OpenSSL fixes two “one-liner” crypto bugs – what you need to know
“As bad as Heartbleed”? We heard that concern a week ago, but we think it’s less ungood than that… Continue reading OpenSSL fixes two “one-liner” crypto bugs – what you need to know
Author Archives: Paul Ducklin
Google patches “in-the-wild” Chrome zero-day – update now!
Running Chrome? Do the “Help-About-Update” dance move right now, just to be sure… Continue reading Google patches “in-the-wild” Chrome zero-day – update now!
Canadian cybercriminal pleads guilty to “NetWalker” attacks in US
Bust in Canada, now bust in the USA as well. Continue reading Canadian cybercriminal pleads guilty to “NetWalker” attacks in US
Facebook 2FA phish arrives just 28 minutes after scam domain created
The crooks hit us up with this phishing email less than half an hour after they activated their new scam domain. Continue reading Facebook 2FA phish arrives just 28 minutes after scam domain created
“Missing Cryptoqueen” hits the FBI’s Ten Most Wanted list
The “Missing Cryptoqueen” makes the American Top Ten… but not in a good way. Continue reading “Missing Cryptoqueen” hits the FBI’s Ten Most Wanted list
S3 Ep89: Sextortion, blockchain blunder, and an OpenSSL bugfix [Podcast + Transcript]
Latest episode – listen and read now! Use our advice to advise your own friends and family… let’s all do our bit to stand up to scammers! Continue reading S3 Ep89: Sextortion, blockchain blunder, and an OpenSSL bugfix [Podcast + Transcript]
Firefox 102 fixes address bar spoofing security hole (and helps with Follina!)
Firefox squashes a bug that helped phishers, and brings its own helping hand to Microsoft’s “Follina” saga. Continue reading Firefox 102 fixes address bar spoofing security hole (and helps with Follina!)
Harmony blockchain loses nearly $100M due to hacked private keys
The crooks needed at least two private keys, each stored in two parts… but they got them anyway. Continue reading Harmony blockchain loses nearly $100M due to hacked private keys
FTC warns of LGBTQ+ extortion scams – be aware before you share!
It’s a simple jingle and it’s solid advice: “If in doubt, don’t give it out!” Continue reading FTC warns of LGBTQ+ extortion scams – be aware before you share!
OpenSSL issues a bugfix for the previous bugfix
Fortunately, it’s not a major bugfix, which means it’s easy to patch and can teach us all some useful lessons. Continue reading OpenSSL issues a bugfix for the previous bugfix