How not to tell your customers how much you care about their security
We've written before about "what not to do" when sending emails to your customers. Here's another example, with an explanation of why doing the right thing will be better for everyone - including your...
View ArticleGoogle's Android security chief: Don't bother with anti-virus. Is he serious?
Google's chief security engineer for Android, Adrian Ludwig, claims that most users shouldn't bother with anti-virus and that security companies are overstating the problem of Android malware. Can he...
View ArticleAustralian police using tower dumps to slurp mass phone data
Australian federal and state police have joined the ranks of mega-data slurpers - namely, the US, where 1 in 4 law enforcement agencies have reportedly used a "tower dump" - ordering phone providers to...
View ArticleUS arrests Russian MP's son for PoS hacking; Russia calls it kidnapping
The Russian man's father conjectures that, for all he knows, this may be a ploy for the US to get bait to exchange for Snowden.
View ArticlePatch Tuesday wrap-up, July 2014 - Adobe fixes "Rosetta", plus a new risky...
Patch Tuesday for July 2014 is just behind us in the case of Microsoft and Adobe, and just ahead of us in the case of Oracle. Paul Ducklin tells you what you need to know...
View ArticleGoogle lawsuit highlights why every business needs to manage its online presence
Virginia restaurant owner Rene Bertagna is suing Google, claiming that his business' listing was sabotaged by a competitor and that the web giant turned a blind eye.
View ArticleGoogle Drive security hole leaks users' files
The flaw, which Google recently patched, was giving out original documents to unauthorized users via embedded links. It's yet another example of how storing documents "in the cloud" means "heaven knows...
View ArticleDARPA dissects Twitter, Facebook, Reddit to extract propaganda how-to's
The internet found out last week that Facebook's been dissecting us. Now, it looks like DARPA's been at it too, with research on users of Facebook, Twitter, Reddit, Pinterest, Kickstarter and Digg.
View ArticleWhat would make you quit Facebook? Here's what you said ...
Last week we asked our readers to take a poll about Facebook's controversial social experiment on thousands of unknowing users. Lots of you responded - more than 1,000 - and we received a lot of great...
View ArticleSSCC 155 - cybercrime bust, cloud laws, phishing and malware back from...
In this episode, Sophos experts John Shier and Paul Ducklin tackle the week's interesting security stories. John and Duck get stuck into: a high-profile cybercrime arrest; how mainstream brands help...
View ArticleUK to rush through "emergency" phone and internet data retention law
The UK is rushing through Parliament what it calls an emergency law that will ensure it retains access to people's phone and internet records, in spite of the European Court of Justice having said in...
View ArticleTor Project is NOT getting sued for enabling revenge porn site PinkMeth
A Texas revenge-porn victim is suing the operators of revenge-porn site PinkMeth.com and was (until her lawyer figured out just what, exactly, the anonymising service Tor actually is) suing The Tor...
View ArticleMicrosoft and No-IP reach settlement over malware takedown
Microsoft has reached a settlement with domain provider No-IP less than two weeks after it grabbed 23 internet domain names, knocking out 1.8 million customer sites and over 5 million hostnames.
View ArticleNo login links in emails, please! 60 Sec Security [VIDEO]
Got a minute to spare? Watch this week's 60 Second Security...
View ArticleLibreSSL ships first portable version, now up to 48% less huge!
LibreSSL, OpenBSD's drop-in replacement for OpenSSL started after the pain of Heartbleed, has just published its first "portable" version. If you're a coder and you're interested in security, why not...
View Article"Gameover" malware returns from the dead...
In early June 2014, a internationally co-ordinated law enforcement effort against the criminals behind the infamous Gameover malware pretty much wiped out their botnet altogether. Bad news - it looks...
View ArticleMonday review - the hot 20 stories of the week
Get yourself up to date with everything we've written in the last seven days - it's weekly roundup time.
View ArticleiPhones are a security threat to the state, China claims
China has cited Apple iPhone's ability to track and time-stamp users' whereabouts as reason to declare the mobile phone hazardous to state security.
View ArticleHow to burn a password into your brain
It turns out that it can actually be surprisingly easy to train people to memorise a 56-bit password or passphrase, two Microsoft researchers found.
View ArticleArrests made after keyloggers found on public PCs at US hotels
Proof of the lack of hygiene in publicly accessible PCs came up yet again when the US Secret Service last week warned that cybercrooks are installing keyloggers on the PCs in hotel business centers to...
View Article