D-Link patches “Joel’s Backdoor” security hole in its SoHo routers
About six weeks ago we wrote about an amusingly alarming security hole in various D-Link routers. D-Link has now come out with a firmware fix - don't forget to update if you're on the affected list...
View ArticleFrom the Labs: New PlugX malware variant takes aim at Japan
SophosLabs Principal Researcher Gabor Szappanos takes on a recent PlugX malware sample. He finds a curious mixture of similarities and differences with earlier versions - and a brand new target group:...
View ArticleCyber Monday sting seizes 706 counterfeit sites
An international strike force has seized 706 counterfeit-peddling sites in the fourth annual Cyber Monday crackdown, dubbed Project Cyber Monday IV. Meanwhile, authorities are seizing goods such as...
View ArticleCar manufacturers quizzed over their anti-hacking measures
A US senator has asked leading car manufacturers to explain how they secure their vehicles against cyber attacks. Democrat Edward Markey asked 20 leading car makers to respond to a set of questions...
View ArticleFestive season security myth: “If there are no links in an email, it can’t be...
The festive season is a good time to make sure your friends and family haven't fallen in with falsehoods when it comes to computer security. Paul Ducklin examines an email with no clickable links that...
View ArticleMillion-dollar fine for sneaky Bitcoin botnet builders
New Jersey has slapped a million-dollar fine on an on-line gaming company that sneakily used its own anti-cheating software to mine Bitcoins on its customers' computers. The company is paying under...
View ArticlemSpy app lets someone remotely snoop on you through your phone or tablet
The app allows customers to remotely spy on text messages, call logs, and emails; track location, record surroundings, stealthily keep tabs on calendar information; record conversations; determine GPS...
View ArticleJP Morgan Chase owns up to data breach: 465,000 customers at risk
JP Morgan Chase is the latest financial institution to own up to a data breach. The details are still scanty, but it looks as though it happened back in July, wasn't noticed until September and was...
View ArticleMicrosoft and partners fight back against the ZeroAccess botnet
Microsoft, in conjunction with Europol and the FBI, have successfully taken down the click fraud servers used by ZeroAccess, disrupting one of the world's largest and most resilient botnets.
View ArticleiPhones are off limits to President Obama for “security reasons”
US President Barack Obama is stuck using a BlackBerry. He actually fought for the right to keep using it when he first got to office in 2009. Let's hope he still likes the gadget, because the powers...
View ArticleNSA tracking hundred of millions of mobile phone locations worldwide
The US' National Security Agency (NSA) is collecting and storing the locations of at least hundreds of millions of devices, even when they're switched off, according to Edward Snowden.
View ArticleFacebook trolling UK cop gets off with wrist-slap following closed-door hearing
A UK policeman arrested in connection with internet troll abuse against Nicola Brookes that's dragged on over two years has been disciplined with the most severe punishment possible from a "Misconduct...
View ArticleFTC acts against “Brightest Flashlight” app for deceptively tracking your...
A torch that needs to know where you are? What on earth for? So it can adapt the intensity of the light to your latitude? Of course not! The data was mined and sold to advertisers...
View ArticleFTC slapdown, no iPhone for Mr President, and Dutch banks get tough - 60 Sec...
How could the brightest flashlight leave you in the dark? Do you need to close Joel's Backdoor? Why can't the President choose his own phone? Should you update your anti-virus before you bank online?...
View ArticleMicrosoft Patch Tuesday – get ready to patch and reboot the lot, including...
This month really is an omnibus update: all platforms are affected, from XP to 8.1 and from Server 2003 to 2012, including stripped-down Server Core installs. It looks as though the NDPROXY.SYS kernel...
View ArticleMonday review - the hot 22 stories of the week
Get yourself up to date with everything we've written in the last seven days - it's weekly roundup time.
View ArticleMicrosoft's anti-NSA encryption pledge raises questions
Microsoft says it's fast-tracking the encryption of consumer data and moving toward greater source-code transparency. It sounds good on paper, though there are those who question why Skype, for one,...
View ArticlePresident Obama to propose "self-restraint" on NSA
Without going into detail, US President Barack Obama has said that he'll propose "some self-restraint" to the National Security Agency (NSA) in order to rein in rampant snooping.
View ArticleSerious Security: Google finds fake but trusted SSL certificates for its...
Google just announced the discovery of a bunch of fake SSL certificates for some of its own domains. The bogus certificates were apparently signed by the certificate authority of the French Treasury....
View ArticleAre contractors the weak link in your security chain?
Everyone we do business with, share data with, outsource operations to, sell things to or buy things from forms a part of our own security chain. A breach at any point in the chain can have an impact...
View Article