Menu



Gallery

UK Computer Misuse Act convictions declined last year despite pandemic explosion in online criminal activity
May 21, 2021
Here’s how we got persistent shell access on a Boeing 747 – Pen Test Partners
May 21, 2021
Google’s ‘Ask me anything’ on Privacy Sandbox was more about questions than answers
May 21, 2021
In search of good cybersecurity
May 21, 2021
Doncaster insurance firm One Call hit by not-dead-at-all Darkside ransomware gang
May 21, 2021
Toyota rear-ended by twin cyber attacks that left ransomware-shaped dents
May 21, 2021
S3 Ep33: Eufy camera leak, Afterburner crisis, and AirTags (again) [Podcast]
May 20, 2021
UK data regulator fines American Express up to 0.021p per email after opted-out folk spammed 4.1 million times
May 20, 2021
Regulator fines COVID-19 tracker for turning contact data into sales leads
May 19, 2021
Miscreants started scanning for Exchange Hafnium vulns five minutes after Microsoft told world about zero-days
May 19, 2021
Uptime funk: Microsoft has lifted availability of Azure Key Vault to 99.99%
May 19, 2021
Australian Federal Police hiring digital evidence retrieval specialists: Being a very good boy and paws required
May 19, 2021
The Microsoft Authenticator extension in the Chrome store wasn’t actually made by Microsoft. Oops, Google
May 19, 2021
New Zealand hospitals infected by ransomware, cancel some surgeries
May 19, 2021
Us? Pwn SolarWinds? With our reputation? Russian spy chief makes laughable denial of supply chain attack
May 18, 2021
Business-intelligence-company-turned-Bitcoin-addict MicroStrategy grabs another $10m crypto-coin fix
May 18, 2021
The UK loves cybersecurity so much, it’s going to regulate managed service providers’ infosec practices in law
May 18, 2021
1Password unsheathes Rusty key, hopes to unlock Linux Desktop world
May 18, 2021
Latest phones are great at thwarting Wi-Fi tracking. Other devices, not so much – study
May 18, 2021
Eufycam Wi-Fi security cameras streamed video feeds from other people’s homes
May 17, 2021
Axa insurance offshoots pwned as Ireland reveals second ransomware hit
May 17, 2021
“Those aren’t my kids!” – Eufy camera owners report video mixups
May 17, 2021
We’d love to report on the outcome of the CREST exam cheatsheet probe, but UK infosec body won’t publish it
May 17, 2021
7 keys to selecting a low-code platform
May 17, 2021
Mammoth grab of GP patient data in the UK set to benefit private-sector market access as rules remain unchanged
May 17, 2021
Apple sent my data to the FBI, says boss of controversial research paper trove Sci-Hub
May 17, 2021
Singapore bolsters Bluetooth contact-tracing as new COVID wave sends students and workers home again
May 17, 2021
China signals dissatisfaction with gig economy impact on ride-share drivers
May 17, 2021
Apple AirTag hacked again – free internet with no mobile data plan!
May 14, 2021
Free SANS Cyber Security Summits: Sign up now, learn online, keep your network safe
May 14, 2021
Tor users, beware: ‘Scheme flooding’ technique may be used to deanonymize you
May 14, 2021
Hospitals cancel outpatient appointments as Irish health service struck by ransomware
May 14, 2021
NHS-backed org reacted to GitHub leak disclosure with legal threats and police call, complains IT pro
May 14, 2021
Don’t migrate your problems to the cloud
May 14, 2021
Cloudflare launches campaign to ‘end the madness’ of CAPTCHAs
May 14, 2021
Gamers beware! Crooks take advantage of MSI download outage…
May 14, 2021
Ransomware victim Colonial Pipeline paid $5m to get oil pumping again, restored from backups anyway – report
May 13, 2021
S3 Ep32: AirTag jailbreak, Dell vulns, and a never-ending scam [Podcast]
May 13, 2021
Colonial Pipeline was looking to hire cybersecurity manager before ransomware attack shut down operations
May 13, 2021
Oops, says Manchester City Council after thousands of number plates exposed in parking ticket spreadsheet
May 13, 2021
When it comes to cybersecurity, there’s always time for summer school or winter training
May 13, 2021
Apple’s Find My network can be abused to leak secrets to the outside world via passing devices
May 12, 2021
Happy to pay out to ransomware masterminds? Yup, we thought so
May 12, 2021
Tempted by cryptocoins? Fake trading apps get personal…
May 12, 2021
Britain to spend £22m influencing Indo-Pacific nations’ cybersecurity policies against ‘authoritarian regimes’
May 12, 2021
Blessed are the cryptographers, labelling them criminal enablers is just foolish
May 12, 2021
Beijing twirls ban-hammer at 84 more apps it says need to stop slurping excess data
May 12, 2021
South Korea orders urgent review of energy infrastructure cybersecurity
May 12, 2021
Tech industry quietly patches FragAttacks Wi-Fi flaws that leak data, weaken security
May 12, 2021
SolarWinds CEO describes overhauled Orion build system after that ‘very small, unique’ security breach
May 11, 2021
Microsoft emits more fixes for Exchange Server plus patches for remote-code exec holes in HTTP stack, Visual Studio
May 11, 2021
UK’s Computer Misuse Act to be reviewed, says Home Secretary as she condemns ransomware payoffs
May 11, 2021
NHS App gets go-ahead for vaccine passport use despite protest from privacy groups
May 11, 2021
App Tracking: Apps plead for users to press allow, but 85% of Apple iOS consumers are not opting in
May 11, 2021
Apple AirTag jailbroken already – hacked in rickroll attack
May 11, 2021
Compsci boffin publishes proof-of-concept code for 54-year-old zero-day in Universal Turing Machine
May 11, 2021
Train operator phlunks phishing test by teasing employees with non-existent COVID bonus
May 11, 2021
Tencent research team scores free powerups for electric cars with Raspberry Pi-powered X-in-the-middle attack
May 11, 2021
Indian government says 5G doesn’t cause COVID-19. Also points out India has no 5G networks
May 11, 2021
Trend Micro hosted email service is down, inboxes still stuck in cloudy limbo
May 11, 2021
Never say never! Warren Buffett caught up in integer overflow error…
May 10, 2021
Kubecon 2021: A largely dry and corporate affair where the best bits involved a spot of Kubernetes-hacking roleplay
May 10, 2021
Uncle Sam wants ‘ethical hackers’ to crack its planetary defenses, but don’t expect a pay-day from this bug bounty
May 10, 2021
Namecheap hosted 25%+ of fake UK govt phishing sites last year – NCSC report
May 10, 2021
US declares emergency after ransomware shuts oil pipeline that pumps 100 million gallons a day
May 10, 2021
Russian cyber-spies changed tactics after the UK and US outed their techniques – so here’s a list of those changes
May 7, 2021
Privacy activist Max Schrems on Microsoft’s EU data move: It won’t keep the NSA away
May 7, 2021
When not to use edge computing
May 7, 2021
Cisco HyperFlex web interface has critical flaw that lets attackers get root and execute arbitrary commands
May 7, 2021
Kids in Hong Kong and other highly surveilled states worry infosec careers are just asking for trouble
May 7, 2021
Google Play to require privacy labels on apps in 2022, almost two years after Apple
May 7, 2021
Google will make you use two-step verification to login
May 7, 2021
Vulnerability in Snapdragon 855 SoCs could pwn Android modems, allow baddies to snoop on conversations
May 6, 2021
S3 Ep31: Apple zero-days, Flubot scammers and PHP supply chain bug [Podcast]
May 6, 2021
Firefox for Android gets critical update to block cookie-stealing hole
May 6, 2021
Crane horror Reg reader uses his severed finger to unlock Samsung Galaxy phone
May 6, 2021
Chrome on Windows turns on Intel, AMD chip-level defenses against malicious websites
May 6, 2021
JET engine flaws can crash Microsoft’s IIS, SQL Server, say Palo Alto researchers
May 6, 2021
21 nails in Exim mail server: Vulnerabilities enable ‘full remote unauthenticated code execution’, millions of boxes at risk
May 5, 2021
East London council blurts thousands of residents’ email addresses in To field blunder
May 5, 2021
Dell fixes exploitable holes in its own firmware update driver – patch now!
May 5, 2021
Twilio’s private GitHub repositories cloned by Codecov attacker, cloud comms platform confirms
May 5, 2021
What not to expect when you’re expecting: Fertility apps may be selling intimate health secrets
May 5, 2021
‘Millions’ of Dell PCs will grant malware, rogue users admin-level access if asked nicely
May 4, 2021
Red Hat open-sources StackRox Kubernetes security product
May 4, 2021
Apple products hit by fourfecta of zero-day exploits – patch now!
May 4, 2021
Apple patches iOS, macOS, iPadOS, watchOS, kitchen-sinkOS bugs said to be exploited in the wild
May 4, 2021
Naked Security Live – Beware ‘Flubot’: the home delivery scam with a difference
May 3, 2021
Bill to protect UK against harmful foreign investment becomes law
April 30, 2021
PHP community sidesteps its third supply chain attack in three years
April 30, 2021
Happy Friday? Darktrace gets 40 per cent boost on London IPO debut
April 30, 2021
Australia proposes teaching cyber-security to five-year-old kids
April 30, 2021
Stealthy Linux backdoor malware spotted after three years of minding your business
April 29, 2021
BadAlloc: Microsoft looked at memory allocation code in tons of devices and found this one common security flaw
April 29, 2021
Vivaldi update unleashes the ‘Cookie Crumbler’ to simply block any services asking for consent (sites may break)
April 29, 2021
S3 Ep30: AirDrop worries, Linux pests and ransomware truths [Podcast]
April 29, 2021
Billions in data protection lawsuits rides on Google’s last-ditch UK Supreme Court defence for Safari Workaround sueball
April 29, 2021
48 ways you can avoid file-scrambling, data-stealing miscreants – or so says the Ransomware Task Force
April 29, 2021
When you’re building a cybersecurity pro, you need to get the foundations right
April 29, 2021
Digital Ocean springs a leak: Miscreant exploits hole to peep on unlucky customers’ billing details for two weeks
April 29, 2021