Visualização de leitura

Apple Challenges UK Demand For Access To Encrypted iCloud Data

Apple is challenging a UK order reportedly requiring access to encrypted iCloud data, reviving a wider dispute over privacy, security, and lawful access.

The post Apple Challenges UK Demand For Access To Encrypted iCloud Data appeared first on TechRepublic.

Smashing Security podcast #472: AI gets hacked, and BitLocker gets bypassed

What if your AI coding assistant could be tricked into stealing your own company's secrets - by reading a single booby-trapped bug report? No phishing email. No malware. No password ever stolen. Just an AI doing exactly what it was told. Meanwhile, someone themselves Nightmare Eclipse has decided to teach Microsoft a lesson. The result? Three zero-days dropped on the internet, one of which lets a thief with a USB stick walk straight past BitLocker. Microsoft is furious. Plus don't miss our featured interview with Son Nguyen Kim of Proton Pass, who explains why plugging AI agents into your email and calendar without thinking twice is rather like hiring a new employee with the keys to everything - and skipping the background check. All this and more in episode 472 of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Paul Ducklin.

Discord Launches End-to-End Encryption for Voice and Video Calls

end-to-end encryption

Discord has officially rolled out end-to-end encryption for all voice and video calls across its platform, marking a major shift in how the company approaches user privacy and secure communications. The company announced that every voice and video conversation on Discord is now protected with end-to-end encryption by default, with no opt-in required. The update applies to direct messages, group calls, voice channels, and Go Live streams across desktop, mobile devices, web browsers, and gaming consoles. The move comes at a time when several major social media companies are scaling back encryption features in messaging services, while others are expanding encrypted communication protections across platforms.

Discord Completes Multi-Year End-to-End Encryption Rollout

According to Discord, the rollout is the result of a multi-year engineering effort that began in 2023 when the company first started experimenting with encrypted voice and video communication. In September 2024, Discord introduced DAVE, an open and externally audited end-to-end encryption protocol designed specifically for voice and video communications at scale. Mark Smith, Vice President of Core Technology at Discord, said the company completed full migration to encrypted communications in March 2026. “As of early March 2026, every voice and video call on Discord is end-to-end encrypted by default,” Smith said in a company blog post. Discord stated that the transition was completed without requiring users to manually enable security settings or modify how they use the platform.

DAVE Protocol Designed for Cross-Platform Encryption

Discord explained that one of the biggest technical challenges involved supporting encrypted communication across a wide variety of devices and operating systems simultaneously. Unlike many messaging services that primarily support smartphones, Discord calls often include users connected through:
  • Desktop applications
  • Mobile phones
  • Web browsers
  • PlayStation consoles
  • Xbox devices
The company said the DAVE protocol was designed to maintain low-latency voice and video performance while enabling end-to-end encryption across all supported platforms. Discord also noted that the DAVE protocol and its implementation are open source and were independently audited by cybersecurity firm Trail of Bits. The company expanded its bug bounty program to include the encryption protocol as part of broader transparency and security testing efforts.

Firefox Compatibility Issue Addressed During Rollout

During development, Discord engineers encountered compatibility problems involving Mozilla Firefox that affected the encryption protocol’s performance in real-world calls. Instead of introducing temporary workarounds, Discord said its engineers collaborated directly with Mozilla developers to identify the root cause and implement fixes within Firefox itself. The company described the effort as part of its broader commitment to building encryption infrastructure that functions consistently across platforms without reducing user experience or call quality. According to Discord, encrypted calls now operate transparently for users without affecting performance or reliability.

Stage Channels Remain Excluded From End-to-End Encryption

While most communication services on Discord now support end-to-end encryption, the company confirmed that Stage channels remain excluded. Stage channels are designed for large-scale broadcasts, live events, community discussions, and AMA-style sessions involving larger audiences. Discord said the architecture of these channels differs from private conversations, making them unsuitable for the same encryption model currently used for direct voice and video communication. The company also revealed that it currently has no plans to extend end-to-end encryption to text messaging on the platform. Discord explained that many existing platform features were built around non-encrypted text systems, and redesigning them to support encrypted messaging would require significant engineering changes.

Encryption Debate Continues Across Social Media Industry

Discord’s announcement arrives during a period of shifting encryption policies across the technology sector. Several social media platforms have recently reduced or removed encrypted messaging capabilities, while companies such as Google and Apple have recently announced broader support for encrypted messaging between Android and iPhone users. Privacy advocates and cybersecurity experts continue debating the balance between stronger encryption protections, platform functionality, and law enforcement concerns surrounding encrypted communications. For Discord, the rollout positions the platform among a smaller group of major communication services now offering default end-to-end encryption for voice and video communication across multiple device ecosystems.

What is Bring Your Own Encryption (BYOE)?

Introduction to BYOE Against the backdrop of organizations undergoing massive adoption of cloud services, it is critical to protect information from unauthorized access. The fact remains that most of the cloud service providers provide that most cloud services deliver strong encryption as a built-in feature, much of that worry arises when such service providers alsoRead More

The post What is Bring Your Own Encryption (BYOE)? appeared first on EncryptedFence by Certera - Web & Cyber Security Blog.

The post What is Bring Your Own Encryption (BYOE)? appeared first on Security Boulevard.

DigiCert G1 Root Removal 2026: What It Means, Risks & Action Plan for Your TLS Infrastructure

DigiCert G1 Retirement 2026: A Turning Point in Web PKI Evolution Mozilla and Google Chrome will revoke the G1 root certificates of DigiCert on April 15, 2026. When the certificate you are using TLS chains to one of those roots, the browsers immediately do not trust it. A security warning is shown to your users.Read More

The post DigiCert G1 Root Removal 2026: What It Means, Risks & Action Plan for Your TLS Infrastructure appeared first on EncryptedFence by Certera - Web & Cyber Security Blog.

The post DigiCert G1 Root Removal 2026: What It Means, Risks & Action Plan for Your TLS Infrastructure appeared first on Security Boulevard.

TCP vs UDP: Difference, Examples, Future

Introduction When it comes to sending data over the internet, two main protocols dominate the landscape: TCP, which stands for Transmission Control Protocol, and UDP stands for User Datagram Protocol. These protocols are important since they determine how information is transferred from one device to another. But what exactly are they, and how are theyRead More

The post TCP vs UDP: Difference, Examples, Future appeared first on EncryptedFence by Certera - Web & Cyber Security Blog.

The post TCP vs UDP: Difference, Examples, Future appeared first on Security Boulevard.

Google warns quantum computers could hack encrypted systems by 2029

Banks, governments and tech providers urged to upgrade security because current systems will soon be obsolete

Banks, governments and technology providers need to be prepared for quantum computer hackers capable of breaking most existing encryption systems by 2029, Google has warned.

The tech company said in a blogpost that quantum computers would pose a “significant threat to current cryptographic standards” before the end of the decade and urged other companies to follow its lead.

Continue reading...

© Photograph: Reuters

© Photograph: Reuters

© Photograph: Reuters

❌