Menu

Gallery

International infosec rules delivered to make nations and non-state actors behave themselves online
This year’s biggest innovators? Hackers and cybercriminals. Again
Australia to track Coronavirus encounters with payment card records
Stick a fork in SGX, it’s done: Intel’s cloud-server security defeated by $30 chip and electrical shenanigans
Ex-missile systems worker jailed for breaching Official Secrets Act after last-second guilty plea
EncroChat hack evidence wasn’t obtained illegally, High Court of England and Wales rules – trial judges will decide whether to admit it
Ticketmaster cops £1.25m ICO fine for 2018 Magecart breach, blames someone else and vows to appeal
2020’s biggest innovators? Hackers and cyber-criminals, again, says Darktrace
Election security fears doused with reality: Top officials say Nov 3 ‘was the most secure in American history.’ The end
Kids’ gaming website Animal Jam breached after miscreants spot private AWS key on pwned Slack channel
UK Conservative Party used 10 million people’s names to derive their country of origin, ethnicity and religion according to ICO report
Swiss spies knew about Crypto AG compromise – and kept it from govt overseers for nearly 30 years
Samsung finally admitted to Google’s Enterprise Android Recommended club
Microsoft warns against SMS, voice calls for multi-factor authentication: Try something that can’t be SIM swapped
“Instant bank fraud” hoax is back – don’t spread fake news!
Try to avoid thinking of the internet as a flashy new battlefield, warns former NCSC chief
Now-patched Ubuntu desktop vulnerability allows privilege escalation
GNAP: OAuth the next generation
4 steps to DevSecOps in your software supply chain
Europe clamps down on cybersurveillance exports, pushes human rights focus
Microsoft emits 112 security hole fixes – including the cure for a Google-disclosed kernel vuln exploited in the wild
Radio Frequency fingerprinting of aircraft ADS-B transmitters? Boffins reckon they’ve cracked it
One more reason for Apple to dump Intel processors: Another SGX, kernel data-leak flaw unearthed by experts
Smishing attack tells you “mobile payment problem” – don’t fall for it!
EA Games’ Origin client contained privilege escalation vuln that anyone with user-grade access could exploit
Tim Berners-Lee asks everyone to do new biz a Solid and let him have another crack at fixing the Web’s privacy
Laptop mega-manufacturer Compal hit by DoppelPaymer ransomware – same one that hit German hospital
Zoom strong-armed by US watchdog to beef up security after boasting of end-to-end encryption that didn’t exist
RansomEXX trojan variant is being deployed against Linux systems, warns Kaspersky
Somebody’s Russian to meddle with UK coronavirus vaccine efforts, but GCHQ won’t take it lying down
Chinese hacking competition cracks Chrome, ESXi, Windows 10, iOS 14, Galaxy 20, Qemu, and more
Hackers work 24 hours a day – when will you schedule your security training?
Let’s Encrypt warns about a third of Android devices will from next year stumble over sites that use its certs
Ransomware crims read our bank balance and demanded the lot, reveals Scotland’s Dundee and Angus College
Black Friday – stay safe before, during and after peak retail season
Sodinokibi/REvil ransomware gang pwns British housing biz via suspected phishing attack
Snap-crappy: 183 Brit local authorities operate 80,000 CCTV cams between them, says surveillance watchdog
Ransomware attack shutters Brazilian courts. But did attackers breach the virtual machine divide?
Tech support scammer dialed random number and Australian Police’s cybercrime squad answered
Apple emits iOS, iPadOS, watchOS, macOS patches to fix three hijack-my-device flaws exploited in the wild
After Cummings’ Barnard Castle trip, cheeky Britons started using the word ‘vision’ in their passwords
Data protection scofflaws failed to pay £2m in fines from UK watchdog – and 68% of penalties are still outstanding
Deloitte’s ‘Test your Hacker IQ’ site fails itself after exposing database user name, password in config file
No, GitHub’s source code wasn’t hacked and posted on GitHub, says GitHub CEO
Proofpoint survey: IT security leaders worry about and are ill-prepared to defeat cyber-attacks
Criticalstudies.org sounds pretty important, right? Wrong: USA says it’s an Iranian fake news front
Revamped DLL side-load attack hits Myanmar
Feds throw book at eBay execs who deny they had anything to do with cyberstalking of site’s critics
If you’re an update laggard, buck up: Chrome zero-days are being exploited in the wild
Another Chrome zero-day, this time on Android – check your version!
Using OPA for cloud-native app authorization
IBM adds code risk analyzer to cloud-based CI/CD
Was that November’s Patch Tuesday? Already? Oh, no, it’s just Adobe issuing 14 emergency security fixes
Automation software slinger SaltStack warns of stop-watching-the-election-and-patch-now bugs
The death of the email attack ‘campaign’
None of our apps (except those 3) could secretly slurp Facebook user details, devs rage to High Court of England and Wales
How’s this for the ultimate gaming achievement? Half-Life 2’s Gnome Chompski is going to space – in real life
Oracle patches severe flaw in WebLogic Server that could be exploited ‘without the need for a username and password’
Protecting the NHS: NCSC fended off lots of meddling aimed at UK health orgs while ransomware ramped up
I’ll give you my passwords if you investigate police corruption, accused missile systems leaker told cops
CERT/CC: ‘Sensational’ bug names spark fear, hype – so we’ll give flaws our own labels… like Suggestive Bunny
Russian jailed for eight years in the US for writing code that sifted botnet logs for web banking creds for fraudsters
Are you protected from the latest threats to Industrial Control Systems?
Google’s home security package flies the Nest, Chocolate Factory pledges software support – for now
You can’t spell ‘electronics’ without ‘elect’: The time for online democracy has come
Google reCAPTCHA service under the microscope: Questions raised over privacy promises, cookie use
India securities regulator and stock exchanges worry that crims are exploiting lax work from home security
Windows kernel zero-day disclosed by Google’s Project Zero after bug exploited in the wild by hackers
The Russians are at it again: Zebrocy backdoor malware is evolving, Uncle Sam warns close to eve of presidential election
Adobe Flash – it’s the end of the end of the end of the road at last
Marriott fined £0.05 for each of the 339 million hotel guests whose data crooks were stealing for four years
Why, yes, you can register an XSS attack as a UK company name. How do we know that? Someone actually did it
On Friday the US starts Ender’s hacking game: All local teens can compete for scholarships in cybersecurity
How to plan a password security project
FBI “ransomware warning” for healthcare is a warning for everyone!
If you haven’t patched WebLogic server console flaws in the last eight days ‘assume it has been compromised’
Days before the US election, phishers net $2.3m from Wisconsin Republicans
Google Safari Workaround case inspires campaign to sue Facebook in UK’s High Court over Cambridge Analytica app
Ryuk this for a game of soldiers: Ransomware-flingers actively targeting hospitals in the US, cyber agencies warn
Buer Loader “malware-as-a-service” joins Emotet for ransomware delivery
Looking for good news on COVID-19? That’s exactly what cyber attackers want you to do
Lenovo to slap ThinkShield security standard for laptop line-up on its Motorola mobiles
Can we stop megacorps from using and abusing our data? That ship has sailed, ex-NSA lawyer argues in new book
French services outfit Atos told to pay $855m in trade secret pinching case
Malware never switches off – so why should your security supplier?
NSA: We’ve learned our lesson after foreign spies used one of our crypto backdoors – but we can’t say how exactly
Software engineer leaked UK missile system secrets and refused to hand cops his passwords, Old Bailey told
Three steps to data-centric security: Discovery, protection, and control
Experian vows to drag UK’s Information Commissioner’s Office to court after being told off for data-slurping practices
Trump’s official campaign website vandalized by hackers who ‘had enough of the President’s fake news’
India and USA to share high-quality satellite imagery and more under new pact
Zoom finally adds end-to-end encryption for all, for free – though there are caveats
Facebook “copyright violation” tries to get past 2FA – don’t fall for it!
Brit accused of spying on 772 people via webcam CCTV software tells court he’d end his life if extradited to US
Brit startup would like to beam 5G connectivity down at you from hydrogen-fuelled drones
Santander downplays ‘hack’ of PagoFX cash transfer biz, says nothing to worry about
Phone scamming – friends don’t let friends get vished!
Hackers rummaged about in Finnish psychotherapy clinic – now patients extorted with public data dump threats
Report: UK colleges face testing times with ageing kit, iffy connectivity, and some IT staff supporting 1k+ users
JavaScript-based address bar spoofing vulns patched in Safari, Yandex, Opera