URGENT! Microsoft Exchange double zero-day – “like ProxyShell, only different”
Double-play 0-day in Exchange – what you need to know, and what you can do Continue reading URGENT! Microsoft Exchange double zero-day – “like ProxyShell, only different”
Author Archives: Paul Ducklin
S3 Ep102: How to avoid a data breach [Audio + Transcript]
Latest episode – listen now! Tell fact from fiction in hyped-up cybersecurity news… Continue reading S3 Ep102: How to avoid a data breach [Audio + Transcript]
Optus breach – Aussie telco told it will have to pay to replace IDs
Licence compromised? Passport number burned? Need a new one? Who’s going to pay? Continue reading Optus breach – Aussie telco told it will have to pay to replace IDs
WhatsApp “zero-day exploit” news scare – what you need to know
Is WhatsApp currently under active attack by cyercriminals? Is this a clear and current danger? How worried should WhatsApp users be? Continue reading WhatsApp “zero-day exploit” news scare – what you need to know
Uber and Rockstar – has a LAPSUS$ linchpin just been busted (again)?
Is this the same suspect as before? Is he part of LAPSUS$? Is this the man who hacked Uber and Rockstar? And, if so, who else? Continue reading Uber and Rockstar – has a LAPSUS$ linchpin just been busted (again)?
Morgan Stanley fined millions for selling off devices full of customer PII
Critical data on old disks always seems inaccessible if you really need it. But when you DON”T want it back, guess what happens… Continue reading Morgan Stanley fined millions for selling off devices full of customer PII
S3 Ep101: Uber and LastPass breaches – is 2FA all it’s cracked up to be? [Audio + Text]
Latest episode – listen now! Learn why adopting 2FA isn’t a reason to relax your other security precautions… Continue reading S3 Ep101: Uber and LastPass breaches – is 2FA all it’s cracked up to be? [Audio + Text]
Interested in cybersecurity? Join us for Security SOS Week 2022!
Four one-on-one interviews with experts who are passionate about sharing their expertise with the community. Continue reading Interested in cybersecurity? Join us for Security SOS Week 2022!
LastPass source code breach – incident response report released
Wondering how you’d handle a data breach report if the worst happened to you? Here’s a useful example. Continue reading LastPass source code breach – incident response report released
S3 Ep100.5: Uber breach – an expert speaks [Audio + Text]
Chester Wisniewski on what we can learn from Uber: “Just because a big company didn’t have the security they should doesn’t mean you can’t.” Continue reading S3 Ep100.5: Uber breach – an expert speaks [Audio + Text]