Menu



Gallery

China orders web operators to spring clean its entire internet
January 27, 2022
Alert: Let’s Encrypt to revoke about 2 million HTTPS certificates in two days
January 26, 2022
“PwnKit” security bug gets you root on most Linux distros – what to do
January 26, 2022
Infosec big dogs break out the bubbly over UK government’s latest cyber strategy emission
January 26, 2022
Infosec chap: I found a way to hijack your web accounts, turn on your webcam from Safari – and Apple gave me $100k
January 26, 2022
Linux distros haunted by Polkit-geist for 12+ years: Bug grants root access to any user
January 26, 2022
Tax scam emails are alive and well as US tax season starts
January 25, 2022
Sophos: Log4Shell would have been a catastrophe without the Y2K-esque mobilisation of engineers
January 25, 2022
UK government opens consultation on medic-style register for Brit infosec pros
January 25, 2022
Yes, your data is special. But do you know how special?
January 25, 2022
Twitter’s top security staff out after incoming CEO shakes things up
January 25, 2022
Hive View security camera customers left in the dark as some gear goes TITSUP*
January 24, 2022
Alleged carder gang mastermind and three acolytes under arrest in Russia
January 24, 2022
Of hacks and patches
January 24, 2022
Myanmar’s military junta seeks ban on VPNs and digital currency
January 24, 2022
Australian Prime Minister’s WeChat Shanghaied by Chinese patriots
January 24, 2022
Apple preps fix for Safari’s web-history-leaking IndexedDB privacy bug
January 21, 2022
Rust 1.58.1 fixes dangerous race condition
January 21, 2022
Arm rages against the insecure chip machine with new Morello architecture
January 21, 2022
Cryptocoin broker Crypto.com says 2FA bypass led to $35m theft
January 21, 2022
Why should I pay for that security option? Hijacking only happens to planes
January 21, 2022
UK, Australia, to build ‘network of liberty that will deter cyber attacks before they happen’
January 21, 2022
Japan’s Supreme Court rules cryptojacking scripts are not malware
January 21, 2022
Russia’s Putin out the idea of a broad cryptocurrency ban
January 21, 2022
Crypto.com now says someone tried to drain $34m from hundreds of accounts
January 20, 2022
For those worried about Microsoft’s Pluton TPM chip: Lenovo won’t even switch it on by default in latest ThinkPads
January 20, 2022
Understand Diffie-Hellman key exchange
January 20, 2022
S3 Ep66: Cybercrime busts, wormable Windows, and the crisis of featuritis [Podcast + Transcript]
January 20, 2022
UK mulls making MSPs subject to mandatory security standards where they provide critical infrastructure
January 20, 2022
Privacy is for paedophiles, UK government seems to be saying while spending £500k demonising online chat encryption
January 20, 2022
‘Now’ would be the right time to patch Ubuntu container hosts and ditch 21.04 thanks to heap buffer overflow bug
January 20, 2022
NortonLifeLock and Avast tie-up falls under UK competition regulator’s spotlight
January 20, 2022
Red Cross forced to shutter family reunion service following cyberattack and data leak
January 20, 2022
Being ‘Threat-Led’ is the answer. Your ISO certificate won’t save you from a breach!
January 20, 2022
McAfee and FireEye rename themselves ‘Trellix’
January 20, 2022
Singapore gives banks two-week deadline to fix SMS security
January 20, 2022
Need to prioritize security bug patches? Don’t forget to scan Twitter as well as use CVSS scores
January 19, 2022
Sniff those Ukrainian emails a little more carefully, advises Uncle Sam in wake of Belarusian digital vandalism
January 19, 2022
Faker NPM package back on track after malicious coding incident
January 19, 2022
Vulnerabilities and censorship tools among hot new features in Beijing’s Olympics app
January 19, 2022
US mergers doubled in 2021 so FTC and DoJ seek new guidelines to stop illegal ones
January 19, 2022
Crypto.com acknowledges ‘unauthorized activity’ on servers, maintains no funds have been lost
January 18, 2022
Suse open sources NeuVector container security platform
January 18, 2022
Serious Security: Apple Safari leaks private data via database API – what you need to know
January 18, 2022
International police shut down 15 server infrastructures as part of VPNLab.net’s takedown
January 18, 2022
More contractor pain: Parasol’s sister firms, SJD Accountancy and Nixon Williams, confirm cyberattack
January 18, 2022
Singapore monetary authority threatens action on bank over widespread phishing scam
January 18, 2022
Why global DDoS protection is essential for Anycast networks
January 18, 2022
Microsoft patches the patch that broke VPNs, Hyper-V, and left servers in boot loops
January 18, 2022
Bug in WebKit’s IndexedDB implementation makes Safari 15 leak Google account info… and more
January 17, 2022
Ukraine blames Belarus for PC-wiping ‘ransomware’ that has no recovery method and nukes target boxen
January 17, 2022
Romance scammer who targeted 670 women gets 28 months in jail
January 17, 2022
Umbrella company Parasol Group confirms cyber attack as ‘root cause’ of prolonged network outage
January 17, 2022
North Korea pulled in $400m in cryptocurrency heists last year – report
January 16, 2022
Russia starts playing by the rules: FSB busts 14 REvil ransomware suspects
January 14, 2022
Serious Security: Linux full-disk encryption bug fixed – patch now!
January 14, 2022
Multi-day IT systems outage whacks umbrella biz Parasol Group amid fears of a cyber attack
January 14, 2022
Ukraine shrugs off mass govt website defacement as world turns to stare at Russia
January 14, 2022
REvil ransomware crew allegedly busted in Russia, says FSB
January 14, 2022
Visibility, immutability, security … a revolutionary approach to fighting off ransomware
January 14, 2022
Federal Communications Commission proposed stricter rules on how telco carriers should report data breaches
January 13, 2022
Orca Security tells AWS fail tale with a happy ending
January 13, 2022
Continuous security and compliance for hybrid cloud, the Red Hat way
January 13, 2022
Ukrainian cops nab husband and wife suspected to be part of $1m ransomware operation
January 13, 2022
S3 Ep65: Supply chain conniption, NetUSB hole, Honda flashback, FTC muscle [Podcast + Transcript]
January 13, 2022
Austrian watchdog rules German company’s use of Google Analytics breached GDPR by sending data to US
January 13, 2022
Admins report Hyper-V and domain controller issues after first Patch Tuesday of 2022
January 13, 2022
Volunteer Dutch flaw finders bag $100k to forward national bug bounty goal
January 13, 2022
Ransomware puts New Mexico prison in lockdown: Cameras, doors go offline
January 12, 2022
Ransomware demands… a new approach to security
January 12, 2022
Wormable Windows HTTP hole – what you need to know
January 12, 2022
Info-saturated techie builds bug alert service that phones you to warn of new vulns
January 12, 2022
Microsoft starts 2022 with big bundle fixes for 96 security bugs in its software
January 12, 2022
Make sure you’re up-to-date with Sonicwall SMA 100 VPN box patches – security hole exploit info is now out
January 11, 2022
Home routers with NetUSB support could have critical kernel hole
January 11, 2022
EU data watchdog to Europol: You’ve helped yourself to too much data
January 11, 2022
Secure boot for UK electric car chargers isn’t mandatory until 2023 – but why the delay?
January 11, 2022
Four million outdated Log4j downloads were served from Apache Maven Central alone despite vuln publicity blitz
January 11, 2022
Signal CEO Moxie Marlinspike resigns, leaves WhatsApp co-founder to run things until a successor is named
January 11, 2022
JavaScript developer destroys own projects in supply chain “lesson”
January 11, 2022
Avira also mines imaginary internet money on customers’ PCs
January 10, 2022
China puts Walmart in the naughty corner, citing 19 alleged cybersecurity ‘violations’
January 10, 2022
GCHQ was rebuked for ignoring spy law safeguards as pandemic hit Britain
January 10, 2022
No defence for outdated defenders as consumer AV nears RIP
January 10, 2022
WebSpec, a formal framework for browser security analysis, reveals new cookie attack
January 8, 2022
Honda cars in flashback to 2002 – “Can’t Get You Out Of My Head”
January 8, 2022
Log4Shell-like security hole found in popular Java SQL database engine H2
January 7, 2022
Salesforce mandates MFA by default
January 7, 2022
Your backups can save you from ransomware. But how do you protect your backups?
January 6, 2022
S3 Ep64: Log4Shell again, scammers keeping busy, and Apple Home bug [Podcast + Transcript]
January 6, 2022
You better have patched those Log4j holes or we’ll see what a judge has to say – FTC
January 5, 2022
US Army journal’s top paper from 2021 says Taiwan should destroy TSMC if China invades
January 5, 2022
FTC threatens “legal action” over unpatched Log4j and other vulns
January 5, 2022
Remember Norton 360’s bundled cryptominer? Irritated folk realise Ethereum crafter is tricky to delete
January 5, 2022
Windows giant seeks Pluton-ic relationship with chip maker: AMD first out of the gates with Microsoft’s security processor
January 5, 2022
How ransomware gangs went pro
January 5, 2022
SlimPay fined €180k after 12 million customers’ bank data publicly accessible for 5 years
January 4, 2022
Apple Home software bug could lock you out of your iPhone
January 4, 2022
John Edwards takes the reins at the UK’s data protection watchdog
January 4, 2022
2022: The year of software supply chain security
January 4, 2022