A flaw in Microsoft’s Azure Cosmos DB database product left more than 3,300 Azure customers open to complete unrestricted access by attackers
Is Azure CosmosDB really broken?
Tag: security
Don’t delete Windows10 root certificate expiring this month
Microsoft warns to don’t delete Windows10 root certificate expiring this month because it could cause problems with the operating system. Earlier this month, BornCity reported that the ‘Microsoft Root Authority‘ certificate in Microsoft’s Trusted Root Certification Authorities was expiring at the end of the month, on 12/31/20. While other newer Microsoft root certificates are not expiring this year, some users are concerned that the expiring certificate could prevent software, hardware, or the operating system from performing correctly. When we contacted Microsoft regarding the expiring root certificate, we were referred to a support…
How to install OpenSSL on Windows 10
I explain how to download and install OpenSSL on Windows 10. OpenSSL is a full-featured toolkit for the TLS and SSL protocols
Protect static files with ASP.NET Core
I explain how to Protect static files with ASP.NET Core Razor Pages and IdentityServer 4. Working with almost every extensions
Meet the Microsoft Pluton processor
The role of the Windows PC and trust in technology are more important than ever as our devices keep us connected and productive across work and life. Windows 10 is the most secure version of Windows ever, built with end-to-end security for protection from the edge to the cloud all the way down to the hardware. Advancements like Windows Hello biometric facial recognition, built-in Microsoft Defender Antivirus, and firmware protections and advanced system capabilities like System Guard, Application Control for Windows and more have helped Microsoft keep pace with the evolving threat landscape. Today, Microsoft alongside our…
Implement security workflow with Identity Server
The goal of this post is to implement security workflow with Identity Server 4 and C# among projects and services. With a bunch of examples, I’m going to show, practically, how to do it.
SSL Encryption
In this blog post, you will learn what SSL Encryption entails, what it is, how it helps secure communication over networks you use. Security issues bothering on confidentiality and privacy are some of the most significant problems we face today in our world of information and communications. Hackers who get hold of the login information of individuals can use the details to access sensitive data from their victims. Increasing cybersecurity threats, combined with the constantly evolving technology behind such threats, give rise to security-related concerns. So, online communications, including transactions,…
Web Browsers still allow drive-by-downloads in 2020
It’s 2020, and numerous browsers still allow drive-by-downloads from what is meant to be secure contexts such as sandboxed iframes. For those unfamiliar with the term, a drive-by-download is when a user visits a site, and a file download is initiated without the user’s interaction. This technique can be used to distribute unwanted software and malicious programs in the hopes that users will accidentally or mistakenly execute the downloads and get infected. New research from ad security firm Confiant shows that secure contexts such as sandboxed iframes can be abused to allow drive-by-downloads…