Data loss
Scribd, "world's largest online library," admits to network intrusion, password breach
San Francisco-based document sharing site Scribd has admitted to a network intrusion.
Details are scant, but fortunately a notification published by the company suggests that no more than 1% of users are at risk...
Mobile device security in the US military comes under fire
A recent report by the US Inspector General revealed staggering flaws in the US military's management of mobile devices, and a severe lack of basic IT security protection in place for such devices.
Monday review - the hot 13 stories of the week
Catch up with everything we've written in the last seven days with this handy weekly roundup
Many Amazon S3 cloud storage users are exposing sensitive company secrets, claims report
A security researcher tested a slew of (probably inappropriately misconfigured) storage buckets and found about one in six were open to the public, exposing content we think companies would probably have preferred remain private.
Lisa Vaas explores what has happened.
The 'What's Worse Security Championships'
With March Madness Basketball in full swing in America, we thought it might be fun to try and adapt the concept of sport championships to the land of IT security.
Monday review - the hot 21 stories of the week
It's weekly roundup time. Here's all the great stuff we've written in the past seven days.
Apple password reset website - gaping hole found, fixed
Apple has had a good-bad-good-bad week of it in the computer security environment.
Its announcement of two-step verification for some users was quickly followed by a report of a password recovery exploit for everyone else...
Apple introduces two-factor verification for Apple IDs
After celebrity Web 2.0 journalist Mat Honan had all his iDevices remote-wiped by a cybercrook last year, Apple's login security has been under scrutiny.
Good news! Apple has finally bitten the bullet and started offering two-factor verification for Apple ID users...
IT admin pleads guilty to hacking into and spying on New Jersey mayor's email
Patrick Ricciardi configured computer systems to collect all emails sent to the mayor and two high-ranking city employees.
He did it, he said, to see if his job was secure. We can say with reasonable certainty now that it is not.
AT&T hacker "Weev" sentenced to 41 months in prison, after obtaining the email addresses of 100,000+ iPad users
Andrew Auernheimer has been sentenced for the federal crimes of obtaining the personal data of over 100,000 iPad owners from AT&T's publicly accessible website.
Besides his prison sentence, he's facing 3 years of probation and, together with another convicted hacker, paying restitution of $73,000.
Bring your own: More practical advice for handling smartphones in the workplace
Your workforce wants anytime, anyplace access to applications, but you have a network to protect. Here are a few ideas to make life harder for the bad guys, while making you the good guy.
American retailer Genesco sues Visa, demands $13m in PCI-DSS data breach fines paid back
Genesco, a massive American retailer, suffered an intrusion by cybercrooks in 2010. It was subsequently "fined" over $10m by the payment card industry.
Now it wants its money back...
$5 million class action lawsuit over LinkedIn data breach dismissed
No real damage was done, a judge ruled, and besides, paying for premium membership isn't a guarantee that you'll get premium security.
Ouch! So much for promises made in privacy policies.
Monday review - the hot 22 stories of the week
In case you missed anything, here's everything we wrote in the past seven days.
Evernote shoots itself in foot over "never click on 'reset password' requests" advice
Have you taken a close look at the email that Evernote has sent out, with the subject line "Evernote Security Notice: Service-wide Password Reset"?
It looks like the hacked company has made a blunder.
Evernote hacked - almost 50 million passwords reset after security breach
Evernote, the online note-taking service, has says that it has suffered a serious security breach which saw hackers steal usernames, associated email addresses and encrypted passwords.
Webhosting management company cPanel suffers break-in, lets slip customers' root passwords
Webhosting management company cPanel recently announced a worrying sort of compromise: the possible theft of its customers' root passwords.
Paul Ducklin looks at what happened, and what's being done to avoid a repeat of this worrying situation...
Lessons to learn from the UGNazi hacking attacks against Mat Honan and Cloudflare
Technology journalist Mat Honan and Cloudflare CEO Matthew Prince have something in common - they've both been hacked by the UGNazi hacktivist group.
And what they told the RSA Conference spells bad news for those of us who love to use the internet and embrace cloud-based technologies in our personal and work lives.
Traveling to a conference? 8 security tips to keep top of mind
Conference season 2013 is on. While events like these can be great for networking and mindsharing, there can be computer security dangers lurking about. We've pulled together 8 IT security tips to help you stay ahead of the game.
China blamed for EADS and ThyssenKrupp hack attacks
EADS, maker of the Eurofighter, says that Chinese hackers attacked its computer network last year.
Is your company prepared reducing the likelihood of a successful targeted attack?
![Password security infomerical leaves Ellen DeGeneres in disbelief.. and it will you too [VIDEO]](http://sophosnews.files.wordpress.com/2013/04/ellen-thumb.jpg?w=75&h=75&crop=1)
![Can multiple moving cursors really hide your password from spyware and peepers? [VIDEO]](http://sophosnews.files.wordpress.com/2013/03/cursors-thumb.jpg?w=75&h=75&crop=1)
![Hacked TV channels broadcast zombie apocalypse emergency alert [VIDEO]](http://sophosnews.files.wordpress.com/2013/02/zombie-thumb.jpg?w=75&h=75&crop=1)
