Month: June 2018

The Wi-Fi Alliance introduced on June 25, 2018 WPA3, a new Wi-Fi security standard that will address all known security issues affecting the previous Wi-Fi standards.

WPA3 adds new features to simplify Wi-Fi security, enable more robust authentication, and deliver increased cryptographic strength for highly sensitive data markets.

WPA3 offer two distinct modes of operation: WPA3-Personal and WPA3-Enterprise. WPA3-Personal is more resilient, password-based authentication. WPA3-Enterprise offers the equivalent of 192-bit cryptographic strength.

Read more about it here.

Cybersecurity firm Chronicle, owned by Alphabet, announced the launch of a new VirusTotal service that promises to reduce false positives.

VirusTotal Monitor is a new service that allows software developers to upload their creations, before they are published, to a private cloud store in VirusTotal. Files in this private bucket are scanned with all 70+ antivirus engines in VirusTotal on a daily basis, using the latest detection signature sets. As soon as a file is detected as malicious by an engine, both the software developer and anti-virus vendors are notified.

This is a big win for anti-virus vendors, who now have context about a detected file: Who is the company behind it, when was it released etc.

This is equally a big win for software developers, as they can upload their creations to Monitor at pre-publish stage, to ensure a release without issues.

Read more about it here.

Google Groups is a service from Google that provides discussion groups for people sharing common interests. By default, Google Groups are set to private; there have been a number of instances, however, where G Suite Administrators have accidentally shared sensitive information as a result of misconfigured Google Groups privacy settings. Google has published a G Suite update here.

According to a recent research by Kenna Security, thousands of organizations seem to be inadvertently leaking internal or customer information. Examples of real e-mails found during the research are past due invoices, password recovery information and GitHub credentials.

Read more about it here.