GoTo admits: Customer cloud backups stolen together with decryption key

By Paul Ducklin — January 25^th 2023 at 01:37

We were going to write, "Once more unto the breach, dear friends, once more"... but it seems to go without saying these days.

Two different “VMware Spring” bugs at large – we cut through the confusion

By Paul Ducklin — March 31^st 2022 at 16:59

Whoever came up with the name "Spring4Shell" didn't help at all... we cut through the Spring Bug confusion

By Paul Ducklin — March 30^th 2022 at 20:38

Easy unauthenticated remote code execution - PoC code already out

By Paul Ducklin — November 26^th 2021 at 19:58

Cloud security is the best sort of altruism: you need to do it to protect yourself, but you help to protect everyone else at the same time.