By popular demand, the Chet Chat has gone back to a weekly format, so your favourite security podcast will now be appearing twice as frequently!
Listen to Chet and Duck in the latest episode...
A Florida man will go to prison for defrauding student aid accounts, while his two fellow-conspirators have been given probation and community sentences.
The group's techniques should serve as a reminder that it's not just the information stored on our computers that we need to keep secure.
How do you copy fingerprints? Which is the most trustworthy browser? Who will use Facebook for payments? How long does an email address live?
Satisfy your curiosity with this week's 60 Second Security!
To paraphrase Oscar Wilde: "To lose one patient record may be regarded as a misfortune. To lose 4,000,000 looks like carelessness."
How four stolen computers led to a huge class action lawsuit...
UK police routinely pass on personal information they hold, including central criminal records and huge swathes of material held by local forces, to the RSPCA - a non-government body with no official requirement to reveal who it holds data about, what data it holds, how it stores it or for how long.
Last year, a Googler named Dr. Elie Bursztein noticed that Apple's App Store protocols were using HTTP where HTTPS would have been much better.
Some time later, Apple has changed its ways.
Paul Ducklin explains why it matters...
Webhosting management company cPanel recently announced a worrying sort of compromise: the possible theft of its customers' root passwords.
Paul Ducklin looks at what happened, and what's being done to avoid a repeat of this worrying situation...
Two more alleged cybercrooks are cooling their heels in custody this weekend.
The modern-day bank robbers are said to have run a scam that allowed them to work around the two-factor authentication protection offered by the victims' banks.
A contractor working for the US Secret Service left two tapes full of extremely sensitive data on a Metro train, losing the extremely sensitive, personal data of staff, contact and overseas informants.
The space agency is now, finally, after yet another unencrypted laptop theft, scrambling to require full disk encryption agency-wide.
Wyndham Hotels is being sued by the US Federal Trade Commission for lax security measures. Will suits like this raise concerns among other organizations that are careless with our personal information?
Tech news site TechRadar is alerting users that their username, password, email address and date of birth have been accessed by hackers.
In late 2011, we published our analysis of a bunch of USB keys we'd bought at a lost property auction.
We got a number of surprises - not least that the Privacy Commissioner decided he wanted a word with us. Find out what happened next...
An undercover investigation in India has uncovered that some call center workers have been selling confidential information on nearly 500,000 Britons.
We bought a stash of USB keys at a major transit authority's Lost Property auction, and took a look at the sort of information people leave on the train.
Two-thirds of the keys were infected with malware, and nothing on any of the keys was encrypted...
Steam, the online empire of computer game behemoth Valve Corporation, has issued details of the hack it suffered last weekend.
If you're a Steam user, find out what you should be doing next...