Collaborate Disseminate
Ukraine’s computer emergency response team, CERT-UA, has warned that the Kremlin-backed Sandworm hacking group is leveraging fake CAPTCHA checks on compromised websites that persuade users to run malicious code.
Read more in my article on the Hot for … Continue reading Ukraine warns fake CAPTCHAs are being used to make you hack yourself
Gemini, Google’s AI assistant, is supposed to make life easier for Android smartphone owners. But right now it may also be making life easier for anyone anyone who happens to pick up your phone.
Read more in my article on the Hot for Security blog. Continue reading Google’s Gemini lets strangers send messages from your locked Android phone
The Anubis ransomware-as-a-service (RaaS) operation has hit some healthcare organisations hard – but they are not the only ones at risk.
Read more in my article on the Fortra blog. Continue reading Anubis ransomware: what you need to know
An app has appeared in India that lets anyone with a smartphone stop a passing e-rickshaw dead in its tracks – no login, no passwords, no permissions needed.
Meanwhile, Geoff – swimming in money and Lamborghinis, as all published authors are – has be… Continue reading Smashing Security podcast #476: Remote-control rickshaws and rogue book marketers
When a company falls victim to a ransomware attack, it is not uncommon for it to turn to experts for help.
Specialist ransomware negotiation firms handle communications with criminal gangs on a victim’s behalf.
What victims don’t expect is that thei… Continue reading The ransomware negotiator who was working for the other side
Have you received an email from a recruiter at Adobe, Netflix, or OpenAI offering you an exciting new marketing role? Well, before you start brushing up your interview technique, take a closer look at who is really behind it.
Read more in my article o… Continue reading Invited to a “job interview” with Netflix or OpenAI? Beware! Your Google password could be at risk
Two young men have been arrested in the Netherlands on suspicion of running a phishing operation that harvested the credit card details of unsuspecting victims.
Read more in my article on the Hot for Security blog. Continue reading Two arrested over credit card phishing – as the Netherlands is named Europe’s worst for payment fraud
Who Are The Gentlemen?
Despite the impeccably polite name, there is nothing polite or refined about this particular gang of cybercriminals.
Read more in my article on the Fortra blog. Continue reading The Gentlemen ransomware: what you need to know
Polymarket has built an entire business on predicting the future. So how did it manage to spectacularly fail to predict its own hack? Plus, the Google engineer with a million-dollar secret, and the curious case of the airport hairdryer.
Meanwhile, “Fo… Continue reading Smashing Security podcast #474: Polymarket can predict the future. So how did it miss this hack?