WhatsAppOne call on WhatsApp is enough to establish surveillance
A newly discovered vulnerability allows hackers to eavesdrop on WhatsApp users, read their chats, and install spyware just by calling them. Update the app now!
phishingDear YouTubers, phishers are after your accounts
This phishing campaign is so convincing that even savvy YouTubers may be duped into giving crooks control of their accounts.
Phishing without borders, or why you need to update your router
Cybercriminals are hijacking routers to steal people’s credentials for online banking and services.
SASThe complexities of public attribution
A look at the complexities of public attribution and why nation-states doing it will have real-world implications.
How crooks use your doppelgangers to pay with your card
How criminals use data harvested from users’ devices to fool antifraud systems and siphon money from victims’ accounts.
RSAC 2019: Why attackers need domain fronting
A story from RSAC 2019 on how domain fronting is used to disguise communications between an infected machine and a command server.
RSAC 2019: Grand Theft DNS
At RSAC 2019, a SANS Institute instructor talked about how DNS manipulations can be used to hijack a company’s IT infrastructure.
Using WinRAR? Install this update right away
A bug in WinRAR allows malefactors to gain full control over your device. All they need you to do is unpack a rigged RAR file.
RSAC 2019: Seeking the perfect patching strategy
Researchers at RSAC 2019 reported on the current vulnerability landscape and built a model that helps with effective patching strategy.
InstagramInstagram accounts hijacked with fake copyright infringement notifications
To hijack popular Instagram accounts, scammers are sending phishing e-mails with fake copyright infringement notifications.
cryptojackingRise of the cryptojackers
Despite the plunge in cryptocurrency values, not only has cryptojacking not declined, it is growing rapidly.
Pirate Matryoshka: A nesting doll Trojan from Pirate Bay
A close look at Pirate Matryoshka malware, and why even inveterate pirates should not download cracked software from torrent trackers.
MWC19Mobile World Congress 2019 recap
Mobile World Congress 2019 recapped: 5G, Internet of Things, ultrasonic fingerprint sensors, and artificial intelligence.
A helping hand for a smart hand: How we hacked it so others wouldn’t
At Mobile World Congress 2019, our experts presented a study on the security of Motorica smart artificial limbs.
Cybercriminals intercept codes used for banking to empty your accounts
Crooks hacked telecom protocol SS7 to steal banking two-factor authentication codes.
Crazy Razy, bitcoin thief
The Razy Trojan secretly installs malicious extensions for Chrome and Firefox to serve phishing links and steal cryptocurrency.
My data was leaked in Collection #1. What should I do?
A huge database of leaked e-mails and passwords surfaced in the Internet. Here’s what you should do about it.
Printers gone mad
50,000 printers worldwide suddenly printed a leaflet in support of youtuber PewDiePie. How can you protect your printer from hackers?
Holiday shopping and holiday phishing
The winter sales season is the hottest time of the year for shoppers and financial phishers. Be careful!
Twitter cryptocurrency scams: A hundred Elon Musks — and now Target
Twitter cryptocurrency scams are becoming more and more advanced and convincing, with scammers using new techniques and some heavy artillery.