FreshRSS

🔒
❌ Secure Planet Training Courses Updated For 2019 - Click Here
☷
△ 🔃
There are new available articles, click to refresh the page.
Before yesterdayNaked Security

Performance and security clash yet again in “Collide+Power” attack

By: Paul Ducklin
It's a real vulnerability, but the data leakage rate can be as low as... let's just say that an IMAX-quality copy of the new "Oppenheimer" movie could take you 4 billion years to exfiltrate.

Apple silently pulls its latest zero-day update – what now?

By: Paul Ducklin
Previously, we said "do it today", but now we're forced back on: "Do not delay; do it as soon as Apple and your device will let you."

FBI and FCC warn about “Juicejacking” – but just how useful is their advice?

By: Paul Ducklin
USB charging stations - can you trust them? What are the real risks, and how can you keep your data safe on the road?

Google Pixel phones had a serious data leakage bug – here’s what to do!

By: Paul Ducklin
What if the "safe" images you shared after carefully cropping them... had some or all of the "unsafe" pixels left behind anyway?

Dangerous Android phone 0-day bugs revealed – patch or work around them now!

By: Paul Ducklin
Despite its usually inflexible 0-day disclosure policy, Google is keeping four mobile modem bugs semi-secret due to likely ease of exploitation.

Inside a scammers’ lair: Ukraine busts 40 in fake bank call-centre raid

By: Naked Security writer
When someone calls you up to warn you that your bank account is under attack - it's true, because THAT VERY PERSON is the one attacking you!

LastPass source code breach – incident response report released

By: Paul Ducklin
Wondering how you'd handle a data breach report if the worst happened to you? Here's a useful example.

7 cybersecurity tips for your summer vacation!

By: Paul Ducklin
Here you go - seven thoughtful cybersecurity tips to help you travel safely...

SSNDOB Market domains seized, identity theft “brokerage” shut down

By: Paul Ducklin
The online identity "brokerage" SSNDOB Market didn't want people to be in any doubt what it was selling.

“Dirty Pipe” Linux kernel bug lets anyone write to any file

By: Paul Ducklin
Even read-only files can be written to, leading to a dangerously general purpose elevation-of-privilege attack.

pipe-1200

Coronavirus SMS scam offers home PCR testing devices – don’t fall for it!

By: Paul Ducklin
Free home PCR devices would be technological marvels, and really useful, too. But there aren't any...

Log4Shell: The Movie… a short, safe visual tour for work and home

By: Paul Ducklin
Be happy that your sysadmins are taking one (three, actually!) for the team right now... here's why!

Black Friday and Cyber Monday – here’s what you REALLY need to do!

By: Paul Ducklin
The world fills up with cybersecurity tips every year when Black Friday comes round. But what about the rest of the year?

❌