PWN2OWN 2014 - Find the "exploit unicorn" and win $150,000
It's called PWN2OWN because if you successfully pwn, or hack into, the competition laptop, you own it *literally* - you get to take it home with you. But there's also $645,000 in cash up for grabs,...
View ArticleFacebook's 10 years of security & privacy thrills 'n spills
Happy 10th birthday, Facebook! We shall celebrate by listicling the service's security and privacy greatest hits and biggest misses. Fasten your Facebelts!
View ArticleAdobe fixes critical Flash flaw
Adobe has released an emergency update to its ubiquitous Flash Player software. The flaw is being exploited by attackers so you should update as soon as possible.
View ArticleSSCC 133 – Prize unicorns, Android malware, 2FA, Attack reports and Vote For...
Chet and Duck review the week's news in their informed and entertainingly serious style, discussing the prizes on offer at this year's PWN2OWN competition, talking about a new twist in Android malware,...
View ArticleMisleading advertisements lead to hijacked browser settings
Advertisements don't have a great track record for safety and we are beginning to see more frequent abuse of search and mobile ads to deliver unwanted addons purporting to be legitimate tools. Be...
View ArticleFirefox 27 is out – Tuesday’s second non-Patch-Tuesday update
Even though yesterday wasn't a Patch Tuesday, we ended up with two major browser-related updates: an unscheduled Adobe Flash patch, and an expected one: the update from Firefox 26 to Firefox 27. Paul...
View ArticleMicrosoft, Facebook, Google and Yahoo release NSA snooping stats
The US government had a change of heart regarding disclosure of NSA surveillance requests. Tech companies including Facebook, Microsoft, Google, and Yahoo have duly let loose the goods - but six months...
View ArticleSEA attempts to hack Facebook and other MarkMonitor domain customers
The group known as the Syrian Electronic Army (SEA) attempted to commandeer the DNS records of Facebook, but were thwarted by DNS provider MarkMonitor. Are the basic protocols up to the task of...
View ArticleComcast servers compromised by same attackers as Bell Canada
After exposing usernames and passwords from Bell Canada, hacking group NullCrew claims to have compromised email servers at ISP Comcast.
View ArticleReport shows US federal agencies are failing to employ very basic security...
Everything from passwords being left around on desks to computers missing critical patches to sensitive data being stored on unencrypted laptops. Believe it or not - that's just the 'tame' stuff. It...
View ArticleGoogle Chrome will warn you when it's been hijacked
The warning flare comes as a window for Windows users that features a "reset" button to get the browser back to factory-fresh settings.
View ArticleDid the crooks who broke into Target tailgate the cleaners?
Intrepid chronicler of the Target breach, Brian Krebs, has uncovered yet another cog in the criminal gearbox behind Target's data disaster. Guess what? 2FA and network segregation would have made...
View ArticleHow Facebook leaked thousands of private messages all because of a typo
We shouldn't know about how this teenager's friends slaughtered calves in Farmville or that her idol is some dreamy looking guy, but we do, all because of a bizarre, fluky little glitch in the email...
View ArticleWill passports of the future incorporate our body smell?
Researchers have developed a sensor that can detect volatile elements present in body odour and report that it would allow identification within a group of people. Is this the next big idea in...
View ArticleAnatomy of a poisoned image: colour-coded JavaScript!
Colour-coded JavaScript? Paul Ducklin looks into a malware writer's poisoned-image trick that tells an interesting (and, though it hurts to say it, an amusing) story of subterfuge and guile...
View ArticleThe Spampionship, the PWN2OWN unicorn, and how Target was breached – 60 Sec...
Where do you find Extreme Spammers? Can you find the exploit unicorn? And how did Target get breached? Find out in 60 Sec Security for 08 Feb 2014...
View ArticleA hearty welcome to all Cyberoamers!
Today, Sophos announced that it has acquired Cyberoam, a fellow player in the network security market. So we'd like to send out a big "Hello" and say, "Welcome to Sophos, all Cyberoamers!"
View ArticlePatch Tuesday - no critical updates for XP...then Microsoft adds two XP fixes...
Here's a quick run-down of what you'll face in the February 2014 Patch Tuesday update from Microsoft, which comes out tomorrow.
View ArticleUS military seeks technology for remotely blowing gadgets into dust piles
On the TV show Mission: Impossible, the tape with mission instructions always self-destructed, sometimes crumbling and sometimes going up in smoke. The US military wants that to happen in real life...
View ArticleFacebook: At least 67 million accounts are fake
Based on Facebook's own figures, anywhere from 67 up to 137 million of its monthly users are either duplicate, malicious or otherwise 'fake'.
View Article