Menu



Gallery

Ransomware crooks who broke into Merseyrail used director’s email address to brag about it – report
April 28, 2021
Gamers update! Nvidia patches GPU driver kernel escalation bugs
April 28, 2021
Brit MPs and campaigners come together to oppose COVID status certificates as ‘divisive and discriminatory’
April 28, 2021
Here’s what Russia’s SVR spy agency does when it breaks into your network, says US CISA infosec agency
April 27, 2021
Ransomware: don’t expect a full recovery, however much you pay
April 27, 2021
Washington DC police force confirms data breach after ransomware upstart Babuk posts trophies to Tor blog
April 27, 2021
Patched Exchange to head off Hafnium? You might only be halfway to safety
April 27, 2021
HashiCorp reveals exposure of private code-signing key after Codecov compromise
April 26, 2021
Security vendor Proofpoint snapped up by private equity for $12.3bn but still in search of profit
April 26, 2021
Naked Security Live – Just how (un)safe is AirDrop?
April 26, 2021
Scam victims find same fraudulent ads lurking on Facebook and Google even after flagging them up
April 26, 2021
Ethics isn’t a county east of London, but it’s the only way to look at security
April 26, 2021
GCHQ boss warns China can rewrite ‘the global operating system’ in its own authoritarian image
April 26, 2021
Cloud security threats are growing – crucially, is your skills toolkit keeping pace?
April 26, 2021
India orders takedowns of social media posts it claims harm fight against raging COVID-19 outbreak
April 26, 2021
Emotet malware self-destructs after cops deliver time-bomb DLL to infected Windows PCs
April 26, 2021
Homebrew fixes Cask repo GitHub Actions bug that would have let anyone sneak malicious code onto machines
April 26, 2021
Volunteer-run pirate Manga website attacked, loses hashed passwords, has ‘nobody’ to fix the mess
April 26, 2021
Computer security world in mourning over death of Dan Kaminsky, aged 42
April 25, 2021
Apple AirDrop has “significant privacy leak”, say German researchers
April 23, 2021
3 cloud architecture mistakes we all make, but shouldn’t
April 23, 2021
If you have a QNAP NAS, stop what you’re doing right now and install latest updates. Do it before Qlocker gets you
April 22, 2021
US aviation regulator warns of mid-air collision risk if Garmin TCAS boxes are not updated
April 22, 2021
Linux team in public bust-up over fake “patches” to introduce bugs
April 22, 2021
S3 Ep29: Anti-tracking, rowhammer problems and IoT vulns [Podcast]
April 22, 2021
MI5 wants to shed its cocktail-guzzling posho image – so it’s opened an Instagram account
April 22, 2021
Apple, you’ve AirDrop’d the ball: Academics detail ways to leak contact info of nearby iThings for spear-phishing
April 22, 2021
Asian buyers set for security spending spree to catch up on shabby strategies
April 22, 2021
Signal app’s Moxie says it’s possible to sabotage Cellebrite’s phone-probing tools with booby-trapped file
April 21, 2021
Do you expect me to talk? Yes, Mr Bond, I expect you to reply: 10k Brits targeted on LinkedIn by Chinese, Russian spies
April 21, 2021
Apple supplier Quanta Computer confirms it’s fallen victim to ransomware attack
April 21, 2021
UK.gov wants mobile makers to declare death dates for their new devices from launch
April 21, 2021
Half of Q1’s malware traffic observed by Sophos was TLS encrypted, hiding inside legit requests to legit services
April 21, 2021
When cryptography attacks – how TLS helps malware hide in plain sight
April 21, 2021
REvil ransomware gang claims it stole top-secret tech designs – including Apple lappies – from Quanta Computer
April 21, 2021
Your cloud security is static – and you’re open to more risk than you realize
April 21, 2021
Japan accuses Chinese military of cyber-attacks on its space agency
April 21, 2021
China broke into govt, defense, finance networks via zero-day in Pulse Secure VPN gateways? No way
April 20, 2021
Would be so cool if everyone normalized these pesky data leaks, says data-leaking Facebook in leaked memo
April 20, 2021
Firefox 88 patches bugs and kills off a sneaky JavaScript tracking trick
April 20, 2021
LinkedIn was vector for 10,000 hostile state recruiting efforts against Brits, warns MI5
April 20, 2021
We need to talk about criminal adversaries who want you to eat undercooked onion rings
April 20, 2021
Bank of England ponders minting ‘Britcoin’ to sit alongside the Pound
April 20, 2021
Who knew Uncle Sam had strike teams for SolarWinds, Exchange flaws? Well, anyway, they are disbanded
April 19, 2021
WordPress core contributor proposes treating Google FLoC as a security vulnerability
April 19, 2021
Won’t somebody please think of the children!!! UK to mount fresh assault on end-to-end encryption in Facebook
April 19, 2021
Codecov dev tool warns of stolen credentials from compromised script, undiscovered for two months
April 19, 2021
Sysadmin for FIN7 criminal cracking group gets 10 years in US prison for managing card slurping malware scam
April 19, 2021
Naked Security Live – To hack or not to hack?
April 19, 2021
Serious Security: Rowhammer is back, but now it’s called SMASH
April 19, 2021
Brit authorities could legally do an FBI and scrub malware from compromised boxen without your knowledge
April 19, 2021
Pakistan cut off Facebook, Twitter, WhatsApp, and Telegram – for just four hours
April 19, 2021
Russian infosec firm Positive Technologies trying to stay positive after US sanctions
April 16, 2021
Microsoft received almost 25,000 requests for consumer data from law enforcement over the last six months
April 16, 2021
S3 Ep28.5: Hacking back – is attack an acceptable form of defence? [Podcast]
April 16, 2021
Watchdog thinks Google tricked Australians into giving up data, sues. Judge semi-agrees
April 16, 2021
Mobile app security standard for IoT, VPNs proposed by group backed by Big Tech
April 15, 2021
It was Russia wot did it: SolarWinds hack was done by Kremlin’s APT29 crew, say UK and US
April 15, 2021
University of Hertfordshire pulls the plug on, well, everything after cyber attack
April 15, 2021
S3 Ep28: Pwn2Own hacks, dark web hitmen and COVID-19 privacy [Podcast]
April 15, 2021
Is it still possible to run malware in a browser using JavaScript and Rowhammer? Yes, yes it is (slowly)
April 15, 2021
Nigerian email scammer sent down for 40 months in the US, ordered to pay back $2.7m to victims
April 14, 2021
Report: Aussie biz Azimuth cracked San Bernardino shooter’s iPhone, ending Apple-FBI privacy standoff
April 14, 2021
What the FLoC? Browser makers queue up to decry Google’s latest ad-targeting initiative as invasive tracking
April 14, 2021
Chrome and Chromium updated after yet another exploit is found in browser’s V8 JavaScript engine
April 14, 2021
FBI hacks into hundreds of infected US servers (and disinfects them)
April 14, 2021
Spy agency GCHQ told me Gmail’s more secure than Microsoft 365, insists British MP as facepalming security bods tell him to zip it
April 14, 2021
FBI deletes web shells from hundreds of compromised Microsoft Exchange servers before alerting admins
April 14, 2021
Google Sites blight: Over 100,000 web pages for business form searches overrun with backdoor RATs
April 14, 2021
1Password targets developers with Secrets Automation, acquisition of SecretHub
April 13, 2021
NSA helps out Microsoft with critical Exchange Server vulnerability disclosures in an April shower of patches
April 13, 2021
IoT bug report claims “at least 100M devices” may be impacted
April 13, 2021
Cracked copies of Microsoft Office and Adobe Photoshop steal your session cookies, browser history, crypto-coins
April 13, 2021
Average convicted British computer criminal is young, male, not highly skilled, researcher finds
April 13, 2021
Want to turbo-charge your cybersec skills? It’s time to put yourself on the SPOT
April 13, 2021
Apple and Google block official UK COVID-19 app update
April 12, 2021
Mike Lynch-backed Darktrace to file for London IPO in aftermath of Deliveroo flop
April 12, 2021
Naked Security Live – How to spot “government” scammers
April 12, 2021
Stuxnet sibling theory surges after Iran says nuke facility shut down by electrical fault
April 12, 2021
United States’ plan to beat China includes dominating tech standards groups – especially for 5G
April 12, 2021
Texan’s alleged Amazon bombing effort fizzles: Militia man wanted to take out ‘about 70 per cent of the internet’
April 9, 2021
Pwn2Own 2021: Zoom, Teams, Exchange, Chrome and Edge “fully owned”
April 9, 2021
UK’s National Cyber Security Centre recommends password generation idea suggested by El Reg commenter
April 9, 2021
CyberBattleSim: Microsoft’s open-source Holodeck in which autonomous attackers, defenders battle it out
April 9, 2021
How do we stamp out the ransomware business model? Ban insurance payouts for one, says ex-GCHQ director
April 9, 2021
India uses controversial Aadhaar facial biometrics to identify COVID vaccination recipients
April 9, 2021
Italian charged with hiring “dark web hitman” to murder his ex-girlfriend
April 8, 2021
S3 Ep27: Census scammers, beg bounties and data breach fines [Podcast]
April 8, 2021
Belgian police seize 28 tons of cocaine after ‘cracking’ Sky ECC’s chat app encryption
April 8, 2021
What is unified policy as code, and why do you need it?
April 8, 2021
There’s a whole wide world of web application firewall options – so how do you choose the right one?
April 8, 2021
Indian defense chief admits China’s cyber-weapons would ‘disrupt large number of systems’ whenever Beijing presses the button
April 8, 2021
Another supply-chain attack? Android maker Gigaset injects malware into victims’ phones via poisoned update
April 7, 2021
Update on PHP source code compromise: User database leak suspected
April 7, 2021
Cybercrooks targeting UK organisations started 2020 strong only for attacks to wither away by Christmas
April 7, 2021
Atheists appeal to higher power for intercession over alleged sins against privacy
April 7, 2021
Too slow! Booking.com fined for not reporting data breach fast enough
April 6, 2021
SAP: It takes exploit devs about 72 hours to turn one of our security patches into a weapon against customers
April 6, 2021
Their ‘next job could be in cyber’: UK Cyber Security Council launches itself by pointing world+dog to domain it doesn’t own
April 6, 2021
What is operations-centric security?
April 6, 2021