Menu



Gallery

Instagram copyright infringment scams – don’t get sucked in!
December 30, 2021
Log4Shell vulnerability Number Four: “Much ado about something”
December 29, 2021
What most cloud-using CIOs want in 2022
December 28, 2021
What app developers need to do now to fight Log4j exploits
December 27, 2021
SFW! The Top N Cyber­security Stories of 2021 (for small positive integer values of N)
December 24, 2021
Four years: that’s how long Azure’s App Service had a source code leak bug
December 24, 2021
The cool retro phone with a REAL DIAL… plus plenty of IoT problems
December 23, 2021
Fisher Price’s Bluetooth reboot of pre-school play phone has adult privacy flaw
December 23, 2021
Alibaba Cloud slapped by Chinese ministry for mishandling Log4j
December 23, 2021
Plundered bitcoins recovered by FBI – all 3,879-and-one-sixth of them!
December 22, 2021
Of course a Bluetooth-using home COVID test was cracked to fake results
December 22, 2021
How to tackle hybrid cloud security and DevSecOps
December 21, 2021
Why SBOM management is no longer optional
December 21, 2021
Apache’s other product: Critical bugs in ‘httpd’ web server, patch now!
December 21, 2021
Belgian defence ministry admits attackers accessed its computer network by exploiting Log4j vulnerability
December 21, 2021
UK National Crime Agency finds 225 million previously unexposed passwords
December 21, 2021
US bags Russian accused of stealing millions after stealing pre-release financial filings
December 20, 2021
Police National Computer not pwned by Clop ransomware crims, insists Home Office
December 20, 2021
Log4Shell: The Movie… a short, safe visual tour for work and home
December 20, 2021
How to keep on top of cloud security best practices
December 20, 2021
VMware 2FA flaw can divulge that vital second credential to malicious actors
December 20, 2021
Bad things come in threes: Apache reveals another Log4J bug
December 19, 2021
US distrust of Huawei linked in part to malicious software update in 2012
December 18, 2021
CISA issues emergency directive to fix Log4j vulnerability
December 17, 2021
Serious Security: OpenSSL fixes “error conflation” bugs – how mixing up mistakes can lead to trouble
December 17, 2021
RAF shoots down ‘terrorist drone’ over US-owned special ops base in Syria
December 17, 2021
Over Log4j? VMware has another critical flaw for you to patch
December 17, 2021
Facebook locks out 1,500 fake accounts used by cyber-spy firms to snoop on people, alerts 50k potential targets
December 17, 2021
Why ransomware attacks happen out of hours or during the holidays
December 16, 2021
S3 Ep63: Log4Shell (what else?) and Apple kernel bugs [Podcast+Transcript]
December 16, 2021
East Londoners nicked under Computer Misuse Act after NHS vaccine passport app sprouted clump of fake entries
December 16, 2021
How developers scrambled to secure the Log4j vulnerability
December 16, 2021
Move fast, break security: Why CISOs must push back against Agile IT
December 16, 2021
National Cyber Strategy will lead to BritChip for mobile devices by 2025, claims UK.gov
December 16, 2021
Japan draws a LINE: web giants must reveal where they store user data
December 16, 2021
Facebook expands bug bounty program to include scraping attacks, two years after it was scraped – hard
December 16, 2021
As CISA tells US govt agencies to squash Log4j bug by Dec 24, fingers start pointing at China, Iran, others
December 15, 2021
US lawmakers want to put NSO Group, 3 other spyware makers out of business with fresh severe sanctions
December 15, 2021
Pen Test Partners: Anyone could view Gumtree users’ GPS location by pressing F12
December 15, 2021
Securing the Kubernetes software supply chain
December 15, 2021
Microsoft closes installer hole abused by Emotet malware, Google splats Chrome bug exploited in the wild
December 15, 2021
Apache takes off, nukes insecure feature at the heart of Log4j from orbit with v2.16
December 14, 2021
You may have cracked serverless development, but it’s almost certain you haven’t solved serverless security
December 14, 2021
Popular password manager LastPass to be spun out from LogMeIn
December 14, 2021
MPs charged with analysing Online Safety Bill say end-to-end encryption should be called out as ‘specific risk factor’
December 14, 2021
Apple security updates are out – and not a Log4Shell mention in sight
December 14, 2021
Log4j RCE latest: In case you hadn’t noticed, this is Really Very Bad, exploited in the wild, needs urgent patching
December 13, 2021
When disaster strikes, data recovery really is a race against time
December 13, 2021
Is VPOTUS Bluetooth-phobic or sensible? The answer’s pretty clear
December 13, 2021
Timekeeping biz Kronos hit by ransomware and warns customers to engage biz continuity plans
December 13, 2021
Ooh, an update. Let’s install it. What could possibly go wro-
December 13, 2021
Log4Shell explained – how it works, why you need to know, and how to fix it
December 13, 2021
How to detect the Log4j vulnerability in your applications
December 10, 2021
Irish Health Service ransomware attack happened after one staffer opened malware-ridden email
December 10, 2021
“Log4Shell” Java vulnerability – how to safeguard your servers
December 10, 2021
Log4j RCE: Emergency patch issued to plug critical auth-free code execution hole in widely-used logging utility
December 10, 2021
Revealed: Remember the Sony rootkit rumpus? It was almost oh so much worse
December 10, 2021
Ransomwared payroll provider leaks data on 38,000 Australian government workers
December 10, 2021
A third of you slackers out there still aren’t using HTTPS by default
December 9, 2021
S3 Ep62: The S in IoT stands for security (and much more) [Podcast+Transcript]
December 9, 2021
Resistance is … cheap? Cloudflare, Mandiant, and pals form incident response ‘n’ cyber insurance borg
December 9, 2021
Ransomware giving you sleepless nights? Here’s how to insure a good night’s sleep
December 9, 2021
Oz Feds reveal distribution model behind backdoored ‘An0m’ chat app spread by crims
December 9, 2021
Canadian charged with running ransomware attack on US state of Alaska
December 8, 2021
Not all tech disasters are ‘all hands’ events. But how do you tell which is which?
December 8, 2021
Virgin Media fined £50,000 after spamming 451,000 who didn’t want marketing emails
December 8, 2021
What’s the right amount of trust to build into your network? Less than Zero
December 8, 2021
Microsoft extends Secured-core concept to servers
December 8, 2021
Firefox update brings a whole new sort of security sandbox
December 7, 2021
Cryptominers aren’t just a headache – they’re a big neon sign that Bad Things are on your network
December 7, 2021
Foreign Office IT chaos: Shocking testimony reveals poor tech support hindered Afghan evac attempts
December 7, 2021
Integrate security into CI/CD with the Trivy scanner
December 7, 2021
Microsoft wins court approval to take over sites run by Chinese crime gang
December 7, 2021
LINE Pay leaks around 133,000 users’ data to GitHub, of all places
December 7, 2021
Spar shops across northern UK shut after cyber attack hits payment processing abilities
December 6, 2021
Miscreants make off with $150m of digital assets in BitMart security breach
December 6, 2021
Cryptocurrency startup fails to subtract before adding, loses $31m
December 6, 2021
Cuba ransomware gang scores almost $44m in ransom payments across 49 orgs, say Feds
December 6, 2021
American diplomats’ iPhones reportedly compromised by NSO Group intrusion software
December 4, 2021
Utility biz Delta-Montrose Electric Association loses billing capability and two decades of records after cyber attack
December 3, 2021
Feds charge two men with claiming ownership of others’ songs to steal YouTube royalty payments
December 3, 2021
Protecting your critical infrastructure is one thing…protecting your backups is the same thing
December 3, 2021
Mozilla patches critical “BigSig” cryptographic bug: Here’s how to track it down and fix it
December 3, 2021
Netgear router flaws exploitable with authentication … like the default creds on Netgear’s website
December 3, 2021
BadgerDAO DeFi defunded as hackers apparently nab millions in crypto tokens
December 2, 2021
S3 Ep61: Call scammers, cloud insecurity, and facial recognition creepiness [Podcast]
December 2, 2021
IoT devices must “protect consumers from cyberharm”, says UK government
December 2, 2021
New UK product security law won’t be undercut by rogue traders upping and vanishing, government boasts
December 2, 2021
European Cybercrime Centre confident it’s kicked credit card crims – again
December 2, 2021
Three key ransomware actors changed jobs on October 18 – the same day REvil went dark
December 2, 2021
Rewriting your disaster recovery plan might just save your company…and could transform it
December 1, 2021
Singapore and UK ink digital trade agreements at Future Tech Forum in London
December 1, 2021
UK watchdog’s punishment for Blackbaud, Easyjet, other big privacy lawbreakers was slap on the wrist in private
December 1, 2021
UK intel chief says MI6 must outsource innovation – and James Bond’s in-house ‘Q’ is nonsense
December 1, 2021
It’s the flu season – FluBot, that is: Surge of info-stealing Android malware detected
November 30, 2021
Visiting a booby-trapped webpage could give attackers code execution privileges on HP network printers
November 30, 2021
Controversial face matchers Clearview set to be fined over $20m
November 30, 2021
Leaked footage shows British F-35B falling off HMS Queen Elizabeth and pilot’s death-defying ejection
November 30, 2021
Lloyd’s of London suggests insurers should not cover ‘retaliatory cyber operations’ between nation states
November 30, 2021
Winter is coming … with a blizzard of live and virtual SANS Institute events
November 30, 2021