Secure Planet Training Courses Updated For 2019 - Click Here

There are new available articles, click to refresh the page.

S3 Ep137: 16th century crypto skullduggery

By: Paul Ducklin — June 1^st 2023 at 16:45

Lots to learn, clearly explained in plain English... listen now! (Full transcript inside.)

s3-ep137-feat-1200

Serious Security: Verification is vital – examining an OAUTH login bug

By: Paul Ducklin — May 30^th 2023 at 16:59

What good is a popup asking for your approval if an attacker can bypass it simply by suppressing it?

Serious Security: OAuth 2 and why Microsoft is finally forcing you into it

By: Paul Ducklin — October 10^th 2022 at 14:02

Microsoft calls it "Modern Auth", though it's a decade old, and is finally forcing Exchange Online customers to switch to it.

GitHub issues final report on supply-chain source code intrusions

By: Paul Ducklin — April 29^th 2022 at 16:15

Learn how to find out which apps you've given access rights to, and how to revoke those rights immediately in an emergency.