Pitney Bowes and Groupe M6 join ransomware’s victim list
Two more large organisations find themselves struggling after a ransomware attack… Continue reading Pitney Bowes and Groupe M6 join ransomware’s victim list
Author Archives: John E Dunn
Update now! Windows users targeted by iTunes Software Updater zero-day
The flaw is a rare ‘unquoted path class’ described as “so thoroughly documented that you would expect programmers to be well aware…” But that’s not the case. Continue reading Update now! Windows users targeted by iTunes Software Updater zero-day
Soldering spy chips inside firewalls is now a cheap hack, shows researcher
The tiny ATtiny85 chip doesn’t look like the next big cyberthreat facing the world, but sneaking one on to a firewall motherboard would be bad news for security were it to happen. Continue reading Soldering spy chips inside firewalls is now a cheap hack, shows researcher
Hackers bypassing some types of 2FA security FBI warns
Some types of 2FA security can no longer be guaranteed to keep the bad guys out, the FBI warned US companies. Continue reading Hackers bypassing some types of 2FA security FBI warns
Twitter used 2FA phone numbers for targeted advertising
Twitter may have “inadvertently” handed phone and email data from some users to advertisers as part of its Tailored Audiences system that targets users’ feeds with ads. Continue reading Twitter used 2FA phone numbers for targeted advertising
Copy-and-paste sharing on Stack Overflow spreads insecure code
It’s the time-saving technique employed by many coders – copy and paste code from crowd-sourcing ‘Q&A’ websites. But is it always secure? Continue reading Copy-and-paste sharing on Stack Overflow spreads insecure code
Facebook’s Libra cryptocurrency dealt blow by PayPal’s departure
PayPal abruptly announced that it was leaving the Libra Association. Continue reading Facebook’s Libra cryptocurrency dealt blow by PayPal’s departure
Android devices hit by zero-day exploit Google thought it had patched
Android smartphones are vulnerable to a zero-day exploit that Google thought it had patched for good two years ago. Continue reading Android devices hit by zero-day exploit Google thought it had patched
WhatsApp vulnerability could compromise Android smartphones
A researcher has released details of a WhatsApp flaw that could be used to compromise the app and the mobile device the app is running on. Continue reading WhatsApp vulnerability could compromise Android smartphones
PDF encryption standard weaknesses uncovered
Researchers have discovered weaknesses in PDF encryption which could be exploited to reveal the plaintext contents of a file to an attacker. Continue reading PDF encryption standard weaknesses uncovered