Latest Articles

Blogger threatened with $1 billion suit for writing about allegedly predatory publisher

Blogger threatened with $1 billion suit for writing about allegedly predatory publisher

Jeffrey Beall, a US academic librarian who uses his Scholarly Open Access blog to write about scholarly publishers' dubious practices, is being threatened with a $1 billion lawsuit by an Indian publishing group.

22 million user IDs may be in the hands of hackers, after Yahoo Japan security breach

22 million user IDs may be in the hands of hackers, after Yahoo Japan security breach

The call has gone out to Yahoo Japan's 200 million users to change their passwords, after the company warned that it suspected hackers had managed to access a file containing 22 million user IDs.

Inside the "PlugX" malware with SophosLabs - a fascinating journey into a malware factory...

dloadnow-250

Join SophosLabs Principal Researcher Gabor Szappanos as he takes you on a fascinating journey into the latest "product" from the PlugX malware factory.

Congress asks Google if and how it's protecting privacy with Glass

Congress asks Google if and how it's protecting privacy with Glass

The US Congress sent Google a letter listing eight specific privacy areas concerning Glass that legislators would like to know quite a bit more about. As would many of us, now that you mention it.

Monday review - the hot 24 stories of the week

Monday review

In case you missed any recent stories, here's everything we wrote in the last seven days.

Get ready for the next #sophospuzzle - coming soon to a T-shirt near you

It's almost time for the annual AusCERT conference in Queensland, Australia.

And for everyone who's asked, the answer is, "Yes! There's a #sophospuzzle!"

No, you don't have to be there to join in...

Interview with 'We are Anonymous' author Parmy Olson [PODCAST]

anonymous-lulzsec-170

In this podcast Chester interviews Parmy Olson author of "We are Anonymous" about her thoughts on LulzSec, their sentencing and the Anonymous movement. Parmy also shares some of her thoughts on Firefox OS and other developments from Mobile World Congress 2013.

FT hacked. Syrian Electronic Army hijacks Financial Times blogs and Twitter accounts

FT hacked. Syrian Electronic Army hijacks Financial Times blogs and Twitter accounts

The Syrian Electronic Army has struck again - this time adding the scalp of the prestigious Financial Times to its collection of hijacked accounts belonging to well-known media organisations.

How to hack an electric car-charging station

How to hack an electric car-charging station

The latest entrant into the scary-infrastructure category comes from a technology that feels like it should be warm and fuzzy and definitely should not contribute to your personal and financial details getting ripped off.

Apple fixes 41 iTunes security flaws, some more than a year old

iTunes-11-250

Apple released the latest update to iTunes today, version 11.0.3, fixing 41 vulnerabilities in the Windows version and 1 in the OS X version. Many of these flaws are rated critical and we advise you update as soon as possible.

Opinion: No, the LulzSec hackers weren't noble

Was the LulzSec hacking gang harmless? Perhaps noble, even?

Graham Cluley argues that it's not cool, or funny, to hack into companies, expose the private information of members of the general public, and to launch denial of service attacks.

Jail for the LulzSec hacking gang members

LulzSec hackers sentenced

BREAKING NEWS: Members of the notorious LulzSec hacking gang have been sentenced at Southwark Crown Court in London.

Have your say - LulzSec: helpful, harmless or hideous? [VOTE NOW]

Have your say - LulzSec: helpful, harmless or hideous? [VOTE NOW]

LulzSec are about to be sentenced, which will tell us what the judge thinks.

But why not tell us what you think, right here, right now?

How to measure the biggest and most dangerous threats

measuring the biggest and most dangerous threats

Just about every security company publishes some sort of prevalence data - those little bar charts and top tens showing the most important and widespread threats. The raw data behind these easy-to-consume representations can be very useful to security experts and testers.

The LulzSec hackers who boasted they were "Gods" await their sentence

The LulzSec hackers who boasted they were "Gods" await their sentence

Four members of the notorious LulzSec hacking gang, who attacked websites belonging to the likes of the CIA, the NHS and the Serious Organised Crime Agency (SOCA), are due to be sentenced by the UK authorities.

Social Roulette is forced by Facebook to commit its own social suicide

Facebook clings to life, murders social network suicide app

Come on, wouldn't you just love to slaughter your social network and blame it on "bad luck"? Imagine, with one lucky spin of the virtual bullet chamber, there's a one in six chance that it's goodbye!

Naked Security discusses cybercrime on BBC Radio 5 Live's "Outriders" show...

pc-250

Ever wondered how cybercriminals turn electronic trickery into cold, hard cash? What sort of person gets drawn into this sort of crime? Who bears the cost? And how do the cops arrest the perpetrators when they might be dozens of network hops away?

And the winner of the World War Two steganography competition is...

dearmum-250

Last week, we ran a competition around a steganographic code that was used by the British during the Second Word War.

Take a secret military message, and wrap it up into a believable "letter home"... it's harder than it sounds!

US DOJ secretly swiped Associated Press phone records

US DOJ secretly swiped Associated Press phone records

The AP reports that records for two months of calls to 20 lines were seized, including a phone line straight into the heart of the House of Representatives. Congress, to its credit, is not amused.

Mozilla pushes out new Firefox and Thunderbird: 8 security advisories, 3 critical fixes

Not to be outdone by Microsoft and Adobe's Patch Tuesday releases, Mozilla pushed out its latest browser and email client updates today.

There are no bated-breath patches for in-the-wild exploits, but 3 of the 8 security fixes are deemed "critical".