Microsoft says it’s time for you to stop using SMS and voice calls for multi-factor authentication

Microsoft says you would be better off using a smartphone authentication app or hardware security key to generate your one-time-password instead.

Read more in my article on the Hot for Security blog. Continue reading Microsoft says it’s time for you to stop using SMS and voice calls for multi-factor authentication

Smashing Security podcast #204: Green buttons, Olympic attacks, and… an apology

There’s been a cybersecurity goof in the wake of the US presidential elections, the US fingers the hackers responsible for disrupting the Winter Olympics in South Korea, and we take a long hard look at long hard legal mumbojumbo…

All this and much… Continue reading Smashing Security podcast #204: Green buttons, Olympic attacks, and… an apology

Millions of hotel guests worldwide have their private details exposed

A sloppy lack of security by a hotel reservation platform has left highly sensitive information about millions of people worldwide exposed.

Security experts uncovered a misconfigured AWS S3 bucket containing over 10 million files, containing informa… Continue reading Millions of hotel guests worldwide have their private details exposed

Campari staggers to its feet following $15 million Ragnar Locker ransomware attack

Campari was targeted by hackers using the Ragnar Locker ransomware. According to some reports, the malware attack managed to encrypt data on 24 of the company’s servers around the world, and the hackers responsible have demanded a cryptocurrency ransom… Continue reading Campari staggers to its feet following $15 million Ragnar Locker ransomware attack

Business VOIP phone systems are being hacked for profit worldwide. Is yours secure?

Security researchers have uncovered an organised gang of cybercriminals who are compromising the VOIP phone systems of over 1000 organisations worldwide.

Check Point has identified a malicious campaign that has targeted a critical vulnerability in t… Continue reading Business VOIP phone systems are being hacked for profit worldwide. Is yours secure?

Following Ubisoft cyber attack, hackers claim to leak Watch Dogs: Legion code online

Ubisoft says that it is investigating media claims that the Egregor ransomware gang has published a 558 GB archive of the source code and resources of the video game Watch Dogs: Legion on file-sharing site networks.

The Egregor group claims that it … Continue reading Following Ubisoft cyber attack, hackers claim to leak Watch Dogs: Legion code online

Capcom hacked. Resident Evil game developer discloses cyber attack

Japanese game developer Capcom has revealed that it suffered a security breach earlier this week which saw malicious hackers access its internal systems.

Read more in my article on the Tripwire State of Security blog. Continue reading Capcom hacked. Resident Evil game developer discloses cyber attack

Capcom hacked. Resident Evil game developer discloses cyber attack

Japanese game developer Capcom has revealed that it suffered a security breach earlier this week which saw malicious hackers access its internal systems. The maker of such well-known video games as “Resident Evil” and “Street Fighter” disclosed in a sh… Continue reading Capcom hacked. Resident Evil game developer discloses cyber attack