Collaborate Disseminate
Millions of WordPress-powered websites are using the Advanced Custom Fields and Advanced Custom Fields Pro plugins, which security researchers say have been vulnerable to cross-site scripting (XSS) attacks. Continue reading WordPress plugin vulnerability puts two million websites at risk
Cinema chain Odeon may have shared more information than it intended in the release notes accompanying its latest iOS app update. Continue reading PSA. Don’t share your password in your app’s release notes
Businesses should patch their TP-Link routers as soon as possible, after the revelation that a legendary IoT botnet is targeting them for recruitment.
Read more in my article on the Tripwire State of Security blog. Continue reading Patch now! The Mirai IoT botnet is exploiting TP-Link routers
Apple and Google have announced that they are teaming up in order to combat the safety risks associated with AirTags and other tracking devices.
Read more in my article on the Hot for Security blog. Continue reading Apple and Google join forces to combat AirTag stalking
Two unsavoury websites suffer from a worrying leak, scientists are going animal crackers over AI, and the BBC is intercepting scammers’ live phone calls with victims. All this and much much more is discussed in the latest edition of the “Sm… Continue reading Smashing Security podcast #320: City Jerks, AI animals, and is the BBC hacking again?
Graham Cluley Security News is sponsored this week by the folks at Intego. Thanks to the great team there for their support! Established in 1997, Intego is the leading company for Mac antivirus, providing powerful and reliable protection against malwar… Continue reading Fortify your Mac with Intego – the award-winning Mac antivirus
Students and teachers at the Minneapolis Public School (MPS) District, which suffered a huge ransomware attack< at the end of February, have had highly sensitive information about themselves published on the web, including allegations of abuse by teach… Continue reading Medusa ransomware gang leaks students’ psychological reports and abuse allegations
Boffins at McAfee have identified 38 Android apps in the Google Play store that unashamedly rip off the ever-popular gaming sensation Minecraft, but are actually designed to stealthily earn advertising revenue. Continue reading Minecraft clones stealthily load ads on millions of Android devices
Is it possible ransomware gangs actually do have a heart?
Read more in my article on the Hot for Security blog. Continue reading “Ashamed” LockBit ransomware gang apologises to hacked school, offers free decryption tool
Wednesday was the official Independence Day of Israel, and the event was “celebrated” in typical style by malicious hackers.
Read more in my article on the Hot for Security blog. Continue reading Israel’s Prime Minister has his Facebook account hijacked, website knocked offline