Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

These charts aren’t “horrible” because of their coronavirus data – they’re horrible because they could let criminals conquer your computer.

The hackers claim the high-profile law firm where the files originated has refused to pay their ransom.

The business email compromise (BEC) gang Scattered Canary has filed more than 200 fraudulent claims for unemployment benefits and for COVID-19 relief funds.

The operators behind the Toll Group attack is taking applications for technically advanced partners.

Why making every front-end developer a DevSecOps expert will lead to a more holistic approach to web and native application security.

In contrast, Q1 2019 saw more interest in selling and buying access to individual servers.

The sudo system is about to undergo some radical changes. Find out how to begin working with the new policy system, to make sudo even more powerful.

Researchers shows most flight-risk employees planning to leave an organization tend to start stealing data two to eight weeks before they go.

The number of data breaches for financial gain are up, so are cloud-based data attacks, while cyber-espionage is down, according to the annual report.

The long debate over whether encryption and anonymity shield too much criminal behavior also has staged a resurgence.

Cyberattacks against hospitals and medical facilities have risen this year, often via ransomware and social engineering exploits, says IntSights.

This week sees the early arrival of Chrome 83 with a longer list of new security features than originally planned.

Cybercriminals are taking advantage of the Google name and the cloud to convince victims into handing over their login details.

Cybercriminals are hunting out victims' Office 365 credentials - by dishing out Supreme court "summons" in a phishing attack.

US states are being flooded by fraudulent unemployment applications in a scam run by a sophisticated cybergang.

Vulnerabilities in the Bluetooth authentication process give attackers a way to insert rogue devices between two securely paired devices, academic researchers find.

Looks as though at least one of these patches was supposed to come out a week ago but ended up delayed until now…

This week we discuss a customer who went to Subway for a sandwich and left with a stalker, demon printers and the things you should patch now. I host the show this week with Sophos experts Mark Sto…

With the current upheaval, business leaders may lose focus and push off implementing security measures, managing risk, and keeping up with compliance requirements. That's a big mistake.

The malware-as-a-service is advanced, obfuscated and modular — and built for mass campaigns.