Secure HTTPS websites for free using Let’s Encrypt

Google Chrome will display all non-HTTPS sites as “not secure” with the release of version 68 in July 2018HTTPS websites will also be ranked slightly higher in Google searches when compared to HTTP sites.

Let’s Encrypt is a free certificate authority that can be used to create HTTPS websites.  This project is managed by the non-profit Internet Security Research Group (ISRG).   Let’s Encrypt works well for low and medium traffic websites.  Websites that experience a great deal of web traffic or need warranty coverage should consider a paid certificate authority.  Let’s Encrypt certificates also expire every 90 days and have to be renewed.

Certbot is a free tool made by the Electronic Frontier Foundation (EFF)  in order to automatically use Let’s Encrypt certificates on manually-administrated websites to enable HTTPS.

More information is available at:

Adobe issues update to fix Flash Player using Office files to download malware

Adobe issued Security Bulletin APSB18-19 on June 7th 2018 regarding the Flash Player issue where Microsoft Office files used Flash Player to download malware.  Users should download the latest version of Adobe Flash Player at https://get.adobe.com/flashplayer/.

Microsoft also issued Security Advisory ADV180014 regarding the same issue.

Event ticket site Ticketfly reports data breach

Event ticket site Ticketfly, which merged with EventBrite last year, has reported a data breach of 27 million Ticketfly accounts in June 2018.  The leaked data consists of names, addresses, email addresses and phone numbers, but not credit or debit card information.   Ticketfly passwords were reset on Saturday, June 2.  The latest information on this breach can be found at https://support.ticketfly.com/customer/en/portal/articles/2941983-ticketfly-cyber-incident-update.