- SophosLabs: RT @NakedSecurity Dutch ISP KPN hacked, credentials and personal information leaked http://t.co/W5qbrLkJ04:46 PM February 11, 2012
- gcluley: CIA website brought down – were Anonymous attackers responsible? http://t.co/QLDf3FIG10:22 AM February 11, 2012
- gcluley: RT @NakedSecurity Dutch ISP KPN hacked, credentials and personal information leaked http://t.co/Y8G8q4fo07:18 AM February 11, 2012
Latest Articles
Podcast with SophosLabs on Black Hat and Defcon
The past week and a half have been more than a bit crazy. Between the release of our mid-year threat report and attending Black Hat USA 2010 and Defcon I have barely had a moment to think. Fortunately Vanja Svajcer Read more…
Six people arrested in phishing investigation
A gang of suspected fraudsters, alleged to have stolen details of more than 20,000 bank accounts and credit cards in an operation that could have netted £3 million (US$4.7 million), have been arrested by authorities in London and Navan, Ireland. Read more…
Shocking video of a girl attacked by a shark? OMG - it's a colourful clickjack attack
Hot on the heels of other recent scams spreading virally across Facebook, we're now seeing another - this time posing as a link to an alleged shocking video of a girl being attacked by a shark. Thousands of messages have Read more…
Justin Bieber's naughty webcam is another Facebook viral scam
The Facebook survey scammers are up to their dirty tricks again, this time trying to trick you into believing that pint-sized pop phenomenon Justin Bieber has been naughty on his webcam. For at least the last 24 hours messages have Read more…
JailbreakMe: Security warning for iPhone and iPad owners
A website that has made it simple for iPhone and iPad users to jailbreak their devices may not just be a headache for Apple, but also a portent for future malicious attacks. Owners of Apple gadgets who visit the JailbreakMe Read more…
Jailbreakme.com flaw not a PDF vulnerability
There has been a lot of speculation as to how the jailbreakme.com website exploits a flaw in the Safari browser to enable "one-swipe" jailbreaking. I have read many stories that make the accusation that this is a flaw in the Read more…
Sophos Security Threat Report: Mid-year 2010
I am very pleased to announce the publication of the latest Sophos Security Threat Report. There has been a lot of activity since we last published an update in January and despite some bad news, I think this cloud has Read more…
Facebook users in Singapore – how do they measure up?
Singapore recently pipped Hong Kong into first place as the world's most competitive economy. But how do Singaporean Facebook users measure up? Are they smarter than you, or lagging behind? We took to the streets to find out. Listen, and Read more…
Sophos Security Threat Report Mid-2010
Sophos has today published the mid-year update to its 2010 Security Threat Report, revealing the latest trends and findings from the world of cybercrime. Read the official press release here. I'm doing my bit to promote the report's findings, having Read more…
Microsoft fixes shortcut vulnerability - MS10-046
On Monday Microsoft released an out-of-band patch for the well-documented Windows shortcut vulnerability. The patch is called MS10-046 and will show up in Windows Update as "Security Update for Windows XXXX (KB2286198)". Today on the MSRC blog, Microsoft posted an Read more…
Patch for Link Handling
Microsoft has just released a security bulletin detailing a vulnerability in the way the Windows shell handles link files. An exploited link will trigger its payload when viewed form Windows Explorer. The user does not have to click on it. Read more…
UK Government: We're sticking with Internet Explorer 6
Gulp. At the end of last week, along with thousands of other Brits, I received an email from the UK Government telling me that they had responded to a petition I had signed urging the Prime Minister to encourage government Read more…
Rude Toy Story 3 hidden message? It's another Facebook scam
The recent release of the Toy Story 3 movie is making waves not just because of its ability to make middle-aged men weep, but also because of a message that is being shared far and wide across Facebook: SHOCKING: RUDE Read more…
Microsoft readies emergency patch for Shortcut zero-day flaw
Updated Good news from Microsoft. It has announced that it plans to release an emergency out-of-band update to patch a critical Windows security vulnerability that is being actively exploited by malware. The so-called Shortcut exploit is being exploited by specially Read more…
Microsoft shortcut fix and Black Hat 2010 roundup
Microsoft announced Friday that they will be releasing an out of band patch for what has been known as the Windows shortcut vulnerability. The fix will be released on Monday August 2nd at approximately 10 AM Pacific Daylight Time (1700 Read more…
Sality Links and shortcut exploit
Shortcut exploits have made the news in malware circles this month. After Stuxnet first used them, it wasn't long before other malware started exploiting the zero-day vulnerability - Sality is among their numbers. The authors of the Sality family added Read more…
Greetings from Blackhat Las Vegas 2010
I have to admit that I am not a huge fan of Las Vegas, but, when the reason to visit is as good as attending Blackhat and Defcon I instantly forget the heat, endless rows of slot machines, big crowds, Read more…
Shocking real crimes on Google Streets? No, it's another viral Facebook scam
Once again a viral scam is spreading rapidly across Facebook, posting messages on users' profiles in an attempt to trick the unwary into installing a rogue application. Here's a video where I demonstrate the attack: (Enjoy this video? You can Read more…
Black Hat 2010 – are we headed for cybervictory?
Las Vegas in general, and the Black Hat conference in particular, really do seem larger-than-life, as you can see in the video I made at the outset of the event. Even the bookstand offers a bewilderingly eclectic range of publications, Read more…
Happy bitchday from Facebook
Yesterday my colleague Pablo Teijeira, who is based in our Madrid office, logged into Facebook as normal and was confronted with a rather unusual message in place of the usual reminder of whose birthday it was today: Rather than "Hoy Read more…


