Chester Wisniewski on what we can learn from Uber: "Just because a big company didn't have the security they should doesn't mean you can't."
Lees meerUber is all over the news for a widely-publicised data breach. We help you answer the question, "How do I stop this happening to me?"
Lees meerLatest episode - listen now! Cosmic rockets, zero-days, tracking cybercrooks, and unlocking the DEADBOLT...
Lees meerIt sounds like a scam that could never work: use a picture of browser and convince the user it's a real browser. You might be surprised...
Lees meerFive updates, one upgrade, plus a zero-day. Patch your Macs, iPhones and iPads as soon as you can (again)...
Lees meerHeartfelt encouragement to embrace RFC 3339 - find out why!
Lees meerLatest episode - listen now! (Or read if you prefer - full transcript inside.)
Lees meerNAS devices make it easy for anyone to add high-capacity file servers to their network. Guess why cybercrooks love NAS devices too...
Lees meerThis time, the crooks got there first - only 1 security hole patched, but it's a zero-day.
Lees meerThis site, like millions of others, has a certificate from Let's Encrypt. Farewell, Peter Eckersley, PhD, who helped make it all possible.
Lees meerLatest episode - listen now!
Lees meerPatch as soon as you can - that recent WebKit zero-day affecting new iPhones is apparently being used against older models, too.
Lees meer24 existing bugs fixed. And, we hope, numerous potential future bugs prevented.
Lees meerHow to get the better of bugs in all the possible packages in your supply chain?
Lees meerWhat does the recent LastPass breach mean for password managers? Just a bump in the road, or a reason to ditch them entirely?
Lees meerTwo trust-spoofing bugs were the main culprits this month - but neither one was a zero-day.
Lees meerLatest episode - listen now! (Or read the transcript if you prefer the text version.)
Lees meerOne bit per second makes the Voyager probe data rate seem blindingly fast. But it's enough to break your security assumptions...
Lees meerThe criminals didn't implant any malware. The attack was orchestrated via malevolent configuration changes.
Lees meerYou’ve probably heard the old joke: “Humour in the public service? It’s no laughing matter!” But the thing with downbeat, blanket judgements of this sort is that it only takes a single counter-example to disprove them. Something cannot universally b…
Lees meerDouble 0-day exploits - one in WebKit (to break in) and the other in the kernel (to take over). Patch now!
Lees meer