TeamViewer confirms number of hacked user accounts is “significant”
Investigation continues to show external password breaches are cause, spokesman says. Continue reading TeamViewer confirms number of hacked user accounts is “significant”
Author Archives: Dan Goodin
TeamViewer users are being hacked in bulk, and we still don’t know how
Service blames password reuse for attacks used to drain financial accounts. Continue reading TeamViewer users are being hacked in bulk, and we still don’t know how
WordPress plugin with 10,000+ installations being exploited in the wild
No fix available for critical flaw that’s been under attack since last week. Continue reading WordPress plugin with 10,000+ installations being exploited in the wild
Out-of-the-box exploitation possible on PCs from top 5 OEMs
New study finds third-party updaters are riddled with critical vulnerabilities. Continue reading Out-of-the-box exploitation possible on PCs from top 5 OEMs
Cluster of “megabreaches” compromises a whopping 642 million passwords
MySpace, Tumblr, and Fling are the latest services to join discredited LinkedIn. Continue reading Cluster of “megabreaches” compromises a whopping 642 million passwords
Armed FBI agents raid home of researcher who found unsecured patient data
Prosecutors allegedly say he exceeded authorization in viewing unsecured FTP server. Continue reading Armed FBI agents raid home of researcher who found unsecured patient data
If Microsoft is banning stupid passwords, why does it still allow “Pa$$w0rd1”?
Sadly, there’s not much services can do to save users from their own poor habits. Continue reading If Microsoft is banning stupid passwords, why does it still allow “Pa$$w0rd1”?
“Forbidden attack” makes dozens of HTTPS Visa sites vulnerable to tampering
Researchers say 70,000 servers belonging to others also at risk. Continue reading “Forbidden attack” makes dozens of HTTPS Visa sites vulnerable to tampering
Beware of keystroke loggers disguised as USB phone chargers, FBI warns
Private industry notification comes 15 months after debut of KeySweeper. Continue reading Beware of keystroke loggers disguised as USB phone chargers, FBI warns
Incensing critics, Google engineer ends push for crypto-only setting in Allo
Updated personal blog post deletes comments that were cited by Google critics. Continue reading Incensing critics, Google engineer ends push for crypto-only setting in Allo