Menu



Gallery

You’ve trained at the cutting edge, here’s how to keep your DFIR skills razor sharp
September 21, 2021
Apache OpenOffice can be hijacked by malicious documents, fix still in beta
September 20, 2021
Ransomware recovery: Start getting back up before you’re even hit
September 20, 2021
“Back to basics” as courier scammers skip fake fees and missed deliveries
September 20, 2021
Tick, tick, tick … TikTok China just limited kids to 40 minutes’ use each day
September 20, 2021
Yes, of course there’s now malware for Windows Subsystem for Linux
September 17, 2021
Something phishy: Tech recruiters jabbed by fake COVID-19 Passport scam
September 17, 2021
Is it OK to use stolen data? What if it’s scientific research in the public interest?
September 17, 2021
WTF? Microsoft makes fixing deadly OMIGOD flaws on Azure your job
September 17, 2021
Aviation-themed phishing campaign pushed off-the-shelf RATs into inboxes for 5 years
September 16, 2021
Hack yourself before someone else does it for you
September 16, 2021
OMIGOD, an exploitable hole in Microsoft open source code!
September 16, 2021
Ransomware-hit law firm secures High Court judgment against unknown criminals
September 16, 2021
Computer and data scientists should be as highly regarded as ‘warriors’ says top UK cybergeneral
September 16, 2021
De-identify, re-identify: Anonymised data’s dirty little secret
September 16, 2021
It’s time to delete that hunter2 password from your Microsoft account, says IT giant
September 16, 2021
This is AUKUS for China – US, UK, Australia reveal defence tech-sharing pact
September 16, 2021
S3 Ep50: Two 0-days plus another 0-day plus a fast food bug [Podcast]
September 15, 2021
Ransomware crims saying ‘We’ll burn your data if you get a negotiator’ can’t be legally paid off anyway
September 15, 2021
Ex-US intel, military trio were cyber-mercenaries for UAE, say prosecutors
September 15, 2021
Microsoft’s end-of-summer software security cleanse crushes more than 80 bugs
September 15, 2021
Krita art app users targeted by ransomware posing as paid ‘collaboration’ opportunities
September 14, 2021
Security bods boost Apple iPhone hardware attack research with iTimed toolkit
September 14, 2021
Brits open doors for tech-enabled fraudsters because they ‘don’t want to seem rude’
September 14, 2021
Thousands of internet-connected databases contain high or critical CVEs, says report by cloud security biz
September 14, 2021
ExpressVPN bought for $1bn by Brit biz with an intriguing history in adware
September 14, 2021
Apple products vulnerable to FORCEDENTRY zero-day attack – patch now!
September 14, 2021
Apple emergency patches fix zero-click iMessage bug used to inject NSO spyware
September 13, 2021
How a glitch in the Matrix led to apps potentially exposing encrypted chats
September 13, 2021
Serious Security: How to make sure you don’t miss bug reports!
September 13, 2021
Open redirect on UK council website was being used for Royal Mail-themed parcel payments scam
September 13, 2021
You can ‘go your own way’ over GDPR, says UK’s new Information Commissioner
September 13, 2021
WhatsApp to offer end-to-end encrypted backups in iCloud, Google Drive with user-managed keys
September 11, 2021
Hey – how did you get in here? Number one app security weakness of 2021 was borked access control, says OWASP
September 10, 2021
S3 Ep49: Poison PACs, pointless alarms and phunky bugs [Podcast]
September 9, 2021
McDonald’s email blunder broadcasts database creds to comedy competition winners
September 9, 2021
LA cops told to harvest social media handles from people they stop, suspect or not
September 9, 2021
Microsoft fixes flaw that could leak data between users of Azure container services
September 9, 2021
New Zealand DDoS wave targets banks, post offices, weather forecasters and more
September 8, 2021
Proton welcomes Sir Tim Berners-Lee to its advisory board – as ProtonMail suffers a privacy backlash
September 8, 2021
3 years, 17 alphas, 2 betas, and over 7,500 commits later, OpenSSL version 3 is here
September 8, 2021
Windows zero-day MSHTML attack – how not to get booby trapped!
September 8, 2021
UK.gov is launching an anti-Facebook encryption push. Don’t think of the children: Think of the nuances and edge cases instead
September 8, 2021
AT&T Alien Labs warns of ‘zero or low detection’ for TeamTNT’s latest malware bundle
September 8, 2021
Global pandemic was good for business, say UK infosec pros – but we’re still burning out
September 8, 2021
Patch now? Why enterprise exploits are still partying like it’s 1999
September 8, 2021
Ransomware attacks are inevitable. Paying the ransom isn’t
September 8, 2021
Miscreants fling booby-trapped Office files at victims, no patch yet, says Microsoft
September 7, 2021
Can WhatsApp moderators really read your encrypted texts? Yes … if you forward them to the abuse dept
September 7, 2021
British data watchdog brings cookies to G7 meeting – pop-up consent requests, not the delicious baked treats
September 7, 2021
ProtonMail deletes ‘we don’t log your IP’ boast from website after French climate activist reportedly arrested
September 7, 2021
Guntrader breach perp: I don’t think it’s a crime to dump 111k people’s details online in Google Earth format
September 7, 2021
Glasgow firm fined £150k after half a million nuisance calls, spoofing phone number, using false trading names
September 7, 2021
Poisoned proxy PACs! The NPM package with a network-wide security hole…
September 6, 2021
Jenkins struck by ‘Confluenza’ as US Cyber Command warns Atlassian flaw ‘cannot wait’
September 6, 2021
When the bits hit the fan: What to do when ransomware strikes
September 6, 2021
Indonesian President’s COVID jab cert leaks – authorities argue that’s perfectly reasonable
September 6, 2021
Norwegian student tracks Bluetooth headset wearers by wardriving around Oslo on a bicycle
September 4, 2021
Apple stalls CSAM auto-scan on devices after ‘feedback’ from everyone on Earth
September 3, 2021
Rapid7 says Computer Misuse Act should include ‘good faith’ infosec research exemption
September 3, 2021
New Zealand internet outage blamed on DDoS attack on nation’s third largest internet provider
September 3, 2021
S3 Ep48: Cryptographic bugs, cryptocurrency nightmares, and lots of phishing [Podcast]
September 3, 2021
Confessions of a ransomware negotiator: Well, somebody’s got to talk to the criminals holding data hostage
September 3, 2021
Spring or autumn, your biggest cyber threat could be in the cloud
September 2, 2021
FTC bans ‘brazen’ stalkerware maker SpyFone, orders data deletion, alerts to victims
September 2, 2021
NSA: We ‘don’t know when or even if’ a quantum computer will ever be able to break today’s public-key encryption
September 2, 2021
Autodesk was one of the 18,000 firms breached in SolarWinds attack, firm admits
September 2, 2021
Pwned! The home security system that can be hacked with your email address
September 2, 2021
In space, no one can hear cyber security professionals scream
September 2, 2021
UK VoIP telco receives ‘colossal ransom demand’, reveals REvil cybercrooks suspected of ‘organised’ DDoS attacks on UK VoIP companies
September 2, 2021
How to secure REST with Spring Security
September 2, 2021
Dissected: A dropper-as-a-service miscreants pay to push their malware onto potentially 1,000s of victims
September 2, 2021
Fired credit union employee admits: I wiped 21GB of files from company’s shared drive in retaliation
September 1, 2021
Relax, says NSA: There’s no such thing as a quantum computer that’ll crack current encryption algos
September 1, 2021
Indonesian authorities probe million-record leak from national COVID app
September 1, 2021
Singapore adds a third bug bounty program – this time to fortify government digital services
September 1, 2021
US officials, experts fear China ransacked Exchange servers for data to train AI systems
August 31, 2021
Skimming the CREAM – recursive withdrawals loot $13M in cryptocash
August 31, 2021
Leaked Guntrader firearms data file shared. Worst case scenario? Criminals plot UK gun owners’ home addresses in Google Earth
August 31, 2021
Drowning in cybersecurity info? Make a dash to Security SOS Week 2021
August 31, 2021
Bangkok Airways hit by LockBit ransomware attack, loses lotsa data after refusing to pay
August 31, 2021
Boffins find if you torture AMD Zen+, Zen 2 CPUs enough, they are vulnerable to Meltdown-like attack
August 30, 2021
Microsoft warns of widespread open redirection phishing attack – which Defender can block, coincidentally
August 27, 2021
Slap on wrist for NCC Group over CREST exam-cheating scandal as infosec org agrees to rewrite NDAs and more
August 27, 2021
Azure’s now-fixed Cosmos DB flaw could have been exploited to read, write any database
August 27, 2021
Big bad decryption bug in OpenSSL – but no cause for alarm
August 27, 2021
S3 Ep47: Daylight robbery, spaghetti trouble, and mousetastic superpowers [Podcast]
August 26, 2021
Surveillance tech company sues Police Digital Service over ‘flawed’ scoring of bids on £18m contract
August 26, 2021
Big tech proud as punch about cameos in Joe Biden’s security theatre
August 26, 2021
Atlassian warns of critical Confluence flaw
August 26, 2021
Israeli firm Bright Data named as enabler of Philippines government DDOS attacks on opposition groups
August 26, 2021
ProxyLogon flaw, evil emails, SQL injections used to open backdoors on Windows boxes
August 25, 2021
Mirai-style IoT botnet is now scanning for router-pwning critical vuln in Realtek kit
August 25, 2021
Security blind spots persist as companies cross-breed security with devops
August 25, 2021
Fake Apple rep amasses 620,000+ stolen iCloud pics, vids in hunt for images of nude women to trade
August 24, 2021
How a gaming mouse can get you Windows superpowers!
August 24, 2021
Proofpoint wins $14m from ex-VP and French email security rival in IP theft court battle
August 24, 2021
Microsoft, Google partner on eBPF
August 24, 2021
Chinese auto-maker accused of altering data after fatal autonomous car accident
August 24, 2021
Poly Network says it’s got pretty much all of that $610m in stolen crypto-coins back
August 23, 2021