MoveIt Hack: What Actions Can Data Breach Victims Take?

Gmail Spoofing Vulnerability Sparks Google Priority 1 Probe

Millions Of Users Vulnerable To Zero Day In MOVEit File Transfer App

Python Byte Code Used To Avoid Detection And Load Malware

S3 Ep137: 16th century crypto skullduggery

Lots to learn, clearly explained in plain English... listen now! (Full transcript inside.)

New Vulnerability Gives MacOS Users A Migraine

Researchers Tell Owners To Assume Compromise Of Unpatched Zyxel Firewalls

Organizations Warned Of Backdoor In Hundreds Of Gigabyte Motherboards

XFS Bug In Linux Kernel 6.3.3 Coincides With SGI Code Comebank

Critical Barracuda 0-Day Was Used To Backdoor Networks For 8 Months

Software Liability And Hard Truths Of Manufacturer Responsibility

Hacker Wins $105k For Reporting Flaws In Sonos One Speakers

OneMain Pays $4.5M After Ignored Security Flaws Caused Data Breaches

Is Cybersecurity An Unsolvable Problem?

Google Cloud Patches Vulnerability In CloudSQL Service

S3 Ep136: Navigating a manic malware maelstrom

Latest episode - listen now. Full transcript inside...

API Bug In OAuth Dev Tool Opened Apps To Account Hijacking

KeePass Bug Lets Attackers Extract The Master Password From Memory

Phone scamming kingpin gets 13 years for running “iSpoof” service

Site marketing video promised total anonymity, but that was a lie. 170 arrested already. Potentially 1000s more to follow.

Cisco Squashes Critical Bugs In Small Biz Switches

Threat Actor Bypasses Detection, Protections In Microsoft Azure Serial Console

US offers $10m bounty for Russian ransomware suspect outed in indictment

"Up to $10 million for information that leads to the arrest and/or conviction of this defendant."

Upstart Encryption App Walks Back Privacy Claims, Pulls From Stores After Probe

Intel Says Friday's Mystery Security Update Microcode Isn't Really A Security Update

Not-Too-Safe Boot: Remotely Bypassing Endpoint Security Solutions And Anti-Tampering Mechanisms

ARM Acknowledges Side-Channel Attack But Denies Cortex-M Is Crocked

Whodunnit? Cybercrook gets 6 years for ransoming his own employer

Not just an active adversary, but a two-faced one, too.

Microsoft Will Take Nearly A Year To Finish Patching New 0-Day Secure Boot Bug

More Than 2 Million Toyota Users Face Risk Of Vehicle Data Leak In Japan

Fujitsu Triggers Privacy Breach At Japanese Convenience Stores

WordPress Plugin Hole Puts 2 Million Websites At Risk

CyberGhost VPN Patches Command Injection Vulnerability

Twitter Admits To Security Incident Involving Circles Tweets

Cisco Warns RCE Bug In EOL IP Phone Adapters Won't Get Patched

Mirai Botnet Loves Exploiting Your Unpatched TP-Link Routers

Operation SpecTor: $53.4 Million Seized, 288 Vendors Arrested in Dark Web Drug Bust

An international law enforcement operation has resulted in the arrest of 288 vendors who are believed to be involved in drug trafficking on the dark web, adding to a long list of criminal enterprises that have been shuttered in recent years. The effort, codenamed Operation SpecTor, also saw the authorities confiscating more than $53.4 million in cash and virtual currencies, 850 kg of drugs, and

Apple Uses Rapid Security Response Feature For The First Time

High Severity SLP Bug Could Launch Amplified DoS Attacks

Sensitive Data Is Being Leaked From Servers Running Salesforce Software

Google wins court order to force ISPs to filter botnet traffic

CryptBot criminals are alleged to have plundered browser passwords, illicitly-snapped screenshots, cryptocurrency account data, and more.

Microsoft Probes Complaints Of Edge Leaking URLs To Bing

VMware Releases Patches For Workstation, Fusion Exploits

Evilflare: Circumventing Cloudflare's Protection

Apache Superset: A Story Of Insecure Default Keys, Thousands Of Vulnerable Systems, Few Paying Attention

Google's New Two-Factor Authentication Isn't End-To-End Encrypted

If You Haven't Patched Microsoft Process Explorer, Prepare To Get Pwned

GhostToken Vuln Could Permanently Expose Data Of Google Users

S3 Ep131: Can you really have fun with FORTRAN?

Loop-the-loop in this week's episode. Entertaining, educational and all in plain English. Transcript inside.

NSO Group Escalates Spyware Tactics With 3 New iPhone Zero-Click Exploit Chains

Russian Snoops Just Love Invading Unpatched Cisco Gear, America And UK Warn

Ex-CEO of breached pyschotherapy clinic gets prison sentence for bad data security

Did the sentence fit the crime? Read the backstory, and then have your say in our comments! (You may post anonymously.)

Chrome, Edge Browsers Targeted In Zaraza Bot Malware Attacks

FBI and FCC warn about “Juicejacking” – but just how useful is their advice?

USB charging stations - can you trust them? What are the real risks, and how can you keep your data safe on the road?

Zero Day In Google Chrome Patched: Bug Exploited In The Wild

Linux Kernel Logic Allowed Spectre Attack On Major Cloud Provider

QuaDream Apple Spyware Maker Just Popped Up On The Radar Again

Microsoft Patches Zero Day Under Active Attack

Azure Admins Warned To Disable Shared Key Access As Backdoor Attack Detailed

Nexx Fixes Vulnerability By Breaking Customers' Devices

CAN Do Attitude: How Thieves Steal Cars Using Network Bus