Cybersecurity News

1333 readers

7 users here now

Welcome to Cybersecurity News!

A community that collect news and other tidbits related to cybersecurity in all its domains.

There are no hard and fast rules regarding what to post here-- we are fine with both pop news articles and more technical pieces regarding cybersecurity.

We use a bot called flynnbot to repost some rss feed content but the majority of posts are human-curated.

New to Cybersecurity?

Here are some resources to get you started:

Related Communities

[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]

founded 1 year ago

MODERATORS

[email protected]

Code Vulnerabilities Put Proton Mails at Risk (www.sonarsource.com)

submitted 1 year ago by [email protected] to c/[email protected]

3 comments fedilink hide all child comments

Key Information

In June 2022, the Sonar Research team discovered critical code vulnerabilities in multiple encrypted email solutions, including Proton Mail, Skiff, and Tutanota.
These privacy-oriented webmail services provide end-to-end encryption, making communications safe in transit and at rest. Our findings affect their web clients, where the messages are decrypted, mobile clients were not affected.
The vulnerabilities would have allowed attackers to steal emails and impersonate victims if they interacted with malicious messages. Nearly 70 million users were at risk on Proton Mail alone.
The issue has been fixed and there are no signs of in-the-wild exploitation.

top 3 comments

sorted by: hot top controversial new old

[–] [email protected] 28 points 1 year ago (2 children)

Discovered, reported and fixed shortly after. The headline is catchy but the article is more about the process of how it all went down last year.

Also found this noteworthy:

"We would like to thank the Proton Mail team for their fast and professional handling of our report. They also awarded us with a $750 USD bug bounty, which we happily donated to charity."

[–] [email protected] 11 points 1 year ago

Well said. Not to mention the article title calls out Proton but it's basically all the noteworthy e2ee email products. Very click baity

[–] [email protected] 10 points 1 year ago

Now this, this is how you know a company really cares about it's users. Sure $750 probably isn't going to affect their bottom line much but still, it's $750 just handed to some people for securing their customers.