Panama-based VPN provider confirms it was hacked after Finnish data centre provider left server unsecured
News Security
Trend Micro Buys Cloud Security Specialist For £54m
Cloud Conformity acquisition aimed at helping customers guard against misconfigured public cloud accounts, beginning with Amazon Web Services
Smart Speakers Hacked To Listen In, Steal Passwords
Malicious third-party apps for Google Home and Amazon's Alexa can listen in on conversations and trick users into revealing passwords
EU Data Regulator Finds ‘Serious Concerns’ Over Microsoft Contracts
Microsoft's contracts with EU agencies found to have 'significant scope for improvement' where it comes to protecting citizens' data
Russian Cyber-Spies ‘Hijacked Iranian Attack Infrastructure’
Turla hacking group carried out at least 20 successful cyber-raids around the world using Iranian attack tools, NCSC says
Kolkata Police Shut Down Scam Call Centres
Fraudsters convinced Devon man his computer had been taken over by a Russian criminal involved in trafficking guns, ammunition and hand grenades
Government Invests £36m To Bolster Chip Cyber Defence
Additional £36 million in funding as government teams up with chip designer ARM to bolster chip level cyber security for businesses
Google Pixel 4 Face Unlock Works If User Is Asleep
Eyes wide shut. New flagship Google phone can be unlocked if a person's eyes are closed
Ransomware Remains Biggest Cyber Threat To SMBs, Warns Datto
Number of ransomware attacks on SMBs on the rise, and the cost of downtime has risen over 200 percent
Samsung Acknowledges Galaxy S10 Fingerprint Flaw
A software patch will be by Samsung issued to stop any fingerprint unlocking the Galaxy S10 smartphone fitted with a screen protector
Boom or Bust? Brexit and the Tech Sector
With Brexit fast approaching, how is the tech sector preparing for what could be seismic changes to the industry? How could Brexit impact tech businesses, and what does the future look like for technology companies moving forward?
US Carried Out Cyberattack On Iran After Saudi Oil Attack – Report
A secret US cyber-attack was reportedly carried out against Iran after an oil facility in Saudi Arabia was attacked in September
Pitney Bowes Says No Data Stolen After Ransomware Attack
Mailing and shipping firm Pitney Bowes has been hit by a ransomware attack, but says no data has been stolen
Google Adds USB-C Model For Titan Security Key
Google is releasing a new USB-C Titan security key to expand the use of two-factor authentication (2FA)
Equity Firm Buys UK’s Sophos For £3.1bn
Acquisition of Oxfordshire-based cyber-security firm, which aided NHS during WannaCry attacks, follows fall in value of sterling in wake of 2016 Brexit vote
Developers Reduce Firefox Code Injection Exposure
Mozilla has removed features that exposed the browser to code injection attacks via its about: pages and JavaScript's 'dangerous' eval() function
EU Warns Of State-Sponsored Attacks On 5G Networks
European Union warns of 5G risk, particularly of a 'supplier being subject to interference from a non-EU country'
Hackers Compromise Volusion, Steal Card Details From 6,500 Websites
Shudder. Magecart attack on the host of tens of thousands of websites, has compromised valuable credit card data
Intelligence Agencies Warn Of Flaw With VPN Products
Both the US NSA and UK NCSC warn hackers are actively exploiting vulnerabilities in VPN products
Microsoft Patch Tuesday Fixes 59 Flaws
Nine critical flaws patched, and the good news is there no-zero-day flaws requiring system admin attention
Twitter Admits To Using Emails, Phone Numbers, For Advertising
Sorry folks. Twitter admits to inadvertently using people's email and phone numbers provided for security purposes, for advertising
US Adds More Chinese Firms To ‘Entity List’
Another 28 Chinese companies have been added to US blacklist over alleged mistreatment of Muslim minorities
Windows 10 Preview Build Adds Security, Smartphone Features
Users can now log into Safe Mode with a PIN, Your Phone features roll out to newer Samsung devices and Windows Subsystem for Linux gets bug fixes
Programmer Hacks Ransomware Crooks, Releases Decryption Keys
German developer releases thousands of decryption keys for Muhstik ransomware after being forced to pay out £600 to decrypt his files
Programming Shortcuts ‘Lead To Security Risks’
New research highlights vulnerability risk of using potentially insecure code snippets posted on social media outlets such as Stack Overflow
Met Police ‘Provided Seven Images’ For King’s Cross Face Recognition Scheme
Police acknowledge working with private King's Cross developer on face recognition scheme, amidst ongoing concern about the use of the tracking tech
Zuckerberg Hits Back Against Encryption Backdoor Request
The United States, UK, and Australia sign open letter to Facebook saying encryption helps child abuse, as they demand an encryption 'backdoor'
FBI Warns Businesses, ‘Don’t Pay Ransomware’ Demands
Spate of ransomware attacks sees FBI issue warning to US businesses. Main lesson? Don't pay the criminals and backup often
Judge Spares Jail Time For Parents Of TalkTalk Hacker
Suspended jail sentences for 'misguided' parents of TalkTalk hacker Elliott Gunton
Former Yahoo Engineer Hacked Accounts For User Porn
Reyes Daniel Ruiz pleads guilty after hacking 6,000 accounts, targetting younger women, to search for porn