Menu

Gallery

China fires up ‘Great Cannon’ denial-of-service blaster, points it toward Hong Kong
Mac users targetted by Lazarus ‘fileless’ Trojan
US parents file class action against TikTok over children’s privacy
Reasons to be fearful 2020: Smishing, public Wi-Fi, deepfakes… and all the usual suspects
Instagram trying to protect kids by getting dates of birth from new users
OpenBSD devs patch authentication bypass bug
SANS Announces 13th Holiday Hack Challenge and 2nd KringleCon infosec conference
Tricky VPN-busting bug lurks in iOS, Android, Linux distros, macOS, FreeBSD, OpenBSD, say university eggheads
VCs find exciting new way to blow $1m: Wire it directly to hackers after getting spoofed
If there’s somethin’ stored in a secure enclave, who ya gonna call? Membuster!
Scammy and spammy harassers are chasing veteran pros off crypto-collab platform Keybase
Cookie-stealing malware wants to know your Facebook ad budget
iCloud-hacking politician to be sentenced on Christmas eve
Machine-raiding Python libraries squashed by community
Feds slap $5m bounty on ‘Evil Corp’ Russian duo accused of running ZeuS, Dridex banking trojans
Critical DoS messaging flaw fixed in December Android update
Microsoft readies new language for safe programming
How to fool infosec wonks into pinning a cyber attack on China, Russia, Iran, whomever
Yodel parcel tracking app blabs about other people’s parcels
Oil be damned: Iran-based crooks flinging malware at Middle Eastern energy plants again – research
Snake bites: Beware malicious Python libraries
Atlassian scrambles to fix zero-day security hole accidentally disclosed on Twitter
Lazarus group goes back to the Apple orchard with new macOS trojan
Steam players – beware of fake skins as phishers try to hijack accounts
Facebook made to ‘correct’ user’s post as Singapore flexes fake-news muscle
Microsoft looks to Rust language to beat memory vulnerabilities
FBI: Russia-based FaceApp is a ‘potential counterintelligence threat’
Mozilla locks nosy Avast, AVG extensions out of Firefox store amid row over web privacy
AWS has new tool for those leaky S3 buckets so, yeah, you might need to reconfigure a few things
SMS company exposes millions of text messages, credentials online
Mixcloud user accounts up for sale on dark web
IM RAT spy tool seller raided, busted, kicked offline
Ad fraud: Fake local news sites are rolling in the dough
UK parcel firm Yodel plugs tracking app’s random yaps about where on map to snap up strangers’ tat
Russian FaceApp selfie-slurper poses ‘potential counterintelligence threat’, FBI warns
Welcome back from the holiday, Americans! Here’s who leaked data while you were away
Europol wipes out 30,000+ piracy sites, three suspects cuffed to walk the legal plank
Judge to interview Assange over claims Spanish security firm snooped on him during Ecuador embassy stint
Fake Android apps uploaded to Play store by notorious Sandworm hackers
Uncle Sam opens arms to friendly hackers
Convicted murderer wins ‘right to be forgotten’ case
TikTok owner to separate company over US national security worries
Challenge yourself and level up your IT security skills at this SANS London training event
The blame game: When hackers steal your data, is it a corporate failure – or the attackers’ fault?
Netflix account freeze – don’t click, it’s a scam!
US tightens rules on drone use in policy update
Adobe’s Magento Marketplace suffers data breach
Pressure mounts for federal privacy law with second bill
Master Go player retires citing AI supremacy
Stay safe on Black Friday – and the rest of the year, too!
Google caught a Russian state hacker crew uploading badness to the Play Store
Kids’ smartwatch security tracker can be hacked by anyone
Ransomware attack freezes health records access at 110 nursing homes
HPE warns of impending SSD disk doom
Twitter says it won’t delete tweets from those who have died
Cloudy biz Datrix locks down phishing attack in 15 mins after fat thumb triggers email badness
This week, we give thanks to Fortinet for reminding us what awful crypto with hardcoded keys looks like
Facebook, Twitter profiles slurped by mobile apps using malicious SDKs
Splunk customers should update now to dodge Y2K-style bug
EU raises eyebrows at possible US encryption ban
‘Ethical’ hackers say: It’s just hacker. To be one is no longer a bad thing
Police arrest alleged Chuckling Squad member who hijacked @Jack Dorsey
Firefox gets tough on tracking tricks that sneakily sap your privacy
Contract for the Web wants your endorsement
Parents say creep hacked their baby monitor to tell toddler they ‘love’ her
Court says suspect can’t be forced to reveal 64-character password
National Veterinary Associates catches dose of ransomware
Sir Tim Berners-Lee publishes plan to save the web from ‘digital dystopia’
Stop us if you’ve heard this one: Facebook and Twitter profiles silently slurped by shady code
OneCoin crypto-scam lawyer found guilty of worldwide $400m fraud
Ad-blocking companies block ‘unblockable’ tracker
Russia to ban sale of devices that don’t come with “Russian software”
Hacker gets 4 years in jail for NeverQuest banking malware
Get ahead of the cyber-criminals using training and advice from SANS Manchester in 2020
T-Mobile US hacked, Monero wallet app infected, public info records on 1.2bn people leak from database…
RDP loves company: Kaspersky finds 37 security holes in VNC remote desktop software
Google plans to take Android back to ‘mainline’ Linux kernel
Iran’s APT33 sharpens focus on industrial control systems
Why cryptocoin scams work, and how to avoid them
Convicted Nigerian fraudster keeps a-fraudin’ from behind bars
Bad news: ‘Unblockable’ web trackers emerge. Good news: Firefox with uBlock Origin can stop it. Chrome, not so much
Bon sang! French hospital contracts 6,000 PC-locking ransomware infection
DNS-over-HTTPS is coming to Windows 10
Android camera bug could have turned phones against their users
Official Monero site delivers malicious cash-grabbing wallet
UK tax collectors warn contractors about being ripped-off – and not by HMRC for a change
Orange is the new green: Nigeria scammer bags $1m while operating behind bars
Amnesty slams Facebook, Google over ‘pervasive surveillance’ business model
Tories change Twitter name to ‘factcheckUK’ during live TV debate
UK public sector IT chiefs shrug off breach threats: The data we hold isn’t that important
Update WhatsApp now: MP4 video bug exposes your messages
Instagram stalker app Ghosty yanked from Play store
XSS security hole in Gmail’s dynamic email
Adobe Acrobat and Reader 2015 reach end of support
Video-editing upstart bares users’ raunchy flicks to world+dog via leaky AWS bucket
Half of Oracle E-Business customers open to months-old bank fraud flaw
ICO scammer Maksim Zaslavskiy to miss 2020 Tokyo Olympics over digital currency fraud
Mozilla expands bug bounty program and triples payouts for flaw finders for hire
Shopped online at Macy’s last month? Might want to toss, or at least check, that card
Brexit bad boy Arron Banks’ Twitter account hacked: Private messages put online