Menu

Gallery

For password protection, dump LastPass for open source Bitwarden
China aims to grow local infosec industry by 30 percent a year, to $22 billion by 2025
NSA asks Congress to let it get on with that warrantless data harvesting, again
Russians say they can grab software from Intel again
Canadian owes bosses for ‘time theft’ after work-tracking app sinks tribunal bid
Microsoft Defender ASR rules remove icons and apps shortcuts from Taskbar
Long data privacy notices aren’t foolproof, Euro watchdog tells Meta
This can’t be a real bomb threat: you’ve called a modem, not a phone
Euro-cops shut down crypto scam that bilked millions from unwitting punters
Microsoft fumbles zero trust upgrade for some Asian customers
Lawyers slam SEC for ‘blatant fishing expedition’ after Exchange mega-attack
S3 Ep117: The crypto crisis that wasn’t (and farewell forever to Win 7) [Audio + Text]
VALL-E AI can mimic a person’s voice from a three-second snippet
US think tank says China would probably lose if it tries to invade Taiwan
Royal Mail, cops probe ‘cyber incident’ that’s knackered international mail
AI-generated phishing emails just got much more convincing
Microsoft fixes Windows database connections it broke in November
German cartel watchdog objects to the way Google processes user data
Swiss Army’s Threema messaging app was full of holes – at least seven
Health insurer Aflac blames US partner for leak of Japanese cancer policy info
Privacy on the line: Boffins break VoLTE phone security
Microsoft Patch Tuesday: One 0-day; Win 7 and 8.1 get last-ever patches
First Patch Tuesday of the year explodes with in-the-wild exploit fix
Russian meddling in 2016 US presidential election was weak sauce
Popular JWT cloud security library patches “remote” code execution hole
California e-ink platemaker exploited to track equipped cars
Wiretap lawsuit accuses Apple of tracking iPhone users who opted out
Pakistan’s government to agencies: Dark web is dangerous, please don’t go there
Homeland Security, CISA builds AI-based cybersecurity analytics sandbox
US Supremes deny Pegasus spyware maker’s immunity claim
CircleCI – code-building service suffers total credential compromise
No more holidays for US telcos, FCC is cracking down
Chinese researchers’ claimed quantum encryption crack looks unlikely
Here’s how to remotely takeover a Ferrari…account, that is
Freedom for MegaCortex ransomware victims – the fix is out
RSA crypto cracked? Or perhaps not!
How to prioritize effectively with threat modeling
Dridex malware pops back up and turns its attention to macOS
JP Morgan must face suit from Ray-Ban maker after crooks drained $272m from accounts
Rackspace blames ransomware woes on zero-day attack
Twitter data dump: 200m+ account database now free to download
S3 Ep116: Last straw for LastPass? Is crypto doomed? [Audio + Text]
Twitter whistleblower Peiter ‘Mudge’ Zatko lands new gig at Rapid7
Ex-GE engineer gets two years in prison after stealing turbine tech for China
The Guardian ransomware attack hits week two as staff told to work from home
Serious Security: Vital cybersecurity lessons from the holiday season
Ireland fines Meta $414m for using personal data without asking
PyTorch dependency poisoned with malicious code
LockBit: Sorry about the SickKids ransomware, not sorry about the rest
‘Multiple security breaches’ shut down trucker protest
Inside a scammers’ lair: Ukraine busts 40 in fake bank call-centre raid
Google gets off easy in Indiana, DC location tracking lawsuits
PyTorch: Machine Learning toolkit pwned from Christmas to New Year
Naked Security 33 1/3 – Cybersecurity predictions for 2023 and beyond
Nexperia calls in the lawyers to save Welsh chip fab deal
Twitter data of “+400 million unique users” up for sale – what to do?
The horror! The horror! NOTEPAD gets tabbed editing (very briefly)
US passes the Quantum Computing Cybersecurity Preparedness Act – and why not?
S3 Ep115: True crime stories – A day in the life of a cybercrime fighter [Audio + Text]
Critical “10-out-of-10” Linux kernel SMB hole – should you worry?
US House boots TikTok from government phones
Stolen info on 400m+ Twitter accounts seemingly up for sale
Back to work, Linux admins: You have a CVSS 10 kernel bug to address
LastPass finally admits: They did steal your password vaults after all
LastPass admits attackers have a copy of customers’ password vaults
Crooks copy source code from Okta’s GitHub repository
FCC calls for mega $300 million fine for massive US robocall campaign
Zerobot malware now shooting for Apache systems
S3 Ep114: Preventing cyberthreats – stop them before they stop you! [Audio + Text]
It’s time to fill those cloud security gaps
Why zero knowledge matters
Fraudulent ‘popunder’ Google Ad campaign generated millions of dollars
Apple accused of censoring apps in Hong Kong and Russia to maintain market access
Godfather malware makes banking apps an offer they can’t refuse
Being one of the 1% sucks if you’re a Rackspace user
Microsoft fixes Hyper-V VM problem caused by Patch Tuesday
“Suspicious login” scammers up their game – take care at Christmas
UK’s Guardian newspaper breaks news of ransomware attack on itself
NASA infosec again falls short of required US government standard
How Steampipe enables KPIs as code
Malicious PyPI package found posing as a SentinelOne SDK
Parental control apps prove easy to beat by kids and crims
Cisco’s Talos security bods predict new wave of Excel Hell
Swatting suspects charged with subverting Ring doorbell cams and calling cops
Big Apple locals hire Russians to game New York’s taxi system
Microsoft reports macOS Gatekeeper has an ‘Achilles’ heel
Microsoft dishes the dirt on Apple’s “Achilles heel” shortly after fixing similar Windows bug
Simplifying digital sovereignty in a multi-cloud world
Eurozone plans to formalize passenger data, improve security
McGraw Hill’s S3 buckets exposed 100,000 students’ grades and personal info
Patch Tuesday update is causing some Windows 10 systems to blue screen
Google adds stronger encryption for some Gmail users, in beta
OneCoin scammer Sebastian Greenwood pleads guilty, “Cryptoqueen” still missing
Email hijackers scam food out of businesses, not just money
Let’s spend $22m supporting survivors of tech-enabled abuse, lawmakers suggest
Twitter staffer turned Saudi spy jailed for 3.5 years
Microsoft Teams: A vector for child sexual abuse material with a two-day processing time for complaints
US adds 36 Chinese entities to naughty list, drops 25 after checking it twice
NIST says you better dump weak SHA-1 … by 2030
Sting op takes down 50 DDoS-for-hire domains, seven people collared