Menu

Category Archives: All

Everything

First ‘Clipper’ Malware Discovered on Google Play
Managing Enterprise Security After the Data Supernova
Crypto mirror on the wall, who’s the smartest of them all?
Automatic 4K/HD for YouTube extension pulled from Chrome Store for pop-up ad abuse
Accused hacker Lauri Love tries to retrieve Fujitsu lappie and other gear from Britain’s FBI in court
Oh dear, Lads: Spam marketing bosses banned from forming UK firms for clobbering folk with 500k calls and texts
McDonalds app users hatin’ it after being hacked by hungry hamburglars
Secret Service busts online car sales crime ring
What comes after air gaps? DARPA asks world for ideas
Some OkCupid users have their accounts compromised. Why don’t more dating apps use 2FA?
Get-rich-quick social media scams are turning teens into money mules
You can now unsend messages in Facebook Messenger
QNAP NAS user? You’d better check your hosts file for mystery anti-antivirus entries

security update

Botched Mumsnet update allowed users to see details of strangers’ accounts
These iOS apps have been secretly recording your screen activities
Flaws in RDP protocols leaving machines prone to remote code execution
Upcoming Firefox version to offer fingerprinting & cryptomining protection
New cryptocurrency malware SpeakUp hits Linux & Mac devices
Crypto exchange loses access to $145M after CEO dies without giving password
Top 10 Best Antivirus software for 2019
World’s largest data dump surfaces on web with 2.2 billion accounts
Clipper malware on Play Store replaces users BTC & ETH wallet address
EU Parliament Clears a Path to Give Snowden Asylum
Still fuming over HTTPS mishap, Google makes Symantec an offer it can
Teen Who Hacked CIA Director
Vint Cerf and 260 experts give FCC a plan to secure Wi-Fi routers
Journalist convicted of helping Anonymous hack the LA Times
Security awareness is our shared responsibility
10 cutting-edge security threats
CSOs could see 7% raise next year
Arrest of 14-Year-Old Student for Making a Clock: the Fruits of Sustained Fearmongering and Anti-Mus
Alleged SIM swapping crypto-crooks cuffed, iOS app snooping, ad-fraud botnets, and more
Big trouble Down Under as Australian MPs told to reset their passwords amid hack attack fears
Google Boosts Encryption For Low-End Android Devices
Theory: ‘Simple Hack’ Behind Bezos’ Alleged Compromising Images

Reading Time: ~2 min. Members of British Parliament Targeted by Phishing Attack Dozens of MPs from the UK were recently subjected to malicious spam and unauthorized solicitations via their mobile devices. Fortunately, as this wasn’t the first phishing attempt on MPs, many were quick to delete any unusual messages and quickly warned others to do […]

Cop films chap on body-worn cam because he ‘complains about cops a lot’. Chap complains
Android vulnerabilities open Pie to booby-trapped image attacks
FireOS Flaw Allowed Limited Content Injection in Amazon Tablets
iPhone apps record your screen sessions without asking
Webroot dunked in Carbonite: Should be quite well protected – if it survives the freezing process, that is
Update your iOS devices now against the FaceTime eavesdropping bug
Child abuse imagery found in cryptocurrency blockchain
Leaky child-tracking smartwatch maker hits back at bad PR
EE customer: Creepy ex used employee access to change my mobile number, spy on me
Student gets creative with data accidentally blasted out by university
Police tell Waze to stop pinpointing their checkpoints
Facebook ordered to keep apps separate unless users opt in to sharing
OK, Google. Music in 2019 isn’t what it was, but Play nice, will ya?
Housing biz made to pay £1.5k for sticking fingers in its ears when served a subject access request
US lawmakers furious (again) as mobile networks caught (again) selling your emergency location data to bounty hunters (again)

Reading Time: ~2 min. I’m excited to share that Webroot has entered into an agreement to be acquired by Carbonite, a leader in cloud-based data protection for consumers and businesses. Why do I think this is such good news for customers, partners and our employees?   For customers and partners, the combined Webroot and Carbonite will […]

Apple puts bullet through ‘Do Not Track’, FaceTime snooping bug and iOS vulnerabilities
Apple Fixes Pesky FaceTime Bug in iOS 12.1.4 Update

security update

ThreatList: Latest DDoS Trends by the Numbers
Get TotalAV Essential AntiVirus for $19.99 (80% off)
Accused hacker Lauri Love to sue National Crime Agency to retrieve confiscated computing kit

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Mumsnet breached: Moaning parents could see other users’ privates after cloud migration

Reading Time: ~4 min. In my blog, Password Constraints and Their Unintended Security Consequences, I advocate for the use of passphrases. Embedded in the comments section, one of our readers Ben makes a very astute observation: What happens when attackers start guessing by the word instead of by the letter? Then a four-word passphrase effectively becomes […]

Serious Security: Post-Quantum Cryptography (and why we’re getting it)
Flaw in Multiple Airline Systems Exposes Passenger Data
KeySteal could allow someone to steal your Apple Keychain passwords
Google Chrome extension warns if your password has been leaked
Anyone want to lay claim to the USB drive found in seal poo?
Chrome extension warns users their login credentials have been breached
Unlimited crypotocurrency? Zcash fixes counterfeiting flaw
DanaBot updated with new C&C communication

ESET researchers have discovered new versions of the DanaBot Trojan, updated with a more complicated protocol for C&C communication and slight modifications to architecture and campaign IDs The post DanaBot updated with new C&C communication appeared first on WeLiveSecurity

Trakt app users’ personal data exposed: We were hit by a ‘PHP exploit’… back in 2014
At least Sony offered a t-shirt, says macOS flaw finder: Bug bounties now for Macs if you want this 0-day, Apple
Who are the last people you’d expect to spill thousands of student records? A computer science dept? What a fantastic guess
Smashing Security #114: Darknet Diaries, death, and beauty apps
It’s 2019, and a PNG file can pwn your Android smartphone or tablet: Patch me if you can
MacOS Zero-Day Exposes Apple Keychain Passwords

security update

Clever Phishing Attack Enlists Google Translate to Spoof Login Page
Google rolls out Chrome extension to warn you about compromised logins

The new tool aims to help in an age when billions of login credentials are floating around the internet The post Google rolls out Chrome extension to warn you about compromised logins appeared first on WeLiveSecurity

What are Data Manipulation Attacks, and How to Mitigate Against Them
Patch your Android now against critical .PNG image bug
Microsoft Confirms Serious ‘PrivExchange’ Vulnerability
Accused hacker Laurie Love to sue National Crime Agency to retrieve confiscated computing kit
Modern Cybercrime: It Takes a Village
Jack’d dating app is showing users’ intimate pics to strangers

Reading Time: ~3 min. The WordPress website platform is a vital part of the small business economy, dominating the content management system industry with a 60% market share. It gives businesses the ability to run easily-maintained and customizable websites, but that convenience comes at a price. The easy-to-use interface has given even users who are […]

London’s Met police confess: We made just one successful collar in latest facial recog trial
Firefox 66 will silence autoplaying web audio
Every day should be Safer Internet Day
Just two hacker groups are behind 60% of stolen cryptocurrency
Digital signs left wide open with default password
I won’t bother hunting and reporting more Sony zero-days, because all I’d get is a lousy t-shirt
IoT Scale Flaws Enable Denial of Service, Privacy Issues
Google: All your leaked passwords are belong to us – here’s a Chrome extension to find them

security update

Risk Level: Very Low. Type: Trojan.