Latest Articles

SSCC 87 - Mac botnet, Global Payments, Flash Player updater, AES-NI and cloud encryption

Sophos Security Chet Chat

David Schwartzberg is this week's guest on the Chet Chat to talk about the data breach at Global Payments, a new Mac botnet and Flash Player updating. David also explained the new AES-NI encryption acceleration in Intel chips and a new way to safely store files in the cloud.

Share

Easter eggs, with a side order of scareware

Easter eggs, with a side order of scareware

Planning some activities this Easter? Perhaps buying some Easter eggs? Maybe hand decorating some eggs?

Before you go searching for tips, take a read of this post which highlights how seemingly innocent search terms can lead to malware.

Share

Sky News admits it hacked Canoe Man's email

Sky News admits it hacked Canoe Man's email

Broadcaster Sky News has admitted that it authorised a journalist to hack email accounts on two separate occasions.

Accounts hacked included one belonging to the infamous "Canoe Man" who faked his own death and ran off to Panama.

Share

Facebook logins aren't being properly protected on iPhones, iPads and Android devices

Facebook logins aren't being properly protected on iPhones, iPads and Android devices

Facebook login credentials could be lifted from smartphones because the site is not encrypting the sensitive data on iOS and Android devices.

Share

PDF malware adopts another obfuscation trick in attempt to avoid detection

PDF malware adopts another obfuscation trick in attempt to avoid detection

SophosLabs researcher Paul Baccas takes a close look at a way in which malware authors attempt to disguise their attacks inside boobytrapped PDF files.

Share

"600,000+ Macs are in this botnet, including 274 in Cupertino"

shutterstockAppleBite.250

Malware targeting users of Macintosh computers appears to be spreading quickly. One anti-virus vendor is reporting more than 600,000 OS X computers are part of a newly assembled botnet.

Share

Don't be an internet troll. You could be sent to jail!

troll-thumb

Are you annoying on the internet? Have you ever offended someone online?

Arizona might be inviting you to spend some time in jail in the near future.

Share

Apple patches Java hole that was being used to compromise Mac users

MacBomb250

Apple has released an update to Java for OS X patching a recently exploited vulnerability targeting Mac users. Update now to protect yourself - or, better yet, remove Java entirely

Share

Mac malware exploits unpatched drive-by Java vulnerability

Mac malware exploits unpatched Java vulnerability

Malware striking Mac computers is making the headlines again, this time exploiting a vulnerability in Java that has left Apple users dangerously exposed to attack.

Share

Hacker jailed for stealing millions of banking and PayPal identities

whitecollarjail250

UK-based Edward Pearson from York has been jailed for more than two years for stealing millions of personal identities. Read how he got caught before cashing in on his stolen goods.

Share

Pastebin, its mission of freedom, and the tribulations of hacker escapades

pastebin_thumb

Pastebin gives its users "total freedom of speech", which means it's a prime spot for hackers to publicize their exploits and for stolen information to be posted. Makes it a bit difficult to run the site, says Pastebin's owner Jeroen Vader.

Share

SSCC 86 - online elections, "total internet disconnection", Facebook/privacy and PII for just 3c

SSCC 86 - on-line elections, "total internet disconnection", Facebook/privacy and PII for just 3c

In this week's episode, Paul Ducklin joins Chet to discuss online elections, "total internet disconnection", Facebook's new take on privacy, and PII at just 3c a hit.

As usual, Chet and Duck express strong opinions, with Duck even calling on those who are concerned about the erosion of online privacy "not to go quietly"...

Share

'Girls Around Me' stalking app developer and Foursquare negotiate API access

girls-around-me-thumb

Foursquare revoked the game's API access following a slew of press coverage about the gosh-this-looks-like-a-stalker's-favorite tool application, but negotiations to keep the creepy stalker vibe alive continue. I hope it comes back: It's the perfect tool for teaching people what they've publicly revealed and how it can be used.

Share

LulzSec suspect Ryan Cleary sent back to jail - for contacting Sabu

LulzSec suspect Ryan Cleary sent back to jail - for contacting Sabu

Ryan Cleary breached his bail agreement by using the internet..

.. to contact LulzSec leader Sabu (who just happened to be secretly working for the FBI).

Share

Pinterest spam promotes Acai Berry diet

Pinterest spam promotes Acai Berry diet. Image from Shutterstock

Acai Berry diet spammers are hawking miracle diets on Pinterest.

Don't be duped into clicking on the links!

Share

Teacher loses job over Facebook photo, files lawsuit

teacher cartoon

Teacher's aide Kimberly Hester posted a picture on Facebook that was reported as offensive. She is filing a lawsuit because the school subsequently suspended her for not allowing them access to her profile. Does she have a case?

Share

Check from Christian Liberty Financial? Beware spammed-out malware attack

Check from Christian Liberty Financial? Beware spammed-out malware attack

Would you believe your luck if someone handed you money in the street for doing.. well.. nothing?

Probably not. So why would you believe an email that arrives out of the blue, claiming to have a check attached?

Share

UK government plans to spy on email, web and internet phone use

UK government plans to spy on email, web and mobile phone use

There may be some criminals who are caught through proposed government electronic spying powers - but at what cost to freedom and privacy?

Share

Gumming up the internet: When DNS servers attack..

digital-attack-thumb

Operation Blackout's plan to shut down the internet this weekend may have come to nothing, but there is a way in which DNS servers can be used as part of a malicious attack.

Professor Alan Woodward explains more.

Share

"Anti-virus is no good" - discuss

Anti-virus - is the glass half-empty, or half-full?

Security professionals, analysts, journalists and people in the pub: there's a vocal minority in all those groups which likes to be heard to say, "Anti-virus isn't good enough for today's threats".

But is it true? Paul Ducklin has his say.

Share