Today we are announcing the release of SecureDrop 0.4.3. Read More

The release of the next version of SecureDrop, 0.4.3, is scheduled for September 12th, 2017. We will send out another notification through our blog on securedrop.org, Twitter, and the support portal when the release goes live. Read More

We have recently become aware of attacks attempting to exfiltrate data from the SecureDrop airgapped Secure Viewing Station. These attacks come in the form of QR codes that journalists must scan with an internet-connected device such as a phone. The QR code contains a link that sends exfiltrated data from the airgap environment to an attacker. Read More

Today we are announcing the release of SecureDrop 0.4.2. This is a bugfix release to fix an issue with the AppArmor profile for Apache, which caused the Source and Journalist Interface web applications to fail. The root of the problem was an implicit dependency on upstream AppArmor abstractions from the Tor package, which has been resolved. Read More

Today we are announcing the release of SecureDrop 0.4.1. This is a bugfix release to fix an issue with one of the scripts that configures the Tails workstation environment. If you encountered a permissions issue when running securedrop-admin tailsconfig, this release will fix that issue.  Read More

Today we are announcing the release of SecureDrop 0.4. Read More

The release of the next version of SecureDrop, 0.4, is scheduled for July 25th, 2017. We will send out another notification through this blog on securedrop.org, Twitter, and the support portal when the release goes live. Read More

Today we are announcing the release of SecureDrop 0.3.12. This release disables swap functionality on the Application Server, as originally intended by the first-run config used during install time. Instances will upgrade automatically, and any existing swap partitions will be deactivated, scrubbed, and disabled permanently. Read More