Morrisons supermarket: We’re taking payroll leak liability fight to UK Supreme Court October 23, 2018
‘The inmates have taken over the asylum’: DNS godfather blasts DNS over HTTPS adoption October 23, 2018
jQuery? More like preyQuery: File upload tool can be exploited to hijack at-risk websites October 22, 2018
Patch me, if you can: Grave TCP/IP flaws in FreeRTOS leave IoT gear open to mass hijacking October 22, 2018
Forgotten that Chinese spy chip story? We haven’t – it’s still wrong, Super Micro tells SEC October 22, 2018
Apple boss demands Bloomberg Super Micro U-turn, Russian troll charged, NSA hands out cash, and more October 20, 2018
Spotted: Miscreants use pilfered NSA hacking tools to pwn boxes in nuke, aerospace worlds October 19, 2018
You like HTTPS. We like HTTPS. Except when a quirk of TLS can smash someone’s web privacy October 19, 2018
Talk about a curveball: Microsoft director of sports marketing fired, charged with fraud over ‘fake’ invoices October 18, 2018
Equifax exec’s inside trade shame: Software boss sentenced for mega-hack stock profit October 18, 2018
Decoding the Google Titan, Titan, and Titan M – that last one is the Pixel 3’s security chip October 18, 2018
Tumblr turns stumblr, left humblr: Blogging biz blogs bloggers’ private info to world+dog October 17, 2018
Someone’s in hot water: Tea party super PAC group ‘spilled 500,000+ voters’ info’ all over web October 17, 2018
LuminosityLink spyware mastermind gets 30 months in the clink, forfeits $725k in Bitcoin October 17, 2018
Party like it’s 1989… SVGA code bug haunts VMware’s house, lets guests flee to host OS October 17, 2018
Thought Patch Tuesday was a load? You gotta check out this Oracle mega-advisory, then October 16, 2018
Insult to injury: Malware menace soaks water-logged utility ravaged by Hurricane Florence October 16, 2018
Penta-gone! Personal records of 30,000 US Dept of Defense workers swiped by miscreants October 16, 2018
UK’s National Cyber Security Centre gives itself big ol’ pat on the back in annual review October 16, 2018
Web browsers sharpen knives for TLS 1.0, 1.1, tell protocols to dig their own graves for 2019 October 16, 2018
Hunt for Red Bugtober: US military’s weapon systems riddled with security holes – auditors October 15, 2018
Now this might be going out on a limb, but here’s how a branch.io bug left ‘685 million’ netizens open to website hacks October 12, 2018
Facebook mass hack last month was so totally overblown – only 30 million people affected October 12, 2018
It is 2018 and the NHS is still counting the cost of WannaCry. Carry the 2, + aftermath… um… £92m October 12, 2018
WebSphere and loathing in New York: IBM yanks buggy application server security fix from admins October 11, 2018
Bloke gets six months for fixing up Russia’s US election trolls with bank accounts, fake identities October 11, 2018
Mozilla grants distrusted Symantec certs a stay of execution, claims many sites yet to make switch October 11, 2018
The Obama-era cyber détente with China was nice, wasn’t it? Yeah well it’s obviously over now October 11, 2018
If you haven’t already patched your MikroTik router for vulns, then if you could go do that, that would be greeeeaat October 11, 2018
Oh no, Xi didn’t! Chinese spymaster cuffed in Belgium, yoinked to US on aerospace snoop rap October 11, 2018
PINs and needled: Experian site blabbed codes to unlock credit accounts for fraudsters October 10, 2018
Google and Microsoft boffins playing nicely together to stop replay attacks in their tracks October 10, 2018
US may have by far the world’s biggest military budget but it’s not showing in security October 10, 2018
It’s October 2018, and Microsoft Exchange can be pwned by a plucky eight-year-old… bug October 9, 2018
Payment-card-skimming Magecart strikes again: Zero out of five for infecting e-retail sites October 9, 2018
It’s a cert: Hundreds of big sites still unprepared for starring role in that Chrome 70’s show October 9, 2018
SIEM, UBA, UEBA… If you’re suffering netsec acronym overload, then here’s our handy guide October 8, 2018