Sophos Naked Security

Syndikovat obsah Naked Security
News, opinion, advice and research on computer security threats from Sophos
Aktualizace: 24 min 5 sek zpět

Networking attack gives hijackers VPN access

9 Prosinec, 2019 - 13:31
Researchers have discovered a flaw in macOS, Linux, and several other operating systems that could let attackers hijack VPN connections.

HackerOne pays $20,000 bounty after breach of own systems

9 Prosinec, 2019 - 13:08
In an embarrassing twist, bug bounty platform HackerOne has paid a $20,000 reward to a researcher who reported a security flaw inadvertently caused by one of its staff during… a bug submission.

Facebook suing ILikeAd for hijacking users’ ad accounts

9 Prosinec, 2019 - 12:46
Facebook says the company used celeb bait links to infect victims with malware and hijacked their ad accounts to sell diet pills.

$5m bounty set on the alleged head of Evil Corp banking Trojan group

9 Prosinec, 2019 - 11:53
Know where Maksim “Aqua” Yakubets is? Can you pry him out of Russia and his Lamborghinis? The biggest ever cybercrook reward awaits!

Monday review – the hot 22 stories of the week

9 Prosinec, 2019 - 11:03
Get up to date with the hot security stories from the past week - from fake Android apps to malware targeting Mac users.

Mac users targetted by Lazarus ‘fileless’ Trojan

6 Prosinec, 2019 - 14:18
The Lazarus hacking group are trying to sneak a ‘fileless’ Trojan on to Apple computers, disguised as a fake cryptocurrency trading program.

US parents file class action against TikTok over children’s privacy

6 Prosinec, 2019 - 13:10
Collecting children's data without their guardians' consent is illegal under COPPA and already earned TikTok a huge fine.

Instagram trying to protect kids by getting dates of birth from new users

6 Prosinec, 2019 - 12:48
It's about showing age-appropriate content, it said. Though staying safe from child-privacy lawsuits doesn't hurt, either.

OpenBSD devs patch authentication bypass bug

6 Prosinec, 2019 - 12:31
One of the internet's most popular free operating systems allowed attackers to bypass its authentication controls.

Cookie-stealing malware wants to know your Facebook ad budget

5 Prosinec, 2019 - 18:37
The AdKoob malware that sneakily peeks at how much you're spending on ads is back.

iCloud-hacking politician to be sentenced on Christmas eve

5 Prosinec, 2019 - 18:09
Former Dutch city council member Mitchel van der K invaded hundreds of iCloud accounts “frequently and repeatedly”.

Machine-raiding Python libraries squashed by community

5 Prosinec, 2019 - 17:55
Python developers have once again fallen victim to malicious software libraries lurking in their favourite package manager.

Critical DoS messaging flaw fixed in December Android update

5 Prosinec, 2019 - 17:25
Android’s December 2019 updates arrived this week, patching a small list of system and Qualcomm flaws across the operating system’s two patch levels.

Yodel parcel tracking app blabs about other people’s parcels

5 Prosinec, 2019 - 16:31
Yodel's mobile parcel delivery app was leaking people's delivery data to others using the app, a security researcher discovered.

IM RAT spy tool seller raided, busted, kicked offline

5 Prosinec, 2019 - 16:24
The spyware gave complete control of victimized computers, sold for as little as$25, and was bought by 14,500 hackers worldwide.

Steam players – beware of fake skins as phishers try to hijack accounts

4 Prosinec, 2019 - 13:02
Phishing scammers have once again targeted users of the popular Steam gaming service, it was revealed this week.

Facebook made to ‘correct’ user’s post as Singapore flexes fake-news muscle

4 Prosinec, 2019 - 12:59
"Facebook did a great job," said Alex Tan, who admitted that his story about a whistleblower's arrest was based on hearsay.

Microsoft looks to Rust language to beat memory vulnerabilities

4 Prosinec, 2019 - 12:41
Microsoft is pressing ahead with an ambitious plan to de-fang common vulnerabilities hiding in old Windows code with the help of Rust.

FBI: Russia-based FaceApp is a ‘potential counterintelligence threat’

4 Prosinec, 2019 - 11:18
It's a grabby little app, data-wise, but how is it different from, say, Google or Facebook?