Collaborate Disseminate
A critical vulnerability in a WordPress plugin used on over one million websites has been patched, after evidence emerged that malicious hackers were actively exploited in the wild. Continue reading NinjaForms WordPress plugin, actively exploited in wild, receives forced security update
With Father’s Day falling this weekend in the United States and UK, more people might be more willing than normal to believe the latest scam to be spreading via WhatsApp is true. But I’m afraid it isn’t.
Sorry dads, Heineken isn’t giving away free c… Continue reading Heineken giving away free beer for Father’s Day? It’s a WhatsApp scam
Law enforcement agencies around the world appear to have scored a major victory in the fight against fraudsters, in an operation which has seized tens of millions of dollars and seen more than 2000 people arrested.
Read more in my article on the Tri… Continue reading Interpol arrests thousands of scammers in operation “First Light 2022”
Graham Cluley Security News is sponsored this week by the folks at Specops. Thanks to the great team there for their support! With the help of live attack data, Specops Software’s Breached Password Protection can detect over 2 billion known breac… Continue reading Want to block two billion known breached passwords from being used at your company? It’s easy with Specops Password Policy tools
How did a saxophonist sneak sensitive information in and out of the Soviet Union? How might an Apple AirTag have led to murder? And isn’t the world of cryptocurrency and blockchain doing just great?
All this and more is discussed in the latest edi… Continue reading Smashing Security podcast #279: Encrypted notes, and a deadly case of AirTag spying
The US authorities have sentenced a man to 24 months in a federal prison after he was found to have run a DDoS-for-hire service that knocked websites off the internet.
Read more in my article on the Hot for Security blog. Continue reading DDoS-for-hire service which bombarded websites with attacks earns man two years in prison
Boffins at the University of California San Diego have found a way to track individuals via Bluetooth.
Researchers discovered that the Bluetooth signals emitted by mobile phones carry a unique fingerprint, caused by small imperfections accidentally … Continue reading You can be tracked via your Bluetooth signal, researchers claim
A Windows zero-day vulnerability dubbed “DogWalk” has not received an official patch yet from Microsoft, but that hasn’t stopped others from offering free fixes to protect users.
Read more in my article on the Hot for Security blog. Continue reading DogWalk zero-day Windows bug receives patch – but not from Microsoft
Trouble brews with the Tim Hortons app, Mandiant gets in a tussle with a Russian ransomware gang, and should good faith security researchers be at risk of prosecution?
All this and much more is discussed in the latest edition of the award-winning “S… Continue reading Smashing Security podcast #278: Tim Hortons, avoiding sanctions, and good faith security research
An Iranian hacking gang called Bohrium has had its activities disrupted after Microsoft seized control of 41 domains used in spear-phishing attacks.
Read more in my article on the Hot for Security blog. Continue reading Microsoft disrupts Bohrium spear-phishing ring by seizing 41 domains