Naked Security
Zenbleed: How the quest for CPU performance could put your passwords at risk
July 26^th 2023 at 19:01

Zenbleed: How the quest for CPU performance could put your passwords at risk

By Paul Ducklin

You need to turn on a special setting to stop (the code you wrote to stop [the code you wrote to improve performance] from reducing performance) from reducing security.

Related tags
July 26^th 2023 at 19:01

Naked Security
Ghostscript bug could allow rogue documents to run system commands
July 4^th 2023 at 17:57

Ghostscript bug could allow rogue documents to run system commands

By Paul Ducklin

Even if you've never heard of the venerable Ghostscript project, you may have it installed without knowing.

Related tags
July 4^th 2023 at 17:57

Naked Security
Mac malware-for-hire steals passwords and cryptocoins, sends “crime logs” via Telegram
April 30^th 2023 at 01:23

Mac malware-for-hire steals passwords and cryptocoins, sends “crime logs” via Telegram

By Paul Ducklin

These malware peddlers are specifically going after Mac users. The hint's in the name: "Atomic macOS Stealer", or AMOS for short.

Related tags
April 30^th 2023 at 01:23

Naked Security
Ex-CEO of breached pyschotherapy clinic gets prison sentence for bad data security
April 18^th 2023 at 16:56

Ex-CEO of breached pyschotherapy clinic gets prison sentence for bad data security

By Paul Ducklin

Did the sentence fit the crime? Read the backstory, and then have your say in our comments! (You may post anonymously.)

Related tags
- ❌
- Data
- loss
- Law
- &
- order
- bust
- data
- breach
- extortion
- Finland
- GDPR
April 18^th 2023 at 16:56

Naked Security
FBI and FCC warn about “Juicejacking” – but just how useful is their advice?
April 17^th 2023 at 18:17

FBI and FCC warn about “Juicejacking” – but just how useful is their advice?

By Paul Ducklin

USB charging stations - can you trust them? What are the real risks, and how can you keep your data safe on the road?

Related tags
- ❌
- Data
- loss
- Law
- &
- order
- Privacy
- Android
- Apple
- FBI
- FCC
- Google
- ios
- juicejacking
April 17^th 2023 at 18:17

Naked Security
Popular server-side JavaScript security sandbox “vm2” patches remote execution hole
April 9^th 2023 at 00:28

Popular server-side JavaScript security sandbox “vm2” patches remote execution hole

By Paul Ducklin

The security error was in the error handling system that was supposed to catch potential security errors...

vm2-1200

Related tags
April 9^th 2023 at 00:28

Naked Security
Google Pixel phones had a serious data leakage bug – here’s what to do!
March 21^st 2023 at 17:58

Google Pixel phones had a serious data leakage bug – here’s what to do!

By Paul Ducklin

What if the "safe" images you shared after carefully cropping them... had some or all of the "unsafe" pixels left behind anyway?

Related tags
March 21^st 2023 at 17:58

Naked Security
Dangerous Android phone 0-day bugs revealed – patch or work around them now!
March 17^th 2023 at 19:56

Dangerous Android phone 0-day bugs revealed – patch or work around them now!

By Paul Ducklin

Despite its usually inflexible 0-day disclosure policy, Google is keeping four mobile modem bugs semi-secret due to likely ease of exploitation.

Related tags
March 17^th 2023 at 19:56

Naked Security
Tracers in the Dark: The Global Hunt for the Crime Lords of Crypto
February 6^th 2023 at 21:53

Tracers in the Dark: The Global Hunt for the Crime Lords of Crypto

By Paul Ducklin

Hear renowned cybersecurity author Andy Greenberg's thoughtful commentary about the "war on crypto" as we talk to him about his new book...

Related tags
February 6^th 2023 at 21:53

Naked Security
Dutch suspect locked up for alleged personal data megathefts
January 26^th 2023 at 22:02

Dutch suspect locked up for alleged personal data megathefts

By Paul Ducklin

Undercover Austrian "controlled data buy" leads to Amsterdam arrest and ongoing investigation. Suspect is said to steal and sell all sorts of data, including medical records.