‘DerpTroll’ derps into plea deal, admits DDoS attacks on EA, Steam, Sony game servers November 8, 2018
Civil rights group says Oracles, Tapads and Experians get let off for wanton info-sucking November 8, 2018
Spammer scum hack 100,000 home routers via UPnP vulns to craft email-flinging botnet November 8, 2018
Vulns in online shopping toolkit WooCommerce can blast a hole in your WordPress security November 7, 2018
We don’ need no stinkin’ bounties: VirtualBox guest-to-host escape zero-day lands at GitHub November 7, 2018
SMBs: We don’t want to spoil all of this article, but have you patched, taken away admin rights, made backups yet? November 7, 2018
Dutch cops hope to cuff ‘hundreds’ of suspects after snatching server, snooping on 250,000+ encrypted chat texts November 7, 2018
Stop us if you’ve heard this one: Remote code hijacking flaw in Apache Struts, patch ASAP November 7, 2018
Hackers seed StatCounter with nasty JavaScript in elaborate Bitcoin cyber-heist caper November 6, 2018
HSBC now stands for Hapless Security, Became Compromised: Thousands of customer files snatched by crims November 6, 2018
Android fans get fat November security patch bundle – if the networks or mobe makers are kind enough to let ’em have it November 6, 2018
Solid state of fear: Euro boffins bust open SSD, Bitlocker encryption (it’s really, really dumb) November 5, 2018
Cyber-crooks think small biz is easy prey. Here’s a simple checklist to avoid becoming an easy victim November 5, 2018
Google logins make JavaScript mandatory, Huawei China spy shock, Mac malware, Iran gets new Stuxnet, and more November 3, 2018
30 spies dead after Iran cracked CIA comms network with, er, Google search – new claim November 2, 2018
Web domain owners paid EasyDNS to cloak their contact info from sight. It was blabbed via public Whois anyway November 2, 2018
BBC micro:bit vendor Kitronik says customers’ deets nicked, fingers Magecart malware November 2, 2018
I know what you’re thinking: Outsource or in-source IT security? I’ve worked both sides, so here’s my advice… November 2, 2018
IT Wi-Fi kit bit by TI chip slip: Wireless gateways open to hijacking via BleedingBit chipset vuln November 1, 2018
Welcome back, ‘ping of death’, it has been… a few months. Now it’s Apple’s turn to do the patching November 1, 2018
Nice work if you can get it: GandCrab ransomware nets millions even though it has been broken October 31, 2018
Yahoo! $50m! hack! damages! bill!, Russian trolls menaced by Uncle Sam inaction, computer voting-machine UI confusion, and more October 27, 2018
The D in Systemd stands for ‘Dammmmit!’ A nasty DHCPv6 packet can pwn a vulnerable Linux box October 26, 2018
How to build your own IT infosec holodeck: A blueprint for crafting a virtual enterprise to prod, test and hack October 26, 2018
Sorry friends, I’m afraid I just can’t quite afford the Bitcoin to stop that vid from leaking everywhere October 26, 2018
We asked 100 people to name a backdoored router. You said ‘EE’s 4GEE HH70’. Our survey says… Top answer! October 26, 2018
British Airways: If you’re feeling left out of our 380,000 passenger hack, then you may be one of another 185,000 victims October 25, 2018
This two-year-old X.org give-me-root hole is so trivial to exploit, you can fit it in a single tweet October 25, 2018
What a crane in the ass: Bug leaves construction machinery vulnerable to evil command injection October 25, 2018
Cathay Pacific hack: Personal data of up to 9.4 million airline passengers laid bare October 25, 2018
Ex spy bosses: Cyber-warfare needs rules of engagement for nations to promptly ignore October 24, 2018
That Saudi oil and gas plant that got hacked. You’ll never guess who could… OK, it’s Russia October 24, 2018
You patch my back(up) and I’ll patch yours… Arcserve bugs burrow remotely exploited holes in UDP storage systems October 24, 2018