Blog

The World Wide Web Consortium (W3C) announced that the Web Authentication API (WebAuthn) is an official web standard for password-free logins on the web. Source: W3C approves WebAuthn as the web standard for password-free logins
If you are running an older version of Elasticsearch, make sure you’ve patched its known vulnerabilities or consider upgrading. Source: Elasticsearch clusters face attacks from multiple hacker groups
Months-old problem means we haven’t had a slow ring release since last year. Source: Anti-cheat software causing big problems for Windows 10 previews
Careful what you plug into that USB-C connector. Source: Thunderbolt vulnerabilities leave computers wide-open
“It’s ridiculous vendors are replying to researchers via general counsel, not bug bounty.” Source: Plain wrong: Millions of utility customers’ passwords stored in plain text