-Ad Thumbscrews With Safari Cookie Blocking

Apple’s latest salvo in the privacy war is to fully block third-party cookies in Safari—by default ...
Security Boulevard
It’s Okay, We’re All On the SameSite

It’s Okay, We’re All On the SameSite

With Google’s recent announcement that all cookies without a SameSite flag will be treated as having SameSite=Lax set by default in Chrome version 80, surely Cross-Site Request Forgery will be dead? Well, ...