If an extension goes rogue, everything you do in your browser is compromised

The official Chrome browser extension for Mega.nz was compromised with a malicious update, stealing passwords and private keys.
Keep your browser extensions to a minimum, and always be wary if they ask for elevated permissions.
Continue reading If an extension goes rogue, everything you do in your browser is compromised→

Premera Blue Cross victims accuse insurer of deliberately destroying hacking evidence

A class-action lawsuit against a hacked health insurer is claiming that a crucial computer was wilfully destroyed, erasing critical evidence that could prove the severity of the security breach.
Read more in my article on the Hot for Security blog.
Continue reading Premera Blue Cross victims accuse insurer of deliberately destroying hacking evidence→

Premera Blue Cross victims accuse insurer of deliberately destroying hacking evidence

A class-action lawsuit against a hacked health insurer is claiming that a crucial computer was wilfully destroyed, erasing critical evidence that could prove the severity of the security breach. What’s not in dispute is that in March 2015 health … Continue reading Premera Blue Cross victims accuse insurer of deliberately destroying hacking evidence→

Air Canada admits app data breach included customers’ passport details

All 1.7 million users of Air Canada’s mobile app have had their passwords reset by the company following a security breach which saw hackers compromise up to 20,000 accounts last week.
Read more in my article on the Hot for Security blog.
Continue reading Air Canada admits app data breach included customers’ passport details→

Air Canada admits app data breach included customers’ passport details

All 1.7 million users of Air Canada’s mobile app have had their passwords reset by the company following a security breach which saw hackers compromise up to 20,000 accounts last week. A security notice published by the company explains that it d… Continue reading Air Canada admits app data breach included customers’ passport details→

Smashing Security #093: Abandoned domains and dating app dangers

How do fraudsters exploit abandoned domains to steal your company’s secrets? How can you better protect your privacy when looking for love online? And who has the longest arms in the animal kingdom?
All this and more is discussed in the latest edition … Continue reading Smashing Security #093: Abandoned domains and dating app dangers→