Menu



Gallery

Razer to fix Windows installer that grants admin powers if you plug in a mouse
August 23, 2021
38 million records exposed by misconfigured Microsoft Power Apps. Redmond’s advice? RTFM
August 23, 2021
Worried ransomware merchants know more about file storage than you do? You should be…
August 23, 2021
What’s *THAT* on my 3D printer? Cloud bug lets anyone print to everyone
August 23, 2021
Facebook sat on report that reveals most-shared post for months was questionable COVID story
August 23, 2021
Japanese cryptocoin exchange robbed of $100,000,000
August 20, 2021
Cloud load balancer snafu leads to 3D printer user printing on a stranger’s kit
August 20, 2021
UK’s Surveillance Camera Commissioner grills Hikvision on China human rights abuses
August 20, 2021
Buyout of British defence supplier Ultra Electronics paused by UK.gov over competition concerns
August 19, 2021
S3 Ep46: Copyright scams, video snooping and Grand Theft Crypto [Podcast]
August 19, 2021
How to use Auth0 with Node.js and Express
August 19, 2021
After reportedly dragging its feet, BlackBerry admits, yes, QNX in cars, equipment suffers from BadAlloc bug
August 19, 2021
OK, so you stole $600m-plus from us, how about you be our Chief Security Advisor, Poly Network asks thief
August 18, 2021
Researchers find high-severity command injection vuln in Fortinet’s web app firewall
August 18, 2021
Un-carrier? Definitely Unsecure: T-Mobile US admits 48m customers’ details stolen after downplaying reports
August 18, 2021
China orders annual security reviews for all critical information infrastructure operators
August 18, 2021
Apple says its CSAM scan code can be verified by researchers. Corellium starts throwing out dollar bills
August 17, 2021
Video surveillance network hacked by researchers to hijack footage
August 17, 2021
If you haven’t updated your ThroughTek DVR since 2018 do so now, warns Mandiant as critical vuln surfaces
August 17, 2021
The cloud changes the game for cybersecurity incident response – here’s how to master the new rules
August 17, 2021
British defence supplier Ultra Electronics to be sold for £2.6bn to US-controlled firm
August 17, 2021
Pakistan’s tax office services go dark after migration project goes awry
August 17, 2021
Remote code execution flaws lurk in countless routers, IoT gear, cameras using Realtek Wi-Fi module SDKs
August 16, 2021
T-Mobile US probes claims of 100m stolen customer records up for sale on dark web
August 16, 2021
Copyright scammers turn to phone numbers instead of web links
August 16, 2021
Dallas cops lost 8TB of criminal case data during bungled migration, says the DA… four months later
August 16, 2021
Apple’s iPhone computer vision has the potential to preserve privacy but also break it completely
August 16, 2021
I was offered $500k as a thank-you bounty for pilfering $600m from Poly Network, says crypto-thief
August 14, 2021
Fancy joining the SAS’s secret hacker squad in Hereford as an electronics engineer for £33k?
August 13, 2021
Before I agree to let your app track me everywhere, I want something ‘special’ in return (winks)…
August 13, 2021
United Nations calls for moratorium on sale of surveillance tech like NSO Group’s Pegasus
August 13, 2021
Re-volting: AMD Secure Encrypted Virtualization undone by electrical attack
August 13, 2021
China stops networked vehicle data going offshore under new infosec rules
August 13, 2021
FISMA’s a fizzer, says Cisco, and calls on Congress to get cyber security policy right – pronto
August 13, 2021
Huawei stole our tech and created a ‘backdoor’ to spy on Pakistan, claims IT biz
August 13, 2021
GitHub picks Friday 13th to kill off password-based Git authentication
August 12, 2021
US govt scores a point against Assange in run-up to extradition appeal showdown
August 12, 2021
Think your backups will protect you against ransomware? They’re top of the target list
August 12, 2021
Lockbit ransomware attack didn’t affect ops, claims Accenture amid lurid payoff rumours
August 12, 2021
S3 Ep45: Routers attacked, hacking tool hacked, and betrayers betrayed [Podcast]
August 12, 2021
COVID-19 cases surge as do sales of fake vaccination cards – around $100 for something you could get free
August 12, 2021
Singaporean telco leaked personal data of over 57,000 customers
August 12, 2021
Thief hands back at least a third of $600m in crypto-coins stolen from Poly Network
August 11, 2021
Hacker grabs $600m in cryptocash from blockchain company Poly Networks
August 11, 2021
Microsoft responds to PrintNightmare by making life that little bit harder for admins
August 11, 2021
Chinese espionage group targets Israel while suggesting the source could be Iran
August 11, 2021
Avast, ye takeover lawyers! Norton LifeLock to acquire security rival
August 11, 2021
Boffins propose Pretty Good Phone Privacy to end pretty invasive location data harvesting by telcos
August 11, 2021
$600m in cryptocurrencies swiped from Poly Network servers after security snafu
August 10, 2021
Microsoft Patch Tuesday bug drought: No, it’s not climate change or unexpected code quality improvements
August 10, 2021
Home and small business routers under attack – how to see if you are at risk
August 10, 2021
Solving authorization for software developers
August 10, 2021
We’ll drop SBOMs on UK.gov to solve Telecoms Security Bill’s technical demands, beams Cisco
August 10, 2021
Splunk spots malware targeting Windows Server on AWS to mine Monero
August 10, 2021
Apple responds to critics of CSAM scan plan with FAQs – says it’d block governments subverting its system
August 9, 2021
Black Hat security conference returns to Las Vegas – complete with hacks to quiet the hotel guest from hell
August 9, 2021
S3 Ep44: Unreported holes, retro computing, and tech support for malware [Podcast]
August 8, 2021
All your DNS were belong to us: AWS and Google Cloud shut down spying vulnerability
August 6, 2021
Conti ransomware affiliate goes rogue, leaks “gang data”
August 6, 2021
South Korea to test grenade-launching drones
August 6, 2021
Microsoft wonders if disabling just-in-time compilation of JavaScript improves browser security
August 6, 2021
America enlists Big Tech to help it develop and execute cyber security plans
August 6, 2021
US ‘dropped the ball’ on security by going it alone claims Huawei US CSO
August 6, 2021
Apple is about to start scanning iPhone users’ devices for banned content, warns professor
August 5, 2021
“Cobalt Strike” network attack tool patches crashtastic server bug
August 5, 2021
Got a cheap Cisco router in your home office? If it’s one of these, there’s an exposed RCE hole you need to plug
August 5, 2021
Das tut mir leid! Germany’s ruling party sorry for calling cops on researcher after she outed canvassing app flaws
August 5, 2021
Not all authentication is created equal – and that’s a good thing
August 5, 2021
Worried your data protection strategy is dated? Don’t let a ransomware infection prove you right
August 4, 2021
SolarWinds urges US judge to toss out crap infosec sueball: We got pwned by actual Russia, give us a break
August 4, 2021
Google: Linux kernel and its toolchains are underinvested by at least 100 engineers
August 4, 2021
UK data watchdog sees its approach to government health tech during COVID-19 outbreak as ‘pragmatic’
August 4, 2021
Legacy EDR. Yes, it’s a thing
August 4, 2021
Russia tells UN it wants vast expansion of cybercrime offenses, plus network backdoors, online censorship
August 3, 2021
Do you have a grip on the lifecycle security of your AWS-deployed applications?
August 3, 2021
BazarCaller – the malware gang that talks you into infecting yourself
August 3, 2021
UK’s Ministry of Defence coughs up bug bounties for crowdsourced pentesting
August 3, 2021
Shopping for execs: ID management biz Okta poaches Google’s veep of engineering to run product dev activities
August 3, 2021
Research finds cyber-snoops working for ‘Chinese state interests’ lurking in SE Asian telco networks since 2017
August 3, 2021
Credit-card-stealing, backdoored packages found in Python’s PyPI library hub
August 2, 2021
Nuisance call-blocking firm fined £170,000 for making almost 200,000 nuisance calls
August 2, 2021
PwnedPiper vulns have potential to turn Swisslog’s PTS hospital products into Swiss cheese, says Armis
August 2, 2021
Huawei to America: You’re not taking cyber-security seriously until you let China vouch for us
August 2, 2021
Zoom agrees to pay subscribers $25 to put its security SNAFUs behind it
August 2, 2021
Sysadmins: Why not simply verify there’s no backdoor in every program you install, and thus avoid any cyber-drama?
July 31, 2021
Here’s 30 servers Russian intelligence uses to fling malware at the West, beams RiskIQ
July 30, 2021
S3 Ep43: Apple 0-day, pygmy hippos, hive nightmares and Twitter hacker bust [Podcast]
July 30, 2021
Malware and Trojans, but there’s only one horse the boss man wants to hear about
July 30, 2021
We can’t believe people use browsers to manage their passwords, says maker of password management tools
July 30, 2021
Spam is Chipotle’s secret ingredient: Marketing email hijacked to dish up malware
July 29, 2021
Upcoming Android privacy changes include ability to blank advertising ID, and ‘safety section’ in Play store
July 29, 2021
Israeli authorities investigate NSO Group over Pegasus spyware abuse claims
July 29, 2021
Here’s a list of the flaws Russia, China, Iran and pals exploit most often, say Five Eyes infosec agencies
July 29, 2021
‘Woefully insufficient’: Biden administration’s assessment of critical infrastructure infosec protection
July 29, 2021
Over 100 Taiwanese political figures’ messages leaked outta LINE app
July 29, 2021
Microsoft researcher found Apple 0-day in March, didn’t report it
July 29, 2021
Security breaches where working from home is involved are costlier, claims IBM report
July 28, 2021
Iranian state-backed hackers posed as flirty Scouser called Marcy to target workers in defence and aerospace
July 28, 2021
UK’s National Cyber Security Centre needs its posh Westminster digs, says Cabinet Office, because of WannaCry
July 28, 2021
Google revamps bug bounty program
July 28, 2021