Elite security intelligence at zero cost – use Recorded Future Express… for FREE!

Many thanks to the great folks at Recorded Future, who have sponsored my writing for the past week. Recorded Future empowers your organization, revealing unknown threats before they impact your business, and helping your teams respond to alerts 10 time… Continue reading Elite security intelligence at zero cost – use Recorded Future Express… for FREE!→

The Windows XP and Windows Server 2003 source code leaks online

Various media outlets are reporting that the source code for the legacy operating systems Windows XP and Windows Server 2003 have leaked online.

Do they pose a risk? Continue reading The Windows XP and Windows Server 2003 source code leaks online→

Microsoft warns hackers are actively targeting Zerologon vulnerability. Patch pronto!

If there are active attacks in the wild, if the DHS is ordering federal agencies to defend themselves, and if Zerologon is so easy to exploit, don’t you think your business should be patching itself as soon as possible? Continue reading Microsoft warns hackers are actively targeting Zerologon vulnerability. Patch pronto!→

Instagram photo flaw could have helped hackers spy via users’ cameras and microphones

A critical vulnerability in Instagram’s Android and iOS apps could have allowed remote attackers to run malicious code, snoop on unsuspecting users, and hijack control of smartphone cameras and microphones.

Read more in my article on the Tripwire … Continue reading Instagram photo flaw could have helped hackers spy via users’ cameras and microphones→

Instagram photo flaw could have helped malicious hackers spy via users’ cameras and microphones

A critical vulnerability in Instagram’s Android and iOS apps could have allowed remote attackers to run malicious code, snoop on unsuspecting users, and hijack control of smartphone cameras and microphones. The security hole, which has been patched by … Continue reading Instagram photo flaw could have helped malicious hackers spy via users’ cameras and microphones→

Smashing Security podcast #197: Greedy bosses, game cheats, and virtual beheadings

Why are Zoom and Twitter making some people disappear? How are Counter-Strike: Global Offensive cheats getting their just desserts? And the founder of a anti cyber-fraud firm is charged with fraud.

All this and much more is discussed in the latest e… Continue reading Smashing Security podcast #197: Greedy bosses, game cheats, and virtual beheadings→

Rogue Shopify staff accessed customer records, says ecommerce platform investigating security breach

Shopify, the major ecommerce platform which powers many online stores, has revealed that it suffered a serious breach of security at the hands of two rogue employees.

Read more in my article on the Hot for Security blog. Continue reading Rogue Shopify staff accessed customer records, says ecommerce platform investigating security breach→

Rogue Shopify Staff Accessed Customer Records, Says Ecommerce Platform Investigating Security Breach

Members of Shopify’s support team abused access to company network Customer contact information and order details accessed FBI and international law enforcement agencies are investigating Shopify, the major ecommerce platform which powers many online s… Continue reading Rogue Shopify Staff Accessed Customer Records, Says Ecommerce Platform Investigating Security Breach→