Menu

Gallery

Hackers latch onto new Apache Struts megavuln to mine cryptocurrency
Won’t patch systems? Never run malware scans? Welcome to the US State Department!
Air Canada resets 1.7 million accounts after app breach
Why Yahoo scanning user email is no cause for panic
Chinese hotel chain’s customer data on Dark Web – 500M records for $50K
Hacked stalking app reveals victims’ photos, texts and location info
Football team drops the privacy ball with email Cc blunder
Instagram fights misinformation and account hijackings with new tools
Welcome! Mimecast finds interesting door policies on email filters
Chinese hotel chain warns of massive customer data theft
Error Canada: Airline tells customers to reset mobile app after attack
Hackers faked Cosmos backend to hoodwink bank out of $13.5m
And you you thought you were safe behind your laptop screen…
ABBYY woes: Doc-reading software firm leaves thousands of scans blowing in wind
Facebook: It’s too tough to find personal data in our huge warehouse
Tumblr outlaws creepshots and deepfake porn
Google created “unnecessary risk” for Fortnite users, claims Epic boss
Listening Watch sounds out security idea with websites that listen
We’re all sick of Fortnite, but the flaw found in its downloader is the latest way to attack Android
If you have to simulate a phishing attack on your org, at least try to get something useful from it
Intel Management Engine JTAG flaw proof-of-concept published
Voting machine maker claims vote machine hack-fests a ‘green light’ for foreign hackers
No, eight characters, some capital letters and numbers is not a good password policy
Footie fans calling for a red card over West Ham United CC email blunder
Give yourselves a pat on the back, top million websites, half of you now use HTTPS
Black hats are baddie hackers, white hats are goodies, grey hats will sell IP to kids in hoodies
NSA leaker Reality Winner gets 63 months in jail
None too chuffed with your A levels? Hey, why not bludgeon the exam boards with GDPR?
Facebook helps woman track down her brother’s killer after 37 years
Event management kit can take a hammering these days: Use it well and it’ll save your ass
Woman sues US border patrol over data copied from seized iPhone
Tuesday review – the hot 23 stories of the week
Boffins bork motion control gear with the power of applied sound
Windows 0-day pops up out of nowhere Twitter
Lawyers sued for impersonating rival firm online to steal clients
Ah, um, let’s see. Yup… Fortnite CEO is still mad at Google for revealing security hole early
Voting machine maker vows to step up security, Fortnite bribes players to do 2FA – and more
Now that’s a fortune cookie! Facebook splats $5k command-injection bug in one of its servers
Well, can’t get hacked if your PC doesn’t work… McAfee yanks BSoDing Endpoint Security patch
T-Mobile suffers data breach affecting 2.2 million customers
Uni credential-swiping hack campaign linked to Iranian government
Top dark web drug vendors nabbed by ‘Operation Darkness Falls’
Facebook pulls its privacy-violating Onavo VPN from Apple’s App Store
DNC ‘spearphishing attack’ was actually a test
Breach exposed details of 2 million T-Mobile US customers – report
Chap asks Facebook for data on his web activity, Facebook says no, now watchdog’s on the case
Back to school soon – for script kiddies as well as normal kids. Hackers peddle cybercrime e-classes via Telegram
Wickr gets slicker with fresh network tricker: Privacy-protecting domain fronting alternative emerges
Nork hackers Lazarus brought back to life by AppleJeus to infect Macs for the first time
Winner, Winner, prison dinner: Five years in the clink for NSA leaker
Intel rips up microcode security fix license that banned benchmarking
Vulnerability in OpenSSH “for two decades” (no, the sky isn’t falling!)
Facebook pulls ‘snoopy’ Onavo VPN from Apple’s App Store after falling foul of rules
Patch time! Adobe issues unexpected ‘critical’ fix for Photoshop CC
US Democrats call in Feds: There’s something phishy going on with our voter database
Facebook’s rating you on how trustworthy you are
Babysitting app suffers ‘temporary data breach’ of 93,000 users
Detecting bot attacks | Salted Hash Ep 44
Using smart meter data constitutes a search, but court allows them anyway
Deepfakes porn service: Don’t worry, we’ll only use “consenting adults”
If it doesn’t need to be connected, don’t: Nurse prescribes meds for sickly hospital infosec
Whoa, is it Patch Tuesday already? No, just an unexpected critical Photoshop fix
When something’s weird in your ImageMagick upload, who ya gonna call? Ghostbusters!
How an uploaded image could take over your website, and how to stop it
Everyone screams patch ASAP – but it takes most organizations a month to update their networks
Apache’s latest SNAFU – Struts normal, all fscked up: Web app framework needs urgent patching
One-in-two JavaScript project audits by NPM tools sniff out at least one vulnerability…
Cisco smells a RAT in Breaking Security’s Remcos PC wrangler
Scot.gov wins pals with pledge not to keep hold of innocents’ mugshots and biometric data
Netflix, HBO GO, Hulu passwords found for sale on the Dark Web
Extortionist lawyer pleads guilty to creating porn honeypot
Elders of internet hash out standards to grant encrypted message security for world+dog
Microsoft disrupts Fancy Bear election meddlers
ETSI crypto-based access control standards land
Super-mugs: Hackers claim to have snatched 20k customer records from Brit biz Superdrug
Security MadLibs: Your IoT electrical outlet can now pwn your smart TV
Use Debian? Want Intel’s latest CPU patch? Small print sparks big problem
Serious Security: How to stop dodgy HTTP headers clogging your website
Microsoft: We busted Russian Fancy Bear disinfo websites
Twitch admits exposing user messages after archiving error
Social networks to be fined for hosting terrorist content
The security changes you can expect in iOS 12
TLS developers should ditch ‘pseudo constant time’ crypto processing
Connected car data handover headache: There’s no quick fix… and it’s NOT just Land Rovers
That’s the way the cookies crumble: Consent banners up 16% since GDPR
SuperProf gets schooled after assigning weak passwords to tutors
So phar, so FUD: PHP flaw puts WordPress sites at risk of hacks
Firefox axes add-ons, developer pushes back
Los Angeles to use body scanners on metro riders
Google employees protest work on censored search engine for China
Adblocking and browser privacy can be bypassed, researchers find
How’s that encryption coming, buddy? DNS requests routinely spied on, boffins claim
Et tu, Brute? Then fail, Caesars: When it’s hotel staff, not the hackers, invading folks’ privacy
Facebook Messenger backdoor demand, bail in Bitcoin, and lots more
SentinelOne makes YouTube delete Bsides vid ‘cuz it didn’t like the way bugs were reported
‘Oh sh..’ – the moment an infosec bod realized he was tracking a cop car’s movements by its leaky cellular gateway
Web cache poisoning just got real: How to fling evil code at victims
Shiver me timbers: Symantec spots activist investor Starboard side
Apple gets cored: 90GB of ‘secure files’ stolen by high schooler
‘Foreshadow’ flaw found in Intel CPUs – what to do