Collaborate Disseminate
Users of the popular WordPress translation plugin WPML (also known as WordPress MultiLingual) received an email from a hacker claiming to expose serious security vulnerabilities in the software that allegedly put the customers’ own websites at risk.
Re… Continue reading Angry ex-employee blamed for hack of WordPress plugin developer, and email to customers warning of security hole
This weekend, users of the popular WordPress translation plugin WPML (also known as WordPress MultiLingual) received an email from a hacker claiming to expose serious security vulnerabilities in the software that allegedly put the customers’ own … Continue reading Angry ex-employee blamed for hack of WordPress plugin developer, and email to customers warning of security hole
Graham Cluley Security News is sponsored this week by the folks at Shape Security. Thanks to the great team there for their support!
“These are not kids in mom’s basement attacking us.”
Nearly five million people around the globe buy Starbucks coffee f… Continue reading Learn how Starbucks combats credential stuffing & account takeover (ATO)
Android malware in the Google Play Store could tell whether it was likely to be running on a genuine victim’s device or being analysed by a security team.
Continue reading Ingenious! The Android malware which only triggers if you’re moving
A huge collection of email addresses and passwords, which can be used in attempts to break into online accounts, has been discovered.
If you are one of the affected users, what should you do about it?
Continue reading The Collection #1 data breach – what you need to do about it
A criminal Magecart gang successfully compromised hundreds of ecommerce websites via a malicious script that silently harvested personal data and payment card information as customers bought goods and services online.
Read more in my article on the Tri… Continue reading Magecart hits hundreds of websites via ad supply chain hijack
A criminal Magecart gang successfully compromised hundreds of ecommerce websites via a malicious script that silently harvested personal data and payment card information as customers bought goods and services online.
The post Magecart hits hundreds of… Continue reading Magecart hits hundreds of websites via ad supply chain hijack
Why a business spat resulted in Liberia falling off the internet, how the US Government shutdown is impacting website security, and the perplexing world of extreme IoT devices.
All this and much more is discussed in the latest edition of the award-winn… Continue reading Smashing Security #111: When rivals hack, and ‘extreme’ baby monitors
This year, for the first time ever, a popular car will be amongst the products hackers will be trying to exploit at the Pwn2Own contest.
Read more in my article on the Hot for Security blog.
Continue reading Huge prizes up for grabs for anyone who can hack a Tesla
If you’re going to the CanSecWest conference in Vancouver this March you’ll have the chance to participate in the Pwn2Own ethical hacking contest. As usual hackers will be working hard to crack the security of browsers and operating systems… Continue reading Huge prizes up for grabs for anyone who can hack a Tesla