Menu

Gallery

Google warns of system-controlling Chrome bug
I just love your accent – please, have a new password
Google takes a little more responsibility for its Android world, will cough up bounties for mega-popular app bugs
Capital One ‘hacker’ hit with fresh charges: She burgled 30 other AWS-hosted orgs, Feds claim
Web clickjacking fraud makes a comeback thanks to JavaScript tricks
Video captures glitching Mississippi voting machines flipping votes
Microsoft may still be violating privacy rules, says Dutch regulator
Today’s Resident Evil: Ransomware crooks think local, not global, prey on schools, towns, libraries, courts, cities…
Are US border cops secretly secreting GPS trackers on vehicles without a warrant? EFF lawyers want to know
Come on, hackers, do your worst ‒ Facebook opens Portal gizmo to Pwn2Own exploit fest
Emergency iOS patch fixes jailbreaking flaw for second time
Time to spin the wheel of pwnage! This week, malware can infect your…. Android set-top box!
Romance scams – 80 people charged with ripping off millions of dollars
Android 10 coming soon, with important privacy upgrades
Report: 53% of social media logins are fraudulent
Dixons hits back at McAfee’s £30m antivirus sueball: Your AV didn’t work on Windows 10S
Android PDF app with just 100m downloads caught sneaking malware into mobes
We will hack back if you tamper with our shiz, NATO declares to world’s black hats
GitHub joins WebAuthn club
Hostinger upgrades password security after 14m accounts breached
Court squeezes $1 million back from convicted phisher
Weekly review – the hot 21 stories of the week
Yes, TfL asked people to write down their Oyster passwords – but don’t worry, they didn’t inhale
Can’t bear to part with that well-worn copy of Windows 7? Microsoft might let you keep it updated an extra year
Breaking news: Apple un-breaks break on jailbreak break
Fraught ‘naut who sought consort’s report says: I was up to naught, I will thwart fault tort
Hacktivist skids nip at Mounties’ ankles, Emotet ransomware rides again, and more
Biz forked out $115k to tout ‘Time AI’ crypto at Black Hat. Now it sues organizers because hackers heckled it
Security gone in 600 seconds: Make-me-admin hole found in Lenovo Windows laptop crapware. Delete it now
Someone find a make-me-admin hole in your laptop crapware? Don’t want fix the bug? Just move the EOL date – right, Lenovo?
Cybercrook hands cops £923k in Bitcoin made from selling phished deets on the dark web
Instagram phishing uses 2FA as a lure
‘Privacy policy change’ hoax infects Instagram; it confirms it’s crud
Bumper Cisco patches fix four new ‘critical’ vulnerabilities
GitHub upgrades two-factor authentication with WebAuthn support
Steam cleaned of zero-day security holes after Valve turned off by bug bounty snub outrage
As browser rivals block third-party tracking, Google pitches ‘Privacy Sandbox’ peace plan
Quick thinking by Portland Public Schools stops $2.9m BEC scam
Humans may have been listening to you via your Xbox
Contacts-slurping Android malware sneaked onto Google Play store – twice
Shhh! Microsoft, Intel, Google and more sign up to the Confidential Computing Consortium
Facebook delivers ‘clear history’ tool that doesn’t ‘clear’ anything
Update now! Microsoft patches its Android RDP app to fix flaw
Massive MoviePass database found exposed on public server
The Silence hacking crew grows louder
Disgruntled bug-hunter drops Steam zero-day to get back at Valve for refusing him a bounty
The Joy of Six… critical security patches: Cisco small biz switches open to hijacking via web UI
Finally. Thanks so much, nerds. Google, Apple, Mozilla end government* internet spying for good
Here’s a top tip: Don’t trust the new guy – block web domains less than a month old. They are bound to be dodgy
Microsoft: Reckon our code is crap? Prove it and $30k could be yours
Webcam woes – world’s oldest online camera struggles with security
Sorry script kiddies, hacktivism isn’t cool anymore: No one cares about stuff that’s easy-peasy to defend against
HOAX ALERT! Facebook ‘deadline’ on making your content public is fake
Ransomware disrupts 22 Texas government departments
Google’s Nest webcam needs patching after flaws found
Stuff like sophisticated government spyware is scary and all – but don’t forget, a single .wmv file can pwn you via VLC
30+ countries, 160,000 emails, $4.2m in cyber-heists… maybe it’s time for the Silence hacker crew to change its name
No REST for the wicked: Ruby gem hacked to siphon passwords, secrets from web devs
Apple iOS update ends in jailbroken iPhones (if that’s what you want)
Chrome users ignoring warnings to change breached passwords
Scammers use bogus search results to fool voice assistants
Serious Security: Phishing in the cloud – the freemium way
Huawei goes all Art of War on us: Switches on ‘battle mode’ and vows to ‘dominate the world’
Breaker, breaker. Apple’s iOS 12.4 update breaks jailbreak break, un-breaks the break. 10-4
The Pwn Star State: Nearly two dozen Texas towns targeted by tiresome ransomware
Dear Planet Earth: Patch Webmin now – zero-day exploit emerges for potential hijack hole in server control panel
Teen TalkTalk hacker ordered to pay £400k after hijacking popular Instagram account
Did Facebook know about “View As” bug before 2018 breach?
Multiple HTTP/2 DoS flaws found by Netflix
61 impacted versions of Apache Struts left off security advisories
KNOB turns up the heat on Bluetooth encryption, hotels leak guest info, city hands $1m to crook, and much, much more
iFrame clickjacking countermeasures appear in Chrome source code. And it only took *checks calendar* three years
Subcontractor’s track record under spotlight as London Mayoral e-counting costs spiral
Chrome add-on warns netizens when they use a leaked password. Sometimes, they even bother to change it
NSA asks Congress to permanently reauthorize spying program that was so shambolic, the snoops had shut it down
Top tip: Don’t upload your confidential biz files to free malware-scanning websites – everything is public
And you thought the cops were bad… Civil rights group warns of facial recog ‘epidemic’ across UK private sites
iPhone holes and Android malware – how to keep your phone safe
Google removes option to disable Nest cams’ status light
Police site DDoSer/bomb hoaxer caught after jeering on social media
Microsoft won’t shift on AI recordings policy
Police costs for Gatwick drone fiasco double to nearly £900k – and still no one’s been charged
Security? We’ve heard of it! But why be a party pooper when there’s printing to be done
Firefox fixes “master password” security bypass bug
Serious flaws in six printer brands discovered, fixed
Bomb-hoaxing DoSer who targeted police in revenge was caught after Twitter taunts
‘NULL’ license plate gets security researcher $12K in tickets
Hacking forum spills rival’s 321,000 member database
How dodgy browser plugins, web scripts can silently rewrite that URL you were about to hit – and throw you into an internet wormhole
World recoils in horror as smartphone maker accused of helping government snoops read encrypted texts, track device whereabouts
Intel: Listen up, you NUC-leheads! Mini PCs and compute sticks just got a major security fix
Chin up, CapitalOne: You may not have been the suspected hacker’s only victim. Feds fear 30-plus organizations hit
Patch time! Microsoft warns of new worm-ready RDP bugs
Not very Suprema: Biometric access biz bares 27 million records and plaintext admin creds
Fortnite World Cup champion and family swatted while live streaming
Coinbase explains background to June zero-day Firefox attack
4 ‘despicables’ jailed for running hidden worldwide child abuse forums
HTTP/2, Brute! Then fall, server. Admin! Ops! The server is dead
This summer’s hottest sequels: BlueKeep II, III, IV and V – the latest wormable RDP holes in Microsoft Windows
We checked and yup, it’s no longer 2001. And yet you can pwn a Windows box via Notepad.exe