Menu



Gallery

A real loch mess: Navy larks sunk by a truculent torpedo
May 18, 2020
Dutch spies helped Britain’s GCHQ break Argentine crypto during Falklands War
May 18, 2020
Cyber attack against UK power grid middleman Elexon sparks in-house IT recovery efforts
May 15, 2020
You can’t have it both ways: Anti-coronavirus masks may thwart our creepy face-recog cameras, London cops admit
May 15, 2020
How scammers abuse Google Search’s open redirect feature
May 15, 2020
Top 10 most exploited vulnerabilities list released by FBI, DHS CISA
May 15, 2020
Microsoft joins encrypted DNS club with Windows 10 option
May 15, 2020
Vint Cerf suggests GDPR could hurt coronavirus vaccine development
May 15, 2020
Brit defense contractor hacked, up to 100,000 past and present employees’ details siphoned off – report
May 15, 2020
PrintDemon – patch this ancient Windows printer bug!
May 14, 2020
Woman stalked by sandwich server via her COVID-19 contact tracing info
May 14, 2020
Multi-part Android spyware lurked on Google Play Store for 4 years, posing as a bunch of legit-looking apps
May 14, 2020
‘iOS security is f**ked’ says exploit broker Zerodium: Prices crash for taking a bite out of Apple’s core tech
May 14, 2020
Update now! Windows gets another bumper patch update
May 14, 2020
There’s Norway you’re going to believe this: Government investment fund conned out of $10m in cyber-attack
May 14, 2020
US-CERT lists the 10 most-exploited security bugs and, yeah, it’s mostly Microsoft holes people forgot to patch
May 14, 2020
Aussie money-manager MyBudget goes down for five days
May 14, 2020
Now there’s nothing stopping the PATRIOT Act allowing the FBI to slurp web-browsing histories without a warrant
May 13, 2020
Senator Wyden demands deep probe into spyware after hacking toolkit offered to American cops by NSO Group
May 13, 2020
Stop tracking me, Google: Austrian citizen files GDPR legal complaint over Android Advertising ID
May 13, 2020
Beware the DHL delivery message email – it could be a package scam
May 13, 2020
Danger zone! Brit research supercomputer ARCHER’s login nodes exploited in cyber-attack, admins reset passwords and SSH keys
May 13, 2020
TikTok’s handling of child privacy gets another watchdog’s attention
May 13, 2020
Criminal forum trading stolen data suffers ironic data breach
May 13, 2020
Sadly, 111 in this story isn’t binary. It’s decimal. It’s the number of security fixes emitted by Microsoft this week
May 13, 2020
Researchers spot thousands of Android apps leaking user data through misconfigured Firebase databases
May 12, 2020
Thunderspy – why turning your computer off is a cool idea!
May 12, 2020
Dating app user logins found on hacking forum
May 12, 2020
India releases data-use protocols for its contact-tracing app… after five weeks and 100 million downloads
May 12, 2020
Papa don’t breach: Contracts, personal info on Madonna, Lady Gaga, Elton John, others swiped in celeb law firm ‘hack’
May 12, 2020
Incredible how you can steal data via Thunderbolt once you’ve taken the PC apart, attached a flash programmer, rewritten the firmware…
May 11, 2020
Celebrity personal data taken in ransomware attack
May 11, 2020
Mama mia! Nintendo in need of a plumber after leak sprays N64, GameCube, Wii code
May 11, 2020
The Internet of Things in 2020: More vital than ever
May 11, 2020
Clearview AI won’t sell vast faceprint collection to private companies
May 11, 2020
Microsoft opens IoT bug bounty program
May 11, 2020
One malicious MMS is all it takes to pwn a Samsung smartphone: Bug squashed amid Android patch batch
May 8, 2020
DEF CON is canceled… No, for real. The in-person event is canceled. We’re not joking. It’s canceled. We mean it
May 8, 2020
If you miss the happier times of the 2000s, just look up today’s SCADA gear which still have Stuxnet-style holes
May 8, 2020
More crypto-stealing Chrome extensions swatted by Google
May 8, 2020
Bored at home? Cisco has just the thing: A shed-load of security fixes to install, from a Kerberos bypass to crashes
May 7, 2020
FYI: Your browser can pick up ultrasonic signals you can’t hear, and that sounds like a privacy nightmare to some
May 7, 2020
More and more organizations are falling to ransomware – will you be next?
May 7, 2020
Vcrypt ransomware brings along a buddy to do the encryption
May 7, 2020
Senior MP tells UK Defence Committee on 5G security: Russia could become China’s cyber-attack dog
May 7, 2020
Fake news Facebook accounts used coronavirus to attract followers
May 7, 2020
Police nab InfinityBlack hackers
May 7, 2020
So you’ve set up MFA and solved the Elvish riddle, but some still think passwords alone are secure enough
May 7, 2020
California’s privacy warriors are back – and this time they want to take their fight all the way to the ballot box
May 6, 2020
Fake crypto-wallet extensions appear in Chrome Web Store once again, siphoning off victims’ passwords
May 6, 2020
GitHub blasts code-scanning tool into all open-source projects
May 6, 2020
Help us understand the shifting sands of network security: What’s working for you – and what’s not?
May 6, 2020
Firefox 76.0 released with critical security patches – update now
May 6, 2020
Air gap security beaten by turning PC capacitors into speakers
May 6, 2020
Now we know what the P really stands for in PwC: X-rated ads plastered over derelict corner of accountants’ website
May 6, 2020
Transport biz Toll Group suffers second ransomware infection in just three months
May 6, 2020
India acknowledges, but brushes aside, features-not-bugs in Aarogya Setyu virus contact-tracing app
May 6, 2020
Surprise surprise! Hostile states are hacking coronavirus vaccine research, warn UK and USA intelligence
May 5, 2020
GoDaddy hack: Miscreant goes AWOL with 28,000 users’ SSH login creds after vandalizing server-side file
May 5, 2020
GoDaddy – “unauthorized individual” had access to login info
May 5, 2020
We beg, implore and beseech thee. Stop reusing the same damn password everywhere
May 5, 2020
It has been 20 years since cybercrims woke up to social engineering with an intriguing little email titled ‘ILOVEYOU’
May 5, 2020
Firefox’s Private Relay service tests anonymous email alias feature
May 5, 2020
Reveal the identities of alleged pirates, court tells ISP
May 5, 2020
More Salt in their wounds: DigiCert hit as hackers wriggle through (patched) holes in buggy config tool
May 5, 2020
UK finds itself almost alone with centralized virus contact-tracing app that probably won’t work well, asks for your location, may be illegal
May 5, 2020
Apple-Google COVID-19 virus contact-tracing API to bar location-tracking access
May 5, 2020
OK, so you’ve air-gapped that PC. Cut the speakers. Covered the LEDs. Disconnected the monitor. Now, about the data-leaking power supply unit…
May 4, 2020
Sweet TCAS! We can make airliners go up-diddly-up whenever we want, say infosec researchers
May 4, 2020
UK COVID-19 contact tracing app data may be kept for ‘research’ after crisis ends, MPs told
May 4, 2020
ILOVEYOU: The Love Bug virus 20 years on – could it happen again?
May 4, 2020
AsSalt-ed at the weekend: Miscreants roast Ghost, LineageOS totters as Salt bug bites
May 4, 2020
Coronavirus pandemic coincides with spike in online puppy scams
May 4, 2020
Uncle Sam to agencies: No encrypted DNS for you!
May 4, 2020
Monday review – the hot 11 stories of the week
May 4, 2020
Xiaomi emits phone browser updates after almighty row over web activity harvested even in incognito mode
May 4, 2020
India makes contact-tracing app compulsory in viral hot zones despite most local phones not being smart
May 4, 2020
Singapore to require smartphone check-ins at all businesses and will log visitors’ national identity numbers
May 4, 2020
Spyware slinger NSO to Facebook: Pretty funny you’re suing us in California when we have no US presence and use no American IT services…
May 1, 2020
Google fights spammy extensions with new Chrome Web Store policy
May 1, 2020
COVID-19 prompts DHS warning to review Office 365 security
May 1, 2020
Android trojan EventBot abuses accessibility services to clear out bank accounts – fortunately, it’s ‘in preview’
May 1, 2020
What’s worse than an annoying internet filter? How about one with a pre-auth remote-command execution hole and there’s no patch?
May 1, 2020
Quibi, JetBlue, Wish, others accused of leaking millions of email addresses to ad orgs via HTTP referer headers
April 30, 2020
“Zero-click” mobile phone attacks – and how to avoid them
April 30, 2020
Bumper Adobe update fixes flaws in Magento, Bridge and Illustrator
April 30, 2020
Coronavirus delays trial of alleged Russian hacker a third time
April 30, 2020
Salt peppered with holes? Automation tool vulnerable to auth bypass: Patch now
April 30, 2020
In trying times like these, it’s reassuring to know you can still get pwned five different ways by Adobe Illustrator files
April 30, 2020
Academics demand answers from NHS over potential data timebomb ticking inside new UK contact-tracing app
April 29, 2020
Flaw in defunct WordPress plugin exploited to create backdoor
April 29, 2020
Twitter turns off SMS-based tweeting in most countries
April 29, 2020
ProtonMail-run website boasting ‘complete guide’ to GDPR left credential-baring .git repo exposed online
April 29, 2020
San Francisco trial of Russian bloke extradited and accused of hacking LinkedIn, Dropbox, Formspring stalls again amid pandemic lockdown
April 28, 2020
iPhone “word of death” could crash your phone – what you need to know
April 28, 2020
Nine million logs of Brits’ road journeys spill onto the internet from password-less number-plate camera dashboard
April 28, 2020
Coronavirus tracking tool from Apple and Google embraced by Germany
April 28, 2020
‘Evil GIF’ account takeover flaw patched in Teams
April 28, 2020
Warning! Fake Zoom “HR meeting” emails phish for your password
April 28, 2020
We’re going on a vuln hunt. We’re going catch a big one: Researchers find Windows bugs dominate – but fixes are fast
April 28, 2020