Cyber Risks · Krebs on Security

US Government Sites Give Bad Security Advice

Summary: Krebs on Security reported in March 2020 that many U.S. government sites, including my2020census.gov, the GSA, Labor, Transportation and Veterans Affairs, display a banner stating that 'https:// ensures that you are connecting to the official website.' PhishLabs data cited in the article shows 74 percent of phishing sites were using SSL certificates by the end of 2019, up from 68 percent in Q3 and 54 percent in Q2.

Key Takeaway: Anyone can obtain an SSL certificate for free, so the padlock a security leader's users are trained to trust was already present on roughly three-quarters of phishing sites by the end of 2019.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related