Menu



Gallery

UK snubs Apple-Google coronavirus app API, insists on British control of data, promises to protect privacy
April 28, 2020
Australian contact-tracing app leaks telling info and increases chances of third-party tracking, say security folks
April 28, 2020
5 common mistakes that lead to ransomware
April 27, 2020
Web shell warning issued by US and Australia
April 27, 2020
We could have pwned Microsoft Teams with a GIF, claims Israeli infosec outfit
April 27, 2020
Apple and Google tweak key bits of contact-tracing privacy plan
April 27, 2020
Rabobank security cert expires and gives its Australian Android app a case of internet-blindness
April 27, 2020
Australia’s contact-tracing app regulation avoids ‘woolly’ principles in comparable cyber-laws, say lawyers
April 27, 2020
Sophos XG firewalls hacked, hotfix ready. Texts wreck Apple iThings. Yup, business as usual in infosec world
April 26, 2020
Spyware maker NSO can’t claim immunity, Facebook lawyers insist – it’s time to face the music
April 24, 2020
Patch now! Microsoft issues unexpected Office fix
April 24, 2020
Shadow Broker leaked NSA files point to unknown APT group
April 24, 2020
AI helps experts find thousands of child sexual abuse imagery keywords
April 24, 2020
Canada’s .ca overlord rolls out free privacy-protecting DNS-over-HTTPS service for folks in Great White North
April 23, 2020
iPhone zero day – don’t panic! Here’s what you need to know
April 23, 2020
Trove of RubyGems malware highlights software supply chain issues
April 23, 2020
Password-free database of exercise app Kinomap leaks 42m user records
April 23, 2020
GCC 10 gets security bug trap. And look what just fell into it: OpenSSL and a prod-of-death flaw in servers and apps
April 23, 2020
Why should the UK pensions watchdog be able to spy on your internet activities? Same reason as the Environment Agency and many more
April 23, 2020
Get your free work-from-home IT security awareness training kit, courtesy of SANS
April 23, 2020
Vietnam alleged to have hacked Chinese organisations in charge of COVID-19 response
April 23, 2020
Zero-click, zero-day flaws in iOS Mail ‘exploited to hijack’ VIP smartphones. Apple rushes out beta patch
April 22, 2020
Stripe is absolutely logging your mouse movements on websites’ payment pages – for your own good, says CEO
April 22, 2020
After intense scrutiny, Zoom tightens up security with version 5. New features include not, er, spilling video calls to network snoops
April 22, 2020
Attention, lockdown DIY fans: UK hardware flinger Robert Dyas had credit card data and more skimmed from website
April 22, 2020
Porn scammers making $100,000 a month from sextortion emails
April 22, 2020
Attack of the clones: If you were relying on older Xilinx FPGAs to keep your product’s hardware code encrypted and secret, here’s some bad news
April 22, 2020
309 million Facebook users’ phone numbers found online
April 22, 2020
Yes, there’s lots of COVID-19-themed scuminess around – but otherwise the level of cybercrime is the same
April 22, 2020
Gaming company targeted by Chinese Winnti hackers
April 22, 2020
Free ebook for every reader: Unleash the power of your Apple fleet with Jamf
April 22, 2020
Netflix says subscriptions just boomed but tells investors it’s no money heist and they should expect stranger things
April 22, 2020
IBM == Insecure Business Machines: No-auth remote root exec exploit in Data Risk Manager drops after Big Blue snubs bug report
April 21, 2020
At last – a use for all those phishing emails you’ve been getting!
April 21, 2020
Frippin’ heck: Watch out, chin-stroking prog rock fans. King Crimson distributor Burning Shed says it’s been hacked
April 21, 2020
Something a bit phishy in your inbox? You can now email suspected frauds straight to Blighty’s web takedown cops
April 21, 2020
Facebook to alert us if we’ve been exposed to fake coronavirus news
April 21, 2020
Typosquatting RubyGems laced with Bitcoin-nabbing malware have been downloaded thousands of times
April 21, 2020
Weeks before US oil contract prices went negative, a spear-phishing crew went after oil firms. What did they get?
April 21, 2020
Google productises its own not-a-VPN secure remote access tool
April 21, 2020
Bad news: Cognizant hit by ransomware gang. Worse: It’s Maze, which leaks victims’ data online after non-payment
April 21, 2020
CFAA latest: Supremes to tackle old chestnut of what ‘authorized use’ of a computer really means in America
April 20, 2020
Maze ransomware hits US giant Cognizant
April 20, 2020
Fan vibrations can be used to transmit data from air-gapped machines
April 20, 2020
New sextortion scam: “High level of risk. Your account has been hacked.”
April 20, 2020
Bot creates millions of fake eyeballs to rip off smart-TV advertisers
April 20, 2020
Tor Project loses a third of staff in coronavirus cuts: Unlucky 13 out as nonprofit hacks back to core ops
April 20, 2020
Monday review – the hot 13 stories of the week
April 20, 2020
Ministry of Defence lowers supplier infosec standards thanks to COVID-19 outbreak
April 20, 2020
Contact-tracing or contact sport? Defections and accusations emerge among European COVID-chasing app efforts
April 20, 2020
Critical bug in Google Chrome – get your update now
April 17, 2020
That critical VMware vuln allowed anyone on your network to create new admin users, no creds needed
April 17, 2020
Google: We’ve blocked 126 million COVID-19 phishing scams in the last week
April 17, 2020
US offers up to $5m reward for information on North Korean hackers
April 17, 2020
GitHub users targeted by Sawfish phishing campaign
April 17, 2020
Europe publishes draft rules for coronavirus contact-tracing app development, on a relaxed schedule
April 17, 2020
India says ‘Zoom is a not a safe platform’ and bans government users
April 17, 2020
You’re a botnet, you’ve got a zero-day, so where do you go? After fiber, because that’s where the bandwidth is
April 16, 2020
TikTok announces “Family Pairing” – bust your moves but cap the risk
April 16, 2020
Bad news: So much of your personal data has been hacked that lesson manuals on how to use it are the latest hot property
April 16, 2020
49 malicious Chrome extensions caught pickpocketing crypto wallets
April 16, 2020
Update now! Windows zero-day flaws fixed in Patch Tuesday
April 16, 2020
United Nations reportedly tears up Tencent’s invite to its big 75th birthday bash
April 16, 2020
Stuck inside with time on your hands? The US govt would like to remind you it’s paying $5m for Nork hacking scalps
April 16, 2020
Linksys forces password reset for Smart Wi-Fi accounts after router DNS hack pointed users at COVID-19 malware
April 15, 2020
Zoom passwords for sale on the Dark Web – “ten-a-penny” by all accounts
April 15, 2020
Think before filling in that convenient flight refund form with all your delicious details – there’s a scam going about
April 15, 2020
Signal: We’ll be eaten alive by EARN IT Act’s anti-encryption wolves
April 15, 2020
WordPress WooCommerce sites targeted by card swiper attacks
April 15, 2020
Another day, another Google cull: Chocolate Factory axes 49 malicious Chrome extensions from web store
April 15, 2020
Apple: We respect your privacy so much we’ve revealed a little about what we can track when you use Maps
April 15, 2020
At least someone’s making out like a bandit: Scammers have pocketed $13m in Coronavirus fraud from the US this year
April 15, 2020
April 2020 and – rest assured – your Windows PC can still be pwned by something so innocuous as an unruly font
April 14, 2020
Let’s authenticate: Beyond Identity pitches app-wrapped certificate authority
April 14, 2020
TikTok users beware: Hackers could swap your videos with their own
April 14, 2020
ICANN asks registrars to crack down on scam coronavirus websites
April 14, 2020
Microsoft and Google delay online authentication change
April 14, 2020
Zoom adds Choose Your Own Routing Adventure to keep chats out of China
April 14, 2020
So how do the coronavirus smartphone tracking apps actually work and should you download one to help?
April 14, 2020
How to make a stranger’s insecure 3D printer halt-and-catch-fire – plus more alerts from infosec world
April 13, 2020
Sextortion emails and porn scams are back – don’t let them scare you!
April 10, 2020
The pains – and pleasures? – of network security: Tell us exactly what you think about this corner of business IT
April 10, 2020
Ransomware scumbags leak Boeing, Lockheed Martin, SpaceX documents after contractor refuses to pay
April 10, 2020
Signal sends smoke, er, signal: If Congress cripples anonymous speech with EARN IT Act, we’ll shut US ops
April 9, 2020
Fleeceware on your iPhone? Don’t get caught out while penned up at home
April 9, 2020
Consumer reviewer Which? finds CAN bus ports on Ford and VW, starts yelling ‘Security! We have a problem…’
April 9, 2020
Google removes Android VPN with ‘critical vulnerability’ from Play Store
April 9, 2020
Low-orbit internet banking fraud claim alleged to be a load of space junk
April 9, 2020
Cloudflare dumps Google’s reCAPTCHA, moves to hCaptcha as free ride ends (and something about privacy)
April 9, 2020
Slack in the security spotlight – lessons for collaboration servers
April 8, 2020
Update Firefox again – more RCEs and an Android “takeover” bug too
April 8, 2020
Microsoft prevents Domain of Danger from falling into miscreants’ paws by forking out cash for corp.com
April 8, 2020
Microsoft project proposed to aid Linux IoT code integrity
April 8, 2020
As if the world couldn’t get any weirder, this AI toilet scans your anus to identify you
April 8, 2020
Please, just stop downloading apps from unofficial stores: Android users hit with ‘unkillable malware’
April 8, 2020
China and Taiwan aren’t great friends. Zoom sends chats through China. So Taiwan has banned Zoom
April 8, 2020
Visual Studio Code extension flags NPM vulnerabilities
April 7, 2020
New year, old threats: Malware peddlers went into overdrive in Q1, says Trend Micro
April 7, 2020
Flaw hunter bags $75,000 off Apple after duping Safari into spying through iPhone, Mac cameras without permission
April 7, 2020
Twitter warns users – Firefox might hold on to private messages
April 7, 2020