S3 Ep124: When so-called security apps go rogue [Audio + Text]

By: Paul Ducklin — March 2^nd 2023 at 15:40

Rogue software packages. Rogue "sysadmins". Rogue keyloggers. Rogue authenticators. Rogue ROGUES!

s3-ep124-auth--1200

LastPass: Keylogger on home PC led to cracked corporate password vault

By: Paul Ducklin — February 28^th 2023 at 02:23

Seems the crooks implanted a keylogger via a vulnerable media app (LastPass politely didn't say which one!) on a developer's home computer.

By: Paul Ducklin — January 26^th 2023 at 15:57

Lastest episode - listen now! (Or read the transcript.)

By: Paul Ducklin — January 25^th 2023 at 01:37

We were going to write, "Once more unto the breach, dear friends, once more"... but it seems to go without saying these days.

By: Paul Ducklin — January 5^th 2023 at 17:52

Lots of big issues this week: breaches, encryption, supply chains and patching problems. Listen now! (Full transcript inside.)

By: Paul Ducklin — December 23^rd 2022 at 17:58

The crooks now know who you are, where you live, which computers are yours, where you go online... and they got those password vaults, too.

By: Paul Ducklin — December 2^nd 2022 at 01:10

Seems that the developer account that the crooks breached last time gave indirect access to customer data this time round.

By: Paul Ducklin — September 22^nd 2022 at 16:42

Latest episode - listen now! Learn why adopting 2FA isn't a reason to relax your other security precautions...

By: Paul Ducklin — September 19^th 2022 at 16:59

Wondering how you'd handle a data breach report if the worst happened to you? Here's a useful example.

By: Paul Ducklin — September 1^st 2022 at 16:55

Latest episode - listen now!

By: Paul Ducklin — August 29^th 2022 at 16:59

What does the recent LastPass breach mean for password managers? Just a bump in the road, or a reason to ditch them entirely?