data leakage

Skype for Android leaks sensitive data

by Chester Wisniewski on April 17, 2011 | 7 Comments

androidfeaturedskype

The Skype application for Android devices has been shown to insecurely store sensitive information. This information even includes private chat logs, phone numbers and addresses of your contacts.

April Fool: Apple iPad and other popular devices vulnerable to data loss through "substrate hack"

by Paul Ducklin on April 1, 2011 | 37 Comments

Apple iPad and other devices vulnerable to data loss through "substrate hack"

SophosLabs has found an alarming vector by which personal and private data can leak from smartphones and portable computing devices such as the Apple iPad and iPad 2.

Data leakage and dictionary attack stories from RSA

by Paul Ducklin on February 19, 2011 | 8 Comments

pass-250

Duck is now on his way back from the RSA conference in San Francisco - from where he can tell you that the WiFi Terms and Conditions at the airport are still as onerous as they were last year - with an amusing fifth anecdote to add to his Travellers Beware series.

What can you learn from the deluge of data leakage news?

by Chester Wisniewski on January 19, 2011 | Leave a comment

HandcuffedDrive250

Scottish courts lose sensitive documents at the recycling center, hospital insiders spy on high-profile patient records and Call of Duty: Black Ops. What? Yes, health care system exposes patient records on a server that was commandeered to serve as a first person shooter gaming server.

Sophos Security Chet Chats 42 and 43

by Chester Wisniewski on January 14, 2011 | Leave a comment

Sophos Security Chet Chat 41

Sophos Security Chet Chat 42 features Tony Ross discussing the news and a advanced fee fraud scam he investigated originating in Ghana. In Chet Chat 43 Paul Ducklin of Sophos Australia is our guest bringing his perspective from down under about Patch Tuesday, Vodafone, this quarter's Dirty Dozen and the new Mac App Store

Vodafone Australia in massive data leakage controversy

by Paul Ducklin on January 9, 2011 | 5 Comments

Vodafone Australia in massive data leakage controversy

UPDATED: Vodafone Australia's current data leakage woes are a warning to us all.

Learn why, and listen to some advice on how to decide if your business is vulnerable.

Sophos Security Chet Chat 41 - Who do you trust?

by Chester Wisniewski on December 30, 2010 | 2 Comments

Sophos Security Chet Chat 41

The last Chet Chat of 2010 is live and Tony Ross joined Chester Wisniewski this week to discuss Apple pulling the WikiLeaks app, the new IE zero day, Christmas hacking, cloud data leakage and how to establish trusted advisor status with users.

Airport insecurity - are you a high-risk traveller?

by Paul Ducklin on December 9, 2010 | 5 Comments

OLYMPUS DIGITAL CAMERA

Since we're all smart enough to realise that airport security isn't, you'd think we'd be smart enough to watch out for our own security once we're inside.

Sadly, we don't - especially when it comes to computer security.

Laptop password cracked in 10 minutes - learn how!

by Paul Ducklin on October 28, 2010 | 4 Comments

how-secure

The traditional data files on your laptop - spreadsheets, pictures, reports, and more - are valuable, and vulnerable.

But that's not all. Many laptops will give an intruder the keys to other parts of your organisational castle, too.

Privacy threats to dominate security landscape in 2011?

by Paul Ducklin on October 15, 2010 | Leave a comment

rPrivacy threats to dominate security landscape in 2011?

At Hack in the Box, we decided to have a bit of fun. My Sophos Malaysia colleagues purchased a veritable flotilla of rubber ducks - in traditional bathtime-duck yellow - and tricked me into an autograph session. Duck signing ducks, geddit?

Encrypting everything isn't the whole story

by Paul Ducklin on April 14, 2010 | Leave a comment

Image (1) paw-poster.jpg for post 1495

I'm not usually given to marketroidistic behaviour (also known as "making shameless product plugs"), but I'm willing to give it a try once in a while. So here goes. We've just announced the latest version of our Sophos SafeGuard Enterprise Read more…

What price privilege?

by Paul Ducklin on March 31, 2010 | Leave a comment

Image (1) iustitia.jpg for post 1482

The Brisbane Times reports a worrying exchange of words in the Industrial Relations Commission – a senior barrister admitting that his laptop, containing three years' worth of work, was recently stolen. Amusingly, the BT further quotes the sinned-against silk as Read more…

Smartphone Security - 50% of devices unprotected, 24% unsure

by Chester Wisniewski on February 1, 2010 | Leave a comment

Image (1) mobilephonepoll300.jpg for post 3047

Sophos released our "Security Threat Report: 2010" today and one of the more interesting statistics shows how awful users are at protecting their mobile devices. At recent conferences, I have heard many administrators discussing their plans to roll-out full disk Read more…

Congress looks to ban P2P file-sharing, will companies follow suit?

by Chester Wisniewski on November 18, 2009 | Leave a comment

Image (1) towns250.png for post 2775

In the United States Congress yesterday, Representative Edolphus Towns of New York introduced a bill (HR 4098) to ban P2P file-sharing on US government, and government contractor computers. This bill was likely prompted by the reckless loss of sensitive government Read more…

Schwarzenegger denies consumers knowledge of their own stolen data

by Chester Wisniewski on October 19, 2009 | Leave a comment

Image (1) californiaflag250.jpg for post 2923

To everyone's surprise, California Governor Arnold Schwarzenegger vetoed senate bill SB-20 last week. The bill would have required businesses to inform consumers of what data about them was lost during a breach, inform the California Attorney General if more than Read more…