LastPass source code breach – do we still recommend password managers?

By Paul Ducklin — August 29^th 2022 at 16:59

What does the recent LastPass breach mean for password managers? Just a bump in the road, or a reason to ditch them entirely?

Breaching airgap security: using your phone’s gyroscope as a microphone

By Paul Ducklin — August 24^th 2022 at 18:59

One bit per second makes the Voyager probe data rate seem blindingly fast. But it's enough to break your security assumptions...

By Paul Ducklin — April 25^th 2022 at 16:58

Sometimes we receive phishing tricks that we grudgingly have to admit are better than average, just because they're uncomplicated.

By Paul Ducklin — January 18^th 2022 at 19:23

There's a tiny data leakage bug in the WebKit browser engine... but it could act as a "supercookie" identifier for your browsing

By Paul Ducklin — December 23^rd 2021 at 17:58

You know you want one, because this retro phone is NOT A TOY... except when it comes to cybersecurity.

By Paul Ducklin — November 23^rd 2021 at 00:35

GoDaddy found crooks in its network, and kicked them out - but not before they'd been in there for six weeks.

By Paul Ducklin — November 18^th 2021 at 22:20

Be aware before you share! That's a good rule for developers and techies, just as much as it is for social media addicts.