Collaborate Disseminate
Argentina’s World Cup squad had their passport numbers leaked before a ball was kicked – not by hackers, but by someone who failed to redact a document properly. document. It’s a mistake that has been made many times in the past…
Read more in my art… Continue reading Privacy own-goal: World Cup blunder leaks Lionel Messi’s passport details
Most extortion gangs hide behind a keyboard. Silent Ransom Group will phone your staff pretending to be IT support – and if that fails, send someone to your office in person to plug in a USB stick.
Read more in my article on the Fortra blog. Continue reading Silent Ransom Group: what you need to know
Researchers at the University of Toronto have built a worm that thinks for itself. Using free off-the-shelf AI models it works out how to break into each new computer it encounters, and hijacks the powerful ones to host its own AI brain. And then the r… Continue reading Smashing Security podcast #471: This AI worm just rewrote its own rules
Schools on both sides of the Atlantic have been revealed in recent days to have been hit by hackers, reminding all of us that ransomware gangs see educational instituions as targets all year round.
Read more in my article on the Hot for Security blog. Continue reading Why schools remain one of cybercriminals’ favourite targets
If you’ve ever received an out-of-the-blue message via LinkedIn from a recruiter offering some well-paid consultancy work, intelligence agencies have a message for you: be very careful.
Read more in my article on the Hot for Security blog. Continue reading Got a LinkedIn message from a recruiter? It might be Chinese intelligence, warn FBI and MI5
Hackers have been hijacking Instagram accounts at scale by exploiting Meta’s AI support chatbot. And, as if that weren’t bad enough, the technique required no technical skill whatsoever.
Read more in my article on the Fortra blog. Continue reading Meta’s own AI chatbot to blame for Instagram accounts being stolen in seconds
A website called “UK visa portal” has been quietly collecting passport scans, selfies, and personal data from thousands of travellers who thought they were applying through official channels. They weren’t. And when a journalist tried to warn the compan… Continue reading Smashing Security podcast #470: This AI security flaw might be impossible to fix
Dutch police have arrested a 35-year-old man suspected of hacking into the computer systems of Amsterdam football giant Ajax, after the personal data of hundreds of thousands of supporters was put at risk.
Read more in my article on the Hot for Securi… Continue reading Police arrest man following hack of Ajax football club
A notorious ransomware gang claims to have stolen MyPillow’s private data, but CEO Mike Lindell calls it a politically motivated “hit job.” With the countdown ticking toward a massive dark web leak, who is telling the truth?
Read more in my article on… Continue reading MyPillow listed on ransomware gang’s leak site, but denies it has been breached
CISA, the US government agency whose entire job is keeping America’s critical infrastructure safe from hackers, has had a contractor publish dozens of plain-text credentials to a public GitHub profile.
Meanwhile, your Oura ring is quietly transmitting… Continue reading Smashing Security podcast #469: What your Oura ring won’t tell you