If a locked filing cabinet is stolen along with its key, can you still say it’s locked? GoTo thinks you can

GoTo says that hackers stole its customers’ “encrypted backups.” But they also say the hackers stole the decryption keys.

To say the backups were encrypted is a bit like trying to argue that a locked box is locked, if the key to the locked box is st… Continue reading If a locked filing cabinet is stolen along with its key, can you still say it’s locked? GoTo thinks you can

ShinyHunters suspect extradited to United States from Morocco, could face 116 years in jail if convicted

A 22-year-old suspected of being “Seyzo”, a member of the ShinyHunters cybercrime gang, has been extradited from Morocco to the United States, where – if convicted – he could face up to 116 years in prison.

The ShinyHunters gang became notorious in … Continue reading ShinyHunters suspect extradited to United States from Morocco, could face 116 years in jail if convicted

Smashing Security podcast #306: No Fly lists, cell phones, and the end of ransomware riches?

What are prisoners getting up to with mobile phones? Why might ransomware no longer be generating as much revenue for cybercriminals? And how on earth did an airline leave the US government’s “No Fly” list accessible for anyone in the world to download… Continue reading Smashing Security podcast #306: No Fly lists, cell phones, and the end of ransomware riches?

After data breach put their lives at risk, US releases 3000 immigrants seeking asylum

Imagine you’re an immigrant, who has fled your home country for the United States due to fear of being persecuted and tortured.

What you definitely do not want is the agency handling your asylum request being careless with your personal information … Continue reading After data breach put their lives at risk, US releases 3000 immigrants seeking asylum

FanDuel gamblers warned of phishing threat after data breach at Mailchimp

The important thing to realise about the most recently-reported data breach at email newsletter service Mailchimp is that it’s not just Mailchimp’s customer data that was put at risk.

Even if you’re not personally a customer of Mailchimp, even if yo… Continue reading FanDuel gamblers warned of phishing threat after data breach at Mailchimp