Smashing Security #076: Spying phones, hacked ski lifts, and World Password Day

Cheap Android smartphones sold on Amazon have been sending customers’ full text messages to a Chinese server, ski lifts are found to be the latest devices left open to abuse by hackers, and we remind you why password managers are a good idea on World P… Continue reading Smashing Security #076: Spying phones, hacked ski lifts, and World Password Day→

Online poker site bombarded by DDoS attacks, pauses tournaments

Bad news if you’re crazy about playing online poker – one of the world’s oldest online poker websites has been forced to pause its online tournaments after suffering a series of distributed denial-of-service attacks. Americas Cardroom… Continue reading Online poker site bombarded by DDoS attacks, pauses tournaments→

Flawed routers with hardcoded passwords were manufactured by firm that posed ‘national security risk’ to UK

Researchers discovered it was possible to compromise Hyperoptic’s ZTE-manufactured routers simply by tricking an intended victim into clicking on a malicious link.
Read more in my article on the Hot for Security blog.
Continue reading Flawed routers with hardcoded passwords were manufactured by firm that posed ‘national security risk’ to UK→

Flawed routers with hardcoded passwords were manufactured by firm that posed “national security risk” to UK

Earlier this month the UK’s National Cyber Security Centre (NCSC) issued a warning to telecoms firms about the potential risks posed by devices manufactured by Chinese-state owned enterprise ZTE. “NCSC assess that the national security risk… Continue reading Flawed routers with hardcoded passwords were manufactured by firm that posed “national security risk” to UK→

The NSA wants its algorithms to be a global IoT standard. But they’re simply not trusted

Part of the concern is that the Simon and Speck algorithms might contain encryption backdoors that would be abused by US authorities.
Read more in my article on the Bitdefender Box blog.
Continue reading The NSA wants its algorithms to be a global IoT standard. But they’re simply not trusted→