Smashing Security #038: Gents! Stop airdropping your pics!

WannaCry hero Marcus Hutchins (aka MalwareTech) pleads not guilty to malware charges, the Scottish parliament is hit by a brute force attack, IoT smart locks aren’t so smart, and.. ahem.. someone is sending intimate pics via AirDrop to unsuspecting com… Continue reading Smashing Security #038: Gents! Stop airdropping your pics!→

Open Banking APIs under PSD2: Security Threats and Solutions. Download this free white paper

Open Banking APIs under PSD2: Security Threats and Solutions. Download this free white paper

Graham Cluley Security News is sponsored this week by the folks at VASCO. Thanks to the great team there for their support!

More than 10,000 customers in 100 countries rely on VASCO to secure access, manage identities, verify transactions, simplify document signing and protect high value assets and systems.

The Revised Payment Services Directive, also known as PSD2, requires European banks to provide communication interfaces to Third Party Providers (TPPs).

These interfaces, generally referred to as APIs, will allow TPPs to build innovative financial services on top of the services of the banks. The requirements for these interfaces are defined in the Regulatory Technical Standards (RTS) on Strong Customer Authentication (SCA) and Common and Secure Communication (CSC), of which the European Banking Authority (EBA) published a draft version in February 2017.

In this whitepaper VASCO analyzes the requirements for the communication interface as defined in the draft RTS, with a special emphasis on security requirements. VASCO identifies the most important security threats against these interfaces, and discuss various solutions that can help banks to protect against them.

By downloading this free white paper, you’ll discover:

  • the PSD2 requirements for open banking APIs
  • the security and privacy threats against the APIs of banks
  • how to protect APIs against security threats
  • VASCO’s solution suite for PSD2 compliance

Interested in learning more? Download VASCO’s white paper: Open Banking APIs under PSD2: Security Threats and Solutions


If you’re interested in sponsoring my site for a week, and reaching an IT-savvy audience that cares about computer security, you can find more information here.

Continue reading Open Banking APIs under PSD2: Security Threats and Solutions. Download this free white paper→

HBO offered its hackers $250,000 after attack, leaked email claims

HBO offered its hackers $250,000 after attack, leaked email claims

The fallout from the HBO hack, which has already seen episodes of “Games of Thrones” scripts and episodes leaked online, the distribution of stars’ email addresses and personal phone numbers, and million-dollar demands for an alleged haul of 1.5 terabytes of TV shows and corporate information, continues to get worse.

Read more in my article on the Hot for Security blog.

Continue reading HBO offered its hackers $250,000 after attack, leaked email claims→

Amber Rudd tricked by email prankster who duped White House officials

British Home Secretary Amber Rudd has been duped into sharing her personal email address with a prankster who has previously embarrassed the likes of Donald Trump Jr and various White House officials.
Read more in my article on the Tripwire State of Se… Continue reading Amber Rudd tricked by email prankster who duped White House officials→