A week in security (January 7 – 13)
Last week on the Malwarebytes Labs blog, we took a look at the Ryuk ransomware attack causing trouble over the holidays, as well as …
Ep. 014 – Rickrolls, Acrobat and zombie hands [PODCAST]
In this episode, the Naked Security Podcast investigates the ethics of remote rickrolling, whether Acrobat is the new Flash, and how to …
2FA codes can be phished by new pentest tool
With every new hack, it’s becoming clearer that older forms of two-factor authentication (2FA) are no longer the reassuring security …
Australia’s Early Warning Network compromised
An early warning network designed to notify subscribers about dangerous weather in Australia has been compromised. The hacker sent many …
How to secure your Instagram account using 2FA
With our archives full to bursting with stories of hijacked social media accounts, it’s a very good idea to set up two-factor …
How to secure your Twitter account
Intrusions into your Twitter account might range from mild annoyance, to a serious PR fail, to an international political gaffe. Regardless …
Ep. 013 – Breaches, Facebook and ransomware reinvented [PODCAST]
The Naked Security Podcast rings out 2018 with a look at the big issues of the past year. With Anna Brading, Paul Ducklin and Matthew …
Hackers Use Phishing Emails to Harvest Two-Factor Gmail Codes
Conventional wisdom says that adding two-factor authentication (2FA) will keep your accounts safe from most phishing scams, but a new wave …
Fortnite hackers making a fortune from reselling stolen accounts
Teenage hackers have been making a fortune from selling stolen accounts for the popular online game Fortnite, it emerged this week. Players …
Hackers target ‘hundreds’ of Middle East activists with fake login pages, 2FA bypass schemes
Hackers have been going after email accounts of hundreds of Middle East-based human rights activists, journalists and others using methods …
How Hackers Bypass Gmail 2FA at Scale
If you’re an at risk user, that extra two-factor security code sent to your phone may not be enough to protect your email account. …
Sneaky phishing campaign beats two-factor authentication
Protecting an account with multi-factor authentication (MFA) is a no-brainer, but that doesn’t mean every method for doing this is …
Worst passwords list is out, but this time we’re not scolding users
Oh, those incorrigible password abusers. After all these years of being shamed (if they cared or were paying attention), they’re still …
Mitigating the risk of Office 365 account hijacking
Office 365 – the online, subscription-based version of Microsoft’s Office application suite – is one the most widely used enterprise …
Humble Bundle alerts customers to subscription reveal bug
You’ll want to check your mailbox if you have a Humble Bundle account, as they’re notifying some customers of a bug used to gather …
Business email compromise scam costs Pathé $21.5 million
Recently released court documents show that European-based cinema chain Pathé lost a small fortune to a business email compromise (BEC) …
Smashing Security #103: An Instagram nightmare, crazy iPhone deaths, and election hack claims
One travel blogger finds you don’t have to be Kylie Jenner to be targeted by an Instagram hacker. When 40 iPhones at a hospital …
Report reveals one-dimensional support for two-factor authentication
Online services have several options as they move beyond passwords to try and make accounts more secure. Think of five websites that you …