Latest Articles
Cyber security in US power system suffering from reactive, self-policed rules
John Hawes argued that what's needed is carefully considered defensive strategies combined with fast responses to new, unforeseen vulnerabilities.
Sadly when government and big business intersect, pragmatism and speedy reactions are rarely in evidence.
Why Twitter's two-factor authentication isn't going to stop media organisations from being hacked
Twitter's new two factor authentication system will be welcomed by some users, but ignored by others who will find it a nuisance.
Notably, it's unlikely to be much use at all to media companies who have suffered at the hands of hackers, as Graham Cluley explains.
NYPD detective charged with hiring email hackers to break into colleagues' personal accounts
A NYPD detective has been arrested for hiring an email hacking service to pinch the login details for at least 43 personal email accounts and one cell phone belonging to at least 30 individuals.
It's VKontakte, *not* Vikontakte. Twitter phishing, Soviet-style
With a cybercrime plan as poorly thought out as this, maybe it's no wonder the Soviet Union didn't survive.
Breakfast malware at Tiffany's? Trojan horses spammed out widely
Little blue boxes from Tiffany & Co. are the stuff of dreams for many. Don't let an unexpected email delivery - apparently from the company - make you so giddy with an excitement that you end up with a computer nightmare.
Small businesses beware! Point-of-sale malware is after you
Malware targeting point-of-sale (POS) systems has been a major trend for the last six months. With easy pickings to be had from mom-and-pop shops, this pattern is only going to grow until people start fighting back with better system security, and ideally better payment card systems.
Virus Bulletin's Technical Director John Hawes takes a look....
Operation Aurora hack was counterespionage, not China picking on Tibetan activists
Claims are made that the Aurora hackers weren't just Chinese-sponsored hackers bent on messing with Tibetan activists.
Rather it was a Chinese counterintelligence operation that sought to discover if the US had uncovered the identity of clandestine agents operating within its borders.
Three wireless security myths - busted! [VIDEO]
Last year Sophos looked at Wi-Fi security in London and Sydney and the results weren't fantastic.
So we thought it was time to make a short revision video, just in time for 2013 Cyber Security Awareness Week in New Zealand.
SSCC 109 - Laptop theft, money mules, LulzSec, Microsoft and more [PODCAST]
Episode #109 of our popular Chet Chat podcast series is out.
Chet and Duck are back with their almost entirely reverent opinions on the latest computer security issues.
DDoS-for-hire service is legal and even lets FBI peek in, says a guy with an attorney
It's "a public service on a public connection to other public servers", the operator of RageBooter told Brian Krebs, and if sites don't like getting their socks knocked off in DDoS attacks, they should fix recursive DNS and default DNS server settings.
Oh, and yes, he says, he not only cooperates with the FBI, he works with them. He's busy on Tuesdays around 1 p.m., so try later if you need to to launch an attack.
AusSHIRT 2013 - the #sophospuzzle instructions in full
The AusCERT 2013 conference has started, so the AusSHIRT 2013 #sophospuzzle is officially live.
See if you can transform the code on the T-shirt and win a prize!
(You don't have to be at the conference to enter.)
Blogger threatened with $1 billion suit for writing about allegedly predatory publisher
Jeffrey Beall, a US academic librarian who uses his Scholarly Open Access blog to write about scholarly publishers' dubious practices, is being threatened with a $1 billion lawsuit by an Indian publishing group.
22 million user IDs may be in the hands of hackers, after Yahoo Japan security breach
The call has gone out to Yahoo Japan's 200 million users to change their passwords, after the company warned that it suspected hackers had managed to access a file containing 22 million user IDs.
Inside the "PlugX" malware with SophosLabs - a fascinating journey into a malware factory...
Join SophosLabs Principal Researcher Gabor Szappanos as he takes you on a fascinating journey into the latest "product" from the PlugX malware factory.
Congress asks Google if and how it's protecting privacy with Glass
The US Congress sent Google a letter listing eight specific privacy areas concerning Glass that legislators would like to know quite a bit more about. As would many of us, now that you mention it.
Get ready for the next #sophospuzzle - coming soon to a T-shirt near you
It's almost time for the annual AusCERT conference in Queensland, Australia.
And for everyone who's asked, the answer is, "Yes! There's a #sophospuzzle!"
No, you don't have to be there to join in...
Interview with 'We are Anonymous' author Parmy Olson [PODCAST]
In this podcast Chester interviews Parmy Olson author of "We are Anonymous" about her thoughts on LulzSec, their sentencing and the Anonymous movement. Parmy also shares some of her thoughts on Firefox OS and other developments from Mobile World Congress 2013.
FT hacked. Syrian Electronic Army hijacks Financial Times blogs and Twitter accounts
The Syrian Electronic Army has struck again - this time adding the scalp of the prestigious Financial Times to its collection of hijacked accounts belonging to well-known media organisations.








