Naked Security
Rogue websites can turn vulnerable browser extensions into back doors
A researcher has found that websites can use some extensions to bypass security policies, execute code, and even install other extensions.
Categories: Naked Security
Bicycle-riding hitman convicted with Garmin GPS watch location data
Location data extracted from the athletic hitman's Garmin GPS watch and TomTom sat nav led to his conviction in two gangland murders.
Categories: Naked Security
WhatsApp fights the spread of deadly fake news with recipient limit
WhatsApp has capped the number of people you can forward messages to, after India was seized by rumour-inspired mob lynchings.
Categories: Naked Security
DNC targeted by Russian hackers beyond 2018 midterms, it claims
The Democratic National Committee has filed a civil complaint accusing Russia of trying to hack its computers as recently as November 2018.
Categories: Naked Security
Twitter bug exposed some Android private tweets to public view
The latest privacy glitch, which went unnoticed for over four years, may trigger yet another EU privacy probe.
Categories: Naked Security
Attackers used a LinkedIn job ad and Skype call to breach bank’s defences
A Chilean Senator has taken to Twitter with alarming news – the company running the country’s ATM network suffered a serious cyberattack.
Categories: Naked Security
State agency exposes 3TB of data, including FBI info and remote logins
Oklahoma’s Department of Securities (ODS) exposed 3TB of files in plain text containing sensitive data on the public internet this month.
Categories: Naked Security
Tim Cook demands a way for users to delete their personal data
The Apple CEO wants the FTC to set up a data-broker clearinghouse so people can see the data that companies have collected on them.
Categories: Naked Security
Monday review – the hot 23 stories of the week
From WhatsApps that aren't meant for you to the highly promising USB-C authentication, and everything in between. It's weekly roundup time.
Categories: Naked Security
Serious Security: What 2000 years of cryptography can teach us
Here's a fascinating history of cryptography that has plenty to teach you - and you don't need a degree in mathematics to follow along!
Categories: Naked Security
Vast data-berg washes up 1.16 billion pwned records
Have I Been Pwned? (HIBP) has revealed a huge cache of breached email addresses and passwords, which it has named Collection #1.
Categories: Naked Security
Google cracks down on access to your Android phone and SMS data
Android apps that want access to your call and SMS data now have to pass muster with Google's team of reviewers.
Categories: Naked Security
Did you know you can see the ad boxes Facebook sorts us into?
...or that they can edit the (often inaccurate) pigeon-holes Facebook likes to put us in, a study found.
Categories: Naked Security
Ep. 015 – USB anti-hacking, bypassing 2FA and government insecurity [PODCAST]
Here's the latest Naked Security podcast - enjoy!
Categories: Naked Security
YouTube bans dangerous and harmful pranks and challenges
The platform can't keep us from driving while blindfolded, but at least it can remove videos that glorify our more brainless moments.
Categories: Naked Security
Email crooks swindle woman out of $150K from home sale
She sent her bank account details three times, she said. Unfortunately, they wound up in crooks' hands, and her money wound up in their pockets.
Categories: Naked Security
Microsoft font gives away forgery in bankruptcy case
In a case that could be straight out of a legal TV drama, a computing font has cost a couple two houses in a Canadian bankruptcy case.
Categories: Naked Security
Change your password! VoIP provider leaves huge database exposed online
A researcher has discovered an exposed database containing gigabytes of call logs, SMS data, and internal system credentials belonging to US Voice-over-IP (VoIP) service provider VOIPo.com.
Categories: Naked Security
Two charged with hacking company filings out of SEC’s EDGAR system
They're charged with phishing and inflicting malware to get into the EDGAR filing system, stealing thousands of filings, and selling access.
Categories: Naked Security