Menu



Gallery

3D printing site Thingiverse suffers breach of 228,000 email addresses amid sluggish disclosure
October 14, 2021
S3 Ep54: Another 0-day, double Apache patch, and Fight The Phish [Podcast]
October 14, 2021
US invites friends to multilateral cybersecurity meetings – Russia and China strangely absent
October 14, 2021
Ad-blocking browser extension actually adds ads, say Imperva researchers
October 14, 2021
Romance scams with a cryptocurrency twist – new research from SophosLabs
October 13, 2021
Ex-camera biz Olympus investigating ‘suspicious’ network activity again a month after ransomware hit
October 13, 2021
Microsoft says Azure fended off what might just be the world’s biggest-ever DDoS attack
October 13, 2021
Microsoft Patch Tuesday bug harvest festival comes to town
October 12, 2021
User locked out of Microsoft account by MFA bug, complains of customer-hostile support
October 12, 2021
Apple patches ‘actively exploited’ iPhone zero-day with iOS 15.0.2 update
October 12, 2021
Schools email marketing company told us to go away when we told them of exposed database creds, say infoseccers
October 12, 2021
What’s missing from most ICS cybersecurity training? The ICS itself…
October 12, 2021
Apple quietly patches yet another iPhone 0-day – check you have 15.0.2
October 12, 2021
Zero-day hunters seek laws to prevent vendors suing them for helping out and doing their jobs
October 11, 2021
Russia-based criminals are still the UK’s number 1 cyber-foe, NSO Group’s wares a ‘red flag’ says NCSC chief
October 11, 2021
Cybersecurity awareness month: Fight the phish!
October 11, 2021
Brewdog might make an OK pint but its security sucks: Flaw opened door to free beers for anyone
October 11, 2021
When criminals go corporate: Ransomware-as-a-service, bulk discounts and more
October 11, 2021
Gripped by cybersec career indecision? Don’t give up. Level up
October 11, 2021
US nuke sub plans leaked on SD card hidden in peanut butter sandwich, claims FBI
October 11, 2021
Apache patch proves patchy – now you need to patch the patch
October 8, 2021
Never mind Russia: Turkey and Vietnam are Microsoft’s new state-backed hacker threats du jour
October 8, 2021
Air gaps have been ‘shattered’, says new Indian policy on power sector security
October 8, 2021
Russian spies reportedly used SolarWinds hack to steal US counterintelligence details
October 7, 2021
You know what ransomware attackers really, really like? Yes, your backups…
October 7, 2021
S3 Ep53: Apple Pay, giftcards, cybermonth, and ransomware busts [Podcast]
October 7, 2021
NSO Group’s Pegasus malware was used to spy on Dubai princess’s lawyers during child custody dispute
October 7, 2021
State-sponsored Chinese crims targeted India with tax and COVID phishing
October 7, 2021
Are you making good progress with Kubernetes? Cybercriminals are progressing faster
October 6, 2021
Apache web server zero-day bug is easy to exploit – patch now!
October 6, 2021
Running a recent Apache web server version? You probably need to patch it. Now
October 6, 2021
Things that are not PogChamp: Twitch has its source code, streamer payout data leaked
October 6, 2021
Element celebrates The Great Facebook Outage with a Signal bridge for Matrix
October 6, 2021
Google to auto-enroll 150m users, 2m YouTubers with two-factor authentication
October 6, 2021
Europol announces two more ransomware busts in Ukraine
October 5, 2021
Telegraph newspaper bares 10TB of subscriber data and server logs to world+dog
October 5, 2021
Lawsuit claims hospital ransomware infection cost baby her life
October 4, 2021
UK’s £5bn National Cyber Force HQ to be sited in Lancashire beside Defence Secretary’s constituency
October 4, 2021
Ukrainian cops cuff two over $150m ransomware gang allegations, seize $1.3m in cryptocurrency
October 4, 2021
Cybersecurity Awareness Month: #BeCyberSmart
October 4, 2021
Sir Tim Berners-Lee and the BBC stage a very British coup to rescue our data from Facebook and friends
October 4, 2021
Firewalls? Pfft – it’s no match for my mighty spares-bin PC
October 4, 2021
Internet Archive’s 2046 Wayforward Machine says Google will cease to exist
October 1, 2021
Sure, you can do Kubernetes at scale. But can you do it securely too?
October 1, 2021
That ‘anti-NSO Pegasus spyware’ download is actually a Trojan – so don’t touch it
October 1, 2021
Gift card fraud: four suspects hit with money laundering charges
October 1, 2021
IKEA: Cameras were hidden in the ceiling above warehouse toilets for ‘health and safety’
October 1, 2021
2FA? More like 2F-in-the-way: It seems no one wants me to pay for their services after all
October 1, 2021
Revealed: How to steal money from victims’ contactless Apple Pay wallets
September 30, 2021
Ransomware crim: Yeah, what I do is bad. No, I don’t care. Yes, infosec bods are all mouth and no trousers
September 30, 2021
How to steal money via Apple Pay using the “Express Transit” feature
September 30, 2021
S3 Ep52: Let’s Encrypt, Outlook leak, and VMware exploit [Podcast]
September 30, 2021
Which? survey finds people would actually pay the online giants not to take their data
September 30, 2021
UK MoD data strategy calls for social media surveillance on behalf of ‘local authorities’
September 30, 2021
How to prevent CSRF attacks in ASP.NET Core
September 30, 2021
Attacks against Remote Desktop Protocol endpoints have exploded this year, warns ESET’s latest Threat Report
September 30, 2021
Anonymous: We’ve leaked disk images stolen from far-right-friendly web host Epik
September 30, 2021
Don’t look a GriftHorse in the mouth: Trojan trampled 10 million Android devices
September 29, 2021
Unpatched flaw ‘weaponises’ Apple AirTags to turn them into the phisherman’s friend
September 29, 2021
Akamai beefs up cybersecurity portfolio with ransomware-tastic Guardicore acquisition
September 29, 2021
Kaspersky links new Tomiris malware to Nobelium group
September 29, 2021
Give put-upon infosec bods professional recognition to keep them working for you, says chartered institute
September 29, 2021
REvil customers complain ransomware gang uses backdoors to filch ransoms
September 29, 2021
ASUS patches ROG Armoury Crate app after researcher spots all-too-common flaw
September 28, 2021
Serious Security: Let’s Encrypt gets ready to go it alone (in a good way!)
September 28, 2021
Latest FinFisher spyware upgrades ‘particularly worrying,’ says Kaspersky
September 28, 2021
How to secure cloud infrastructure across the development lifecycle
September 28, 2021
UK umbrella payroll firm GiantPay confirms it was hit by ‘sophisticated’ cyber-attack
September 28, 2021
Microsoft warns: Active Directory FoggyWeb malware being actively used by Nobelium gang
September 28, 2021
Q2 2022 should see networking sales boom – when payouts to replace Huawei and ZTE kit start to flow
September 28, 2021
Emails, chat logs, more leaked online from far-right militia linked to US Capitol riot
September 28, 2021
Blockhead admits to helping North Korea mine crypto-bucks, faces 20 years jail
September 28, 2021
India, Japan flex cyber-defence muscles as China kicks the Quad
September 28, 2021
Story of the creds-leaking Exchange Autodiscover flaw – the one Microsoft wouldn’t fix even after 5 years
September 27, 2021
Move faster with continuous security scanning in the cloud
September 27, 2021
UK’s National Crime Agency WLTM Deputy Director of Digital Data & Technology
September 27, 2021
Fake ‘BT’ caller fleeces elderly victim of £30k in APP app scam
September 27, 2021
Cyber security in the public cloud
September 27, 2021
‘Quad’ group seeks to set security standards for global tech industry
September 27, 2021
Frustrated dev drops three zero-day vulns affecting Apple iOS 15 after six-month wait
September 24, 2021
S3 Ep51: OMIGOD a gaping hole, waybill scams, and Face ID hacked [Podcast]
September 24, 2021
The real value of continuous security scanning for cloud-based workloads
September 24, 2021
Stop worrying that crims could break the ‘net, say cyber-diplomats – only nations have tried
September 24, 2021
Apple warns of arbitrary code execution zero-day being actively exploited on Macs
September 24, 2021
STILL ALIVE! iOS 12 gets 3 zero-day security patches – update now
September 23, 2021
How Outlook “autodiscover” could leak your passwords – and how to stop it
September 23, 2021
UK Ministry of Defence apologises – again – after another major email blunder in Afghanistan
September 23, 2021
Researchers finger new APT group, FamousSparrow, for hotel attacks
September 23, 2021
Zoom’s $15bn merger with Five9 probed by Uncle Sam for national security risks
September 22, 2021
Apple tried to patch this security hole in macOS Finder but didn’t consider upper and lowercase characters
September 22, 2021
Lithuania tells its citizens to throw Xiaomi mobile devices in the bin
September 22, 2021
Microsoft Exchange Autodiscover protocol found leaking hundreds of thousands of credentials
September 22, 2021
VMware patch bulletin warns: “This needs your immediate attention.”
September 22, 2021
Break out your emergency change process and patch this ransomware-friendly bug ASAP, says VMware
September 22, 2021
Database containing personal info on 106m people who traveled to Thailand found open to the internet – report
September 21, 2021
Suex to be you: Feds sanction cryptocurrency exchange for handling payments from 8+ ransomware variants
September 21, 2021
iOS 15 includes Face ID fix for security bypass using fake heads
September 21, 2021
Fix network printing or keep Windows secure? Admins would rather disable PrintNightmare patch
September 21, 2021
UK Ministry of Defence apologises after Afghan interpreters’ personal data exposed in email blunder
September 21, 2021
Mafia works remotely, too, it seems: 100+ people suspected of phishing, SIM swapping, email fraud cuffed
September 21, 2021