In a recent data breach incident, a file containing the names, email addresses, and employers of approximately 5600 individuals was mistakenly uploaded to the scanning and sharing service, Virus Total. While the leaked information may seem harmless, it included the personal details of global cybersecurity experts from various intelligence agencies, law enforcement groups, and military…
The Naked Security podcast recently discussed the return of Little Bobby Tables, backdoors, and exploits. The episode began with a discussion of the AT command set for modems, which was first developed in 1983 and is still widely used today. The hosts then moved on to discuss the recent bug found in KeePass, a password…
Google has released a new Chrome update that includes two security patches, one of which is particularly noteworthy. Google has directly stated that an exploit for CVE-2023-3079 exists in the wild, without any of the usual vague language about being aware of reports. This means that Google is aware that criminals are actively exploiting the…
Google has successfully obtained a restraining order against a cyber gang known as the CryptBot crew, which it accused of ripping off Google product names, trademarks and icons to sell rogue software distribution services. The company also claimed the gang had operated a botnet, which had stolen the personal data of hundreds of thousands of…
Apple’s AirTag system has been in the news for various reasons, including firmware hacking, being used as a low-bandwidth community radio network, and being involved in a tragic stalking incident that ended in a murder charge. While Apple has introduced measures to make AirTags harder to exploit, the growing market for similar devices and Google’s…
If you’re a fan of Google Chrome or Microsoft Edge, you’re probably already up to date with the latest updates. But it’s always important to double-check, as recently two zero-day remote code execution (RCE) bugs have been patched in the Chromium browser core, on which both Edge and Chrome are based. Although the details of…
not just for data security or electrical safety, but also for your phone’s battery health. If you can’t avoid them, then be aware that you might be exposing your device to a voltage spike, and that you may need to manually approve any attempt to access your data. Juicejacking, then, is a thing, but it’s…
