How a hole in Lenovo’s login system let hackers walk into 5,000 Dropbox accounts

If you ever linked your Dropbox account to a Lenovo ID – perhaps to make life easier when logging in via a Lenovo laptop – you might want to take heed.

Read more in my article on the Hot for Security blog. Continue reading How a hole in Lenovo’s login system let hackers walk into 5,000 Dropbox accounts→

Smashing Security podcast #483: This AI helps thieves steal your iPhone

You’ve had your iPhone stolen. A day later, you get a text from Apple saying they’ve found it, and a very helpful woman called Alice from Apple Support calls to walk you through recovering it. She’s polite. She’s professional. But she is not from Apple… Continue reading Smashing Security podcast #483: This AI helps thieves steal your iPhone→

Revolut scam wave steals £180,000 from Jersey residents in just four weeks

If you live in Jersey and bank with Revolut, you should be on your guard against scam phone calls.

Because local police on the largest of the Channel Islands have warned that over a single four-week period, an astonishing 75% of all scam crime reports… Continue reading Revolut scam wave steals £180,000 from Jersey residents in just four weeks→

Shai-Hulud hackers: two men charged over TeamPCP’s global supply chain crime spree that hit OpenAI, and thousands more

More than 1,000 organisations, 500,000 stolen credentials, and one self-propagating worm named after a Dune sandworm – two men now face charges over TeamPCP’s global hacking spree.

Read more in my article on the Hot for Security blog. Continue reading Shai-Hulud hackers: two men charged over TeamPCP’s global supply chain crime spree that hit OpenAI, and thousands more→

US Navy tells sailors and their families: scrub your social media, enemies are watching

The US Navy has told its entire workforce of 340,000 active-duty personnel, 58,000 reservists, and 210,000 civilian employees to clean up their social media profiles, because adversaries might be using them to determine who they are, where they live, a… Continue reading US Navy tells sailors and their families: scrub your social media, enemies are watching→

Smashing Security podcast #482: This hacker leaked GTA 6 – and launched their own cryptocurrency

A hacker calling themselves “CYBERLEEK” has been leaking gameplay footage from GTA 6 ahead of its official reveal this week – but they’re not asking Rockstar Games for a ransom. Instead, they’ve launched their own cryptocurrency, promising to release e… Continue reading Smashing Security podcast #482: This hacker leaked GTA 6 – and launched their own cryptocurrency→

Malicious Firefox add-ons caught stealing cryptowallet seed phrases and browser credentials

Every time you add an extension or plugin to your browser, there’s a risk that you might be doing more than managing your cryptocurrency wallet, generating passwords, taking notes, or tracking sports results. There’s a chance that you have just handed … Continue reading Malicious Firefox add-ons caught stealing cryptowallet seed phrases and browser credentials→

Smashing Security podcast #481: Never say this to a robot dog

At Black Hat this month, a group of security researchers took a $9,000 robot dog, plugged Google’s AI into its brain, and jailbroke it by telling it – with a completely straight face – that it was a Pokemon. What followed involved a wall, a blue ice ch… Continue reading Smashing Security podcast #481: Never say this to a robot dog→

Prison for data analyst who tried to extort $2.5 million from his employer

When Cameron Curry discovered that his contract as a data analyst wasn’t going to be renewed, he could have updated his LinkedIn profile. He could have started sending out his resume.

But what the 27-year-old from Charlotte, North Carolina, did instea… Continue reading Prison for data analyst who tried to extort $2.5 million from his employer→