Sophos Naked Security


News, opinion, advice and research on computer security threats from Sophos
Aktualizace: 56 min 1 sek zpět
Slack admits to leaking hashed passwords for five years
"When those invitations went out... somehow, your password hash went out with them."
Kategorie: Hacking & Security, Viry a Červi
Traffic Light Protocol for cybersecurity responders gets a revamp
Traffic lights make a handy global metaphor for denoting the sensitivity of cybersecurity threat data - three colours that everyone knows.
Kategorie: Hacking & Security, Viry a Červi
GitHub blighted by “researcher” who created thousands of malicious projects
If you spew projects laced with hidden malware into an open source repository, don't waste your time telling us "no harm done" afterwards.
Kategorie: Hacking & Security, Viry a Červi
S3 Ep94: This sort of crypto (graphy), and the other sort of crypto (currency!) [Audio + Text]
Latest episode - listen now! (Or read if that's what you prefer.)
Kategorie: Hacking & Security, Viry a Červi
Post-quantum cryptography – new algorithm “gone in 60 minutes”
And THIS is why you don't knit your own home-made encryption algorithms and hope no one looks at them.
Kategorie: Hacking & Security, Viry a Červi
Cryptocoin “token swapper” Nomad loses $200 million in coding blunder
Transactions were only approved, it seems, if they were initiated by... errrrr, by anyone.
Kategorie: Hacking & Security, Viry a Červi
GnuTLS patches memory mismanagement bug – update now!
GnuTLS may well be the most widespread cryptographic toolkit you've never heard of. Learn more...
Kategorie: Hacking & Security, Viry a Červi
How to celebrate SysAdmin Day!
I've just popped in to wish you all/The best SysAdmin Day!
Kategorie: Hacking & Security, Viry a Červi
S3 Ep93: Office security, breach costs, and leisurely patches [Audio + Text]
Latest episode - listen now!
Kategorie: Hacking & Security, Viry a Červi
Critical Samba bug could let anyone become Domain Admin – patch now!
It's a serious bug... but there's a fix for it, so you know exactly what to do!
Kategorie: Hacking & Security, Viry a Červi
Mild monthly security update from Firefox – but update anyway
You're probably thinking we're going to say, "Don't delay/Do it today"... and that's exactly what we are saying!
Kategorie: Hacking & Security, Viry a Červi
T-Mobile to cough up $500 million over 2021 data breach
Technically, it's not a fine, and the lawyers will get a big chunk of it. But it still adds up to a half-billion-dollar data breach.
Kategorie: Hacking & Security, Viry a Červi
Office macro security: on-again-off-again feature now BACK ON AGAIN!
20 years to turn it on, then 20 weeks to turn it off, then just 2 weeks to turn it back on again. That's progress!
Kategorie: Hacking & Security, Viry a Červi
Apple patches “0-day” browser bug fixed 2 weeks ago in Chrome, Edge
One vendor's zero-day is another vendor's routine patch...
Kategorie: Hacking & Security, Viry a Červi
S3 Ep92: Log4Shell4Ever, travel tips, and scamminess [Audio + Text]
Latest episode - listen, read or both!
Kategorie: Hacking & Security, Viry a Červi
Last member of Gozi malware troika arrives in US for criminal trial
His co-conspirators went into and got out of prison years ago, while he remained free. Now the tables have turned...
Kategorie: Hacking & Security, Viry a Červi
8 months on, US says Log4Shell will be around for “a decade or longer”
When it comes to cybersecurity, ask not what everyone else can do for you...
Kategorie: Hacking & Security, Viry a Červi
7 cybersecurity tips for your summer vacation!
Here you go - seven thoughtful cybersecurity tips to help you travel safely...
Kategorie: Hacking & Security, Viry a Červi
S3 Ep91: CodeRed, OpenSSL, Java bugs and Office macros [Podcast + Transcript]
Latest episode - listen now! Great discussion, technical content, solid advice... all covered in plain English.
Kategorie: Hacking & Security, Viry a Červi
Facebook 2FA scammers return – this time in just 21 minutes
Last time they arrived 28 minutes after lighting up their fake domain... this time it was just 21 minutes
Kategorie: Hacking & Security, Viry a Červi