Derp! DDoS attacker who brought down EA, Sony, and Steam jailed for 27 months

A 23-year-old man has plenty of time to mull over whether it’s funny to launch distributed denial-of-service attacks against online services, after he was sentenced to prison this week. Austin Thompson, who called himself “DerpTrolling&#822… Continue reading Derp! DDoS attacker who brought down EA, Sony, and Steam jailed for 27 months→

Smashing Security #135: Zombie grannies and unintended leaks

We take a bloodied baseball bat to Android malware, and debate the merits of a social media strike, as one of the team bites the bullet and buys a smart lock for the office.
All this and much more is discussed in the latest edition of the award-winning… Continue reading Smashing Security #135: Zombie grannies and unintended leaks→

US Cyber Command warns nation-state hackers are exploiting old Microsoft Outlook bug. Make sure you’re patched!

US Cyber Command has issued an alert about an unnamed foreign country’s attempt to spread malware through the exploitation of a vulnerability in Microsoft Outlook, as concerns are raised of a rise in an Iranian-backed hacking group’s activi… Continue reading US Cyber Command warns nation-state hackers are exploiting old Microsoft Outlook bug. Make sure you’re patched!→

US Cyber Command warns nation-state hackers are exploiting old Microsoft Outlook bug. Make sure you’re patched!

US Cyber Command has issued a warning about an unnamed foreign country’s attempt to spread malware through the exploitation of a vulnerability in Microsoft Outlook. The alert, posted on Twitter, refers to CVE-2017-11774, a vulnerability in Outloo… Continue reading US Cyber Command warns nation-state hackers are exploiting old Microsoft Outlook bug. Make sure you’re patched!→

Ex-Equifax CIO, who knew about huge data breach, jailed for insider trading

So, just what was Equifax doing during those 40 days between discovering it had been hacked and sharing the bad news with the world?
Well, now we know. Or at least what Jun Ying, the CIO of Equifax US Information Solutions, was doing.
Continue reading Ex-Equifax CIO, who knew about huge data breach, jailed for insider trading→

Fortune 100 passwords, email archives, and corporate secrets left exposed on unsecured Amazon S3 servers

Some of the world’s biggest companies have had 750GB worth of their innermost secrets revealed on unsecured Amazon S3 buckets, available for anybody to download – no password required.
Read more in my article on the Hot for Security blog.
Continue reading Fortune 100 passwords, email archives, and corporate secrets left exposed on unsecured Amazon S3 servers→

After €24 million stolen by typosquatting a cryptocurrency exchange, six people arrested

European police have arrested six people as part of an investigation into a theft which saw €24 million (US $27 millon) stolen from users of cryptocurrency exchange.
Read more in my article on the Tripwire State of Security blog.
Continue reading After €24 million stolen by typosquatting a cryptocurrency exchange, six people arrested→