The Curious Engineer

Malwarebytes

2023–2024

883 posts

← 2020–2022 2025–2026 →

2024 426

December 2024

  1. Connected contraptions cause conniption for 2024
  2. Data breaches in 2024: Could it get any worse?
  3. Is nowhere safe from AI slop? (Lock and Code S05E27)
  4. 2024 in AI: It’s changed the world, but it’s not all good
  5. Our Santa wishlist: Stronger identity security for kids
  6. ‘Fix It’ social-engineering scheme impersonates several brands
  7. TP-Link faces US national security probe, potential ban on devices
  8. Pallet liquidation scams and how to recognize them
  9. AI-generated malvertising “white pages” are fooling detection engines
  10. 5 million payment card details stolen in painful reminder to monitor Christmas spending
  11. Task scams surge by 400%, but what are they?
  12. A day in the life of a privacy pro, with Ron de Jesus (Lock and Code S05E26)
  13. A week in security (December 9 – December 15)
  14. Malicious ad distributes SocGholish malware to Kaiser Permanente employees
  15. 4.8 million healthcare records left freely accessible
  16. Update now! Apple releases new security patches for vulnerabilities in iPhones, Macs, and more
  17. Data brokers should stop trading health and location data, new bill proposes
  18. TikTok ban in US: Company seeks emergency injunction to prevent it
  19. Encrypted messaging service intercepted, 2.3 million messages read by law enforcement
  20. A week in security (December 2 – December 8)
  21. Europol takes down criminal data hub Manson Market in busy month for law enforcement
  22. Americans urged to use encrypted messaging after large, ongoing cyberattack
  23. Crypto’s rising value likely to bring new wave of scams
  24. AI chatbot provider exposes 346,000 customer files, including ID documents, resumes, and medical records
  25. Repeat offenders drive bulk of tech support scams via Google Ads
  26. No company too small for Phobos ransomware gang, indictment reveals
  27. These cars want to know about your sex life (re-air) (Lock and Code S05E25)
  28. A week in security (November 25 – December 1)

November 2024

  1. Printer problems? Beware the bogus help
  2. Data broker exposes 600,000 sensitive files including background checks
  3. Medical testing company LifeLabs failed to protect customer data, report finds
  4. Explained: the Microsoft connected experiences controversy
  5. Spotify, Audible, and Amazon used to push dodgy forex trading sites and more
  6. “Hilariously insecure”: Andrew Tate’s The Real World breached, 800,000 users affected
  7. A week in security (November 18 – November 24)
  8. Meta takes down more than 2 million accounts in fight against pig butchering
  9. “Sad announcement” email implies your friend has died
  10. Update now! Apple confirms vulnerabilities are already being exploited
  11. AI Granny Daisy takes up scammers’ time so they can’t bother you
  12. Free AI editor lures in victims, installs information stealer instead on Windows and Mac
  13. AI is everywhere, and Boomers don’t trust it
  14. An air fryer, a ring, and a vacuum get brought into a home. What they take out is your data (Lock and Code S05E24)
  15. QuickBooks popup scam still being delivered via Google ads
  16. A week in security (November 11 – November 17)
  17. Malicious QR codes sent in the mail deliver malware
  18. 122 million people’s business contact info leaked by data broker
  19. Advertisers are pushing ad and pop-up blockers using old tricks
  20. Scammer robs homebuyers of life savings in $20 million theft spree
  21. Temu must respect consumer protection laws, says EU
  22. Warning: Online shopping threats to avoid this Black Friday and Cyber Monday
  23. DNA testing company vanishes along with its customers’ genetic data
  24. A week in security (November 4 – November 10)
  25. Hello again, FakeBat: popular loader returns after months-long hiatus
  26. TikTok ordered to close Canada offices following “national security review”
  27. Air fryers are the latest surveillance threat you didn’t consider
  28. Malwarebytes acquires AzireVPN to fuel additional VPN features and functionalities
  29. Large eBay malvertising campaign leads to scams
  30. 8 security tips for small businesses
  31. Update your Android: Google patches two zero-day vulnerabilities
  32. Warning: Hackers could take over your email account by stealing cookies, even if you have MFA
  33. Why your vote can’t be “hacked,” with Cait Conley of CISA (Lock and Code S05E23)
  34. City of Columbus breach affects around half a million citizens
  35. Crooks bank on Microsoft’s search engine to phish customers
  36. A week in security (October 28 – November 3)
  37. 1,000+ web shops infected by “Phish ‘n Ships” criminals who create fake product listings for in-demand products

October 2024

  1. Android malware FakeCall intercepts your calls to the bank
  2. Patch now! New Chrome update for two critical vulnerabilities
  3. Update your iPhone, Mac, Watch: Apple issues patches for several vulnerabilities
  4. Europol warns about counterfeit goods and the criminals behind them
  5. A week in security (October 21 – October 27)
  6. 100 million US citizens officially impacted by Change Healthcare data breach
  7. Pinterest tracks users without consent, alleges complaint
  8. After concerns of handing Facebook taxpayer info, four companies found to have improperly shared data
  9. LinkedIn bots and spear phishers target job seekers
  10. Upload a video selfie to get your Facebook or Instagram account back
  11. This industry profits from knowing you have cancer, explains Cody Venzke (Lock and Code S05E22)
  12. Internet Archive attackers email support users: “Your data is now in the hands of some random guy”
  13. A week in security (October 14 – October 20)
  14. Unauthorized data access vulnerability in macOS is detailed by Microsoft
  15. 23andMe will retain your genetic information, even if you delete the account
  16. “Nudify” deepfake bots remove clothes from victims in minutes, and millions are using them
  17. Tor Browser and Firefox users should update to fix actively exploited vulnerability
  18. AI scammers target Gmail accounts, say they have your death certificate
  19. Election season raises fears for nearly a third of people who worry their vote could be leaked
  20. Robot vacuum cleaners hacked to spy on, insult owners
  21. A week in security (October 7 – October 13)
  22. Modern TVs have “unprecedented capabilities for surveillance and manipulation,” group reveals
  23. Internet Archive suffers data breach and DDoS
  24. Google Search user interface: A/B testing shows security concerns remain
  25. AI girlfriend site breached, user fantasies stolen
  26. MoneyGram confirms customer data breach
  27. Exposing the Facebook funeral livestream scam (Lock and Code S05E21)
  28. Comcast and Truist Bank customers impacted by debt collector’s breach
  29. Large scale Google Ads campaign targets utility software
  30. iPhone flaw could read your saved passwords out loud. Update now!
  31. A week in security (September 30 – October 6)
  32. Browser Guard now flags data breaches and better protects personal data
  33. Not Black Mirror: Meta’s smart glasses used to reveal someone’s identity just by looking at them
  34. Radiology provider exposed tens of thousands of patient files
  35. Fake Disney+ activation page redirects to pornographic scam
  36. Android users targeted on Facebook and porn sites, served adware
  37. Facebook and Instagram passwords were stored in plaintext, Meta fined

September 2024

  1. A week in security (September 23 – September 29)
  2. Millions of Kia vehicles were vulnerable to remote attacks with just a license plate number
  3. Privacy watchdog files complaint over Firefox quietly enabling its Privacy Preserving Attribution
  4. Telegram will hand over user details to law enforcement
  5. Don’t share the viral Instagram Meta AI “legal” post
  6. Romance scams costlier than ever: 10 percent of victims lose $10,000 or more
  7. Malwarebytes Personal Data Remover: A new way to help scrub personal data online
  8. 100 million+ US citizens have records leaked by background check service
  9. San Francisco’s fight against deepfake porn, with City Attorney David Chiu (Lock and Code S05E20)
  10. Relationship broken up? Here’s how to separate your online accounts
  11. SpaceX, CNN, and The White House internal data allegedly published online. Is it real?
  12. A week in security (September 16 – September 22)
  13. “Simply staggering” surveillance conducted by social media and streaming services, FTC finds
  14. Tor anonymity compromised by law enforcement. Is it still safe to use?
  15. Walmart customers scammed via fake shopping lists, threatened with arrest
  16. Snapchat wants to put your AI-generated face in its ads
  17. iOS 18 is out. Here are the new privacy and security features
  18. 23andMe to pay $30 million in settlement over 2023 data breach
  19. A week in security (September 9 – September 15)
  20. Ford wants to eavesdrop on passenger conversations to help target ads
  21. Scammers advertise fake AppleCare+ service via GitHub repos
  22. Facebook scrapes photos of kids from Australian user profiles to train its AI
  23. PartnerLeak scam site promises victims full access to “cheating” partner’s stolen data
  24. Payment provider data breach exposes credit card information of 1.7 million customers
  25. Your partner “is cheating on you” scam asks you to pay to see proof
  26. What the arrest of Telegram’s CEO means, with Eva Galperin (Lock and Code S05E19)
  27. A week in security (September 2 – September 8)
  28. Lowe’s employees phished via Google ads
  29. Planned Parenthood partly offline after ransomware attack
  30. “Hello pervert” sextortion scam includes new threat of Pegasus—and a picture of your home
  31. How to avoid election related scams
  32. London’s city transport hit by cybersecurity incident [updated]
  33. City of Columbus tries to silence security researcher
  34. A week in security (August 26 – September 1)

August 2024

  1. Iranian cybercriminals are targeting WhatsApp users in spear phishing campaign
  2. Fake Canva home page leads to browser lock
  3. Telegram CEO Pavel Durov charged with allowing criminal activity
  4. CODAC Behavioral Healthcare, US Marshalls are latest ransomware targets
  5. SMS scammers use toll fees as a lure
  6. TDECU data breach affects half a million people
  7. PSA: These ‘Microsoft Support’ ploys may just fool you
  8. Move over malware: Why one teen is more worried about AI (re-air) (Lock and Code S05E18)
  9. A week in security (August 19 – August 25)
  10. Fake funeral “live stream” scams target grieving users on Facebook
  11. Hundreds of online stores hacked in new campaign
  12. Google patches actively exploited zero-day in Chrome. Update now!
  13. Fraudulent Slack ad shows malvertiser’s patience and skills
  14. My child had her data stolen—here’s how to protect your kids from identity theft
  15. Man certifies his own (fake) death after hacking into registry system using stolen identity
  16. National Public Data leaked passwords online
  17. Toyota confirms customer and employee data stolen, says breach at third party to blame
  18. Why you need to know about ransomware
  19. “We will hold them accountable”: General Motors sued for selling customer driving data to third parties
  20. Hacked GPS tracker reveals location data of customers
  21. Millennials’ sense of privacy uniquely tested in romantic relationships
  22. A week in security (August 12 – August 18)
  23. Dozens of Google products targeted by scammers via malicious search ads
  24. Microsoft patches bug that could have allowed an attacker to revert your computer back to an older, vulnerable version
  25. We’re making it easier for you to protect your identity
  26. X accused of unlawfully using personal data of 60 million+ users to train its AI [updated]
  27. Malwarebytes awarded Parent Tested Parent Approved Seal of Approval
  28. Data theft forum admins busted after flashing their cash in a life of luxury
  29. AI girlfriends want to know all about you. So might ChatGPT (Lock and Code S05E17)
  30. Google Manifest V3 and Malwarebytes Browser Guard
  31. A week in security (August 5 – August 11)
  32. Security company ADT announces security breach of customer data
  33. Stolen data from scraping service National Public Data leaked online
  34. Android vulnerability used in targeted attacks patched by Google
  35. Men report more pressure and threats to share location and accounts with partners, research shows
  36. Magniber ransomware targets home users
  37. A week in security (July 29 – August 4)
  38. Scammers are impersonating cryptocurrency exchanges, FBI warns

July 2024

  1. Meta to pay $1.4 billion over unauthorized facial recognition image capture
  2. Apple fixes Siri vulnerabilities that could have allowed sensitive data theft from locked device. Update now!
  3. Threat actor impersonates Google via fake ad for Authenticator
  4. SIEM is not storage, with Jess Dodson (Lock and Code S05E16)
  5. US senators ask FTC to investigate car makers’ privacy practices
  6. A week in security (July 22 – July 28)
  7. Meta takes down 63,000 sextortion-related accounts on Instagram
  8. Windows update may present users with a BitLocker recovery screen
  9. TracFone will pay $16 million to settle FCC data breach investigation
  10. Google admits it can’t quite quit third-party cookies
  11. Heritage Foundation data breach containing personal data is available online
  12. A week in security (July 15 – July 21)
  13. CrowdStrike update at center of Windows “Blue Screen of Death” outage
  14. Number of data breach victims goes up 1,000%
  15. Gen Z breakups tainted by login abuse for spying and stalking, research shows
  16. Rite Aid says 2.2 million people affected in data breach
  17. AI device Rabbit r1 logged user interactions without an option to erase them before selling
  18. How an AI “artist” stole a woman’s face, with Ali Diamond (Lock and Code S05E15)
  19. Disney “breached,” data dumped online
  20. A week in security (July 8 – July 14)
  21. Fake Microsoft Teams for Mac delivers Atomic Stealer
  22. Dangerous monitoring tool mSpy suffers data breach, exposes customer details
  23. “Nearly all” AT&T customers had phone records stolen in new data breach disclosure
  24. iPhone users in 98 countries warned about spyware by Apple
  25. Peloton accused of providing customer chat data to train AI
  26. Ticketmaster says stolen Taylor Swift Eras Tour tickets are useless
  27. Shopify says stolen customer data was taken in third-party breach
  28. ‘RockYou2024’: Nearly 10 billion passwords leaked online
  29. A week in security (July 1 – July 7)
  30. Ticketmaster hackers release stolen ticket barcodes for Taylor Swift Eras Tour [updated]
  31. Authy phone numbers accessed by cybercriminals, warns Twilio
  32. Affirm says Evolve Bank data breach also compromised some of its customers
  33. Prudential Financial data breach impacts 2.5 million people, not 36,000 as first thought
  34. Personal data stolen from unsuspecting airport visitors and plane passengers in “evil twin” attacks, man charged
  35. Busted for book club? Why cops want to see what you’re reading, with Sarah Lamdan (Lock and Code S05E14)
  36. A week in security (June 24 – June 30)

June 2024

  1. TEMU sued for being “dangerous malware” by Arkansas Attorney General
  2. Driving licences and other official documents leaked by authentication service used by Uber, TikTok, X, and more
  3. ‘Poseidon’ Mac stealer distributed via Google ads
  4. [updated] Federal Reserve “breached” data may actually belong to Evolve Bank
  5. Malwarebytes Premium Security stops 100% of malware during AV Lab test
  6. Neiman Marcus confirms breach. Is the customer data already for sale?
  7. Change Healthcare confirms the customer data stolen in ransomware attack
  8. A week in security (June 17 – June 23)
  9. First million breached Ticketmaster records released for free
  10. US bans Kaspersky, warns: “Immediately stop using that software”
  11. Was T-Mobile compromised by a zero-day in Jira?
  12. TikTok facing fresh lawsuit in US over children’s privacy
  13. Explained: Android overlays and how they are used to trick people
  14. 43% of couples experience pressure to share logins and locations, Malwarebytes finds
  15. (Almost) everything you always wanted to know about cybersecurity, but were too afraid to ask, with Tjitske de Vries: Lock and Code S05E13
  16. Microsoft Recall delayed after privacy and security concerns
  17. A week in security (June 10 – June 16)
  18. Truist bank confirms data breach
  19. Update now! Google Pixel vulnerability is under active exploitation
  20. Adobe clarifies Terms of Service change, says it doesn’t train AI on customer content
  21. 23andMe data breach under joint investigation in two countries
  22. When things go wrong: A digital sharing warning for couples
  23. Google’s Chrome changes make life harder for ad blockers
  24. A week in security (June 3 – June 9)
  25. Google will start deleting location history
  26. Advance Auto Parts customer data posted for sale [updated]
  27. Husband stalked ex-wife with seven AirTags, indictment says
  28. Microsoft Recall snapshots can be easily grabbed with TotalRecall tool
  29. Financial sextortion scams on the rise
  30. Say hello to the fifth generation of Malwarebytes
  31. Big name TikTok accounts hijacked after opening DM
  32. US residents targeted by utility scammers on Google
  33. Debt collection agency FBCS leaks information of 3 million US citizens
  34. 800 arrests, 40 tons of drugs, and one backdoor, or what a phone startup gave the FBI, with Joseph Cox: Lock and Code S05E12
  35. WhatsApp cryptocurrency scam goes for the cash prize
  36. A week in security (May 27 – June 2)
  37. Ticketmaster confirms customer data breach

May 2024

  1. How to tell if a VPN app added your Windows device to a botnet
  2. Beware of scammers impersonating Malwarebytes
  3. The Ticketmaster “breach”—what you need to know
  4. How to turn off location tracking on iOS and iPadOS
  5. How to turn off location tracking on Android
  6. Data leak site BreachForums is back, boasting Live Nation/Ticketmaster user data. But is it a trap?
  7. pcTattletale spyware leaks database containing victim screenshots, gets website defaced
  8. A week in security (May 20 – May 26)
  9. How AI will change your credit card behind the scenes
  10. Criminal record database of millions of Americans dumped online
  11. Microsoft AI “Recall” feature records everything, secures far less
  12. How to remove a user from a shared Android device
  13. How to remove a user from a shared Mac
  14. How to remove a user from a shared Windows device
  15. Your vacation, reservations, and online dates, now chosen by AI: Lock and Code S05E11
  16. What is real-time protection and why do you need it?
  17. Financial institutions ordered to notify customers after a breach, have an incident response plan
  18. A week in security (May 13 – May 19)
  19. [updated] Deleted iPhone photos show up again after iOS update
  20. Scammers can easily phish your multi-factor authentication codes. Here’s how to avoid it
  21. Notorious data leak site BreachForums seized by law enforcement
  22. Apple and Google join forces to stop unwanted tracking
  23. Update Chrome now! Google releases emergency security patch
  24. Why car location tracking needs an overhaul
  25. A week in security (May 6 – May 12)
  26. Dell notifies customers about data breach
  27. DocGo patient health data stolen in cyberattack
  28. Desperate Taylor Swift fans defrauded by ticket scams
  29. “No social media ’til 16,” and other fixes for a teen mental health crisis, with Dr. Jean Twenge: Lock and Code S05E10
  30. A week in security (April 29 – May 5)
  31. You get a passkey, you get a passkey, everyone should get a passkey
  32. Dropbox Sign customer data accessed in breach
  33. Watch out for tech support scams lurking in sponsored search results
  34. Psychotherapy practice hacker gets jail time after extorting patients, publishing personal therapy notes online
  35. Wireless carriers fined $200 million after illegally sharing customer location data

April 2024

  1. Malwarebytes Premium Security earns “Product of the Year” from AVLab
  2. FBI warns online daters to avoid “free” online verification schemes that prove costly
  3. Kaiser health insurance leaked patient data to advertisers
  4. A week in security (April 22 – April 28)
  5. Ring agrees to pay $5.6 million after cameras were used to spy on customers
  6. TikTok comes one step closer to a US ban
  7. Google ad for Facebook redirects to scam
  8. “Substantial proportion” of Americans may have had health and personal data stolen in Change Healthcare breach
  9. Picking fights and gaining rights, with Justin Brookman: Lock and Code S05E09
  10. Billions of scraped Discord messages up for sale
  11. A week in security (April 15 – April 21)
  12. Law enforcement reels in phishing-as-a-service whopper
  13. Mental health company Cerebral failed to protect sensitive personal data, must pay $7 million
  14. Cannabis investment scam JuicyFields ends in 9 arrests
  15. Should you share your location with your partner?
  16. Giant Tiger breach sees 2.8 million records leaked
  17. A week in security (April 8 – April 14)
  18. How to change your Social Security Number
  19. Apple warns people of mercenary attacks via threat notification system
  20. How to check if your data was exposed in the AT&T breach
  21. How to protect yourself from online harassment
  22. Introducing the Digital Footprint Portal
  23. 35-year long identity theft leads to imprisonment for victim
  24. Porn panic imperils privacy online, with Alec Muffett (re-air): Lock and Code S05E08
  25. A week in security (April 1 – April 7)
  26. Cookie consent choices are just being ignored by some websites
  27. Google patches critical vulnerability for Androids with Qualcomm chips
  28. Google Chrome gets ‘Device Bound Session Credentials’ to stop cookie theft
  29. AT&T confirms 73 million people affected by data breach
  30. Trusted Advisor now available for iOS, Mac, and Android
  31. Free VPN apps turn Android phones into criminal proxies
  32. A week in security (March 25 – March 31)

March 2024

  1. MFA bombing taken to the next level
  2. How to back up your Mac
  3. How to back up your Windows 10/11 PC to OneDrive
  4. How to back up your iPhone to a Windows computer
  5. How to back up your iPhone to a Mac
  6. How to back up your iPhone to iCloud
  7. Facebook spied on Snapchat users to get analytics about the competition
  8. Update Chrome now! Google patches possible drive-by vulnerability
  9. Disturbing robocaller fined $9.9 million
  10. Meta to abandon social media tracking tool CrowdTangle
  11. Patch now: Mozilla patches two critical vulnerabilities in Firefox
  12. YouTube ordered to reveal the identities of video viewers
  13. Vans warns customers of data breach
  14. Securing your home network is long, tiresome, and entirely worth it, with Carey Parker: Lock and Code S05E07
  15. A week in security (March 18 – March 24)
  16. Canada revisits decision to ban Flipper Zero
  17. 19 million plaintext passwords exposed by incorrectly configured Firebase instances
  18. [updated] Apex Legends Global Series plagued by hackers
  19. Tax scammer goes after small business owners and self-employed people
  20. The ‘AT&T breach’—what you need to know
  21. Social media influencers targeted by identity thieves
  22. Store manager admits SIM swapping his customers
  23. A week in security (March 11 – March 17)
  24. TikTok faces ban in US unless it parts ways with Chinese owner ByteDance
  25. Malwarebytes Premium blocks 100% of malware during external AVLab test
  26. New Facebook photo rule hoax spreads
  27. Data brokers admit they’re selling information on precise location, kids, and reproductive healthcare
  28. Going viral shouldn’t lead to bomb threats, with Leigh Honeywell: Lock and Code S05E06
  29. A week in security (March 4 – March 10)
  30. PetSmart warns customers of credential stuffing attack
  31. Predator spyware vendor banned in US
  32. Update your iPhones and iPads now: Apple patches security vulnerabilities in iOS and iPadOS
  33. Malwarebytes Easter egg!
  34. American Express warns customers about third party data breach
  35. No “Apple magic” as 11% of macOS detections last year came from malware
  36. Pegasus spyware creator ordered to reveal code used to spy on WhatsApp users
  37. A week in security (February 26 – March 3)
  38. Malicious meeting invite fix targets Mac users
  39. Pig butchering scams, how they work and how to avoid them

February 2024

  1. Airbnb scam sends you to a fake Tripadvisor site, takes your money
  2. Facebook bug could have allowed attacker to take over accounts
  3. Android banking trojans: How they steal passwords and drain bank accounts
  4. Identity theft is number one threat for consumers, says report
  5. How to make a fake ID online, with Joseph Cox: Lock and Code S05E05
  6. A week in security (February 19 – February 25)
  7. Signal to shield user phone numbers by default
  8. [updated] Vibrator virus steals your personal information
  9. A first analysis of the i-Soon data leak
  10. Wyze cameras show the wrong feeds to customers. Again.
  11. Malvertising: This cyberthreat isn’t on the dark web, it’s on Google
  12. Raccoon Infostealer operator extradited to the United States
  13. Why keeping track of user accounts is important
  14. A week in security (February 12 – February 18)
  15. GoldPickaxe Trojan steals your face!
  16. Massive utility scam campaign spreads via online ads
  17. Facebook Marketplace users’ stolen data offered for sale
  18. Malwarebytes crushes malware all the time
  19. TheTruthSpy stalkerware, still insecure, still leaking data
  20. Warzone RAT infrastructure seized
  21. If only you had to worry about malware, with Jason Haddix: Lock and Code S05E04
  22. AI-generated voices in robocalls are illegal, rules FCC
  23. A week in security (February 5 – February 11)
  24. Warning from LastPass as fake app found on Apple App Store
  25. 2 million job seekers targeted by data thieves
  26. How to tell if your toothbrush is being used in a DDoS attack
  27. [Updated]Facebook fatal accident scam still rages on
  28. State of Malware 2024: What consumers need to know
  29. Safer Internet Day, or why Brad Pitt needed an internet bodyguard
  30. A week in security (January 29 – February 4)
  31. FBI removes malware from hundreds of routers across the US
  32. “You have blood on your hands.” Senate Committee calls for action by social media giants to protect children online
  33. Tax season is here, so are scammers

January 2024

  1. Mother of all Breaches may contain NEW breach data
  2. Decline in robocalls is encouraging, efforts seem to be working
  3. ChatGPT accused of breaking data protection rules
  4. Apple warns of “privacy and security threats” after EU requires it to allow sideloading
  5. Deepfake Taylor Swift images circulate online, politicians call for laws to ban deepfake creation
  6. In conversation: Bruce Schneier on AI-powered mass spying
  7. Bruce Schneier predicts a future of AI-powered mass spying: Lock and Code S05E03
  8. Hewlett Packard Enterprise also searched by Cozy Bear
  9. A week in security (January 22 – January 28)
  10. 10 things to do to improve your online privacy
  11. Ring curtails law enforcement’s access to footage
  12. Malicious ads for restricted messaging applications target Chinese users
  13. How to lock out your ex-partner from your smart home
  14. Update now! Apple releases patch for zero-day vulnerability
  15. “The mother of all breaches”: 26 billion records found online [Updated]
  16. Coldriver threat group targets high-ranking officials to obtain credentials
  17. A week in security (January 15 – January 21)
  18. Google failing to scrub abortion access in location history, study claims
  19. Google changes wording for Incognito browsing in Chrome
  20. Update Chrome! Google patches actively exploited zero-day vulnerability
  21. AI used to fake voices of loved ones in “I’ve been in an accident” scam
  22. A true tale of virtual kidnapping: Lock and Code S05E02
  23. Alleged FruitFly malware creator ruled incompetent to stand trial
  24. “I’ll miss him so much” Facebook scam uses BBC branding to lure victims
  25. Fidelity National Financial acknowledges data breach affecting 1.3 million customers
  26. A week in security (January 8 – January 14)
  27. FCC wants cars to make life harder for stalkers
  28. Info-stealers can steal cookies for permanent access to your Google account
  29. Atomic Stealer rings in the new year with updated version
  30. SEC X account hacked to hawk crypto-scams
  31. AirTags stalking lawsuit alleges Apple’s negligence in protecting victims
  32. A week in security (January 1 – January 7)
  33. Police investigate sexual assault on an avatar
  34. How AI hallucinations are making bug hunting harder
  35. Facebook introduces another way to track you – Link History
  36. 23andMe blames “negligent” breach victims, says it’s their own fault
  37. Microsoft disables ms-appinstaller after malicious use
  38. Investment fraud a serious money maker for criminals
  39. DNA data deserves better, with Suzanne Bernstein: Lock and Code S05E01
  40. A week in security (December 25 – December 31)

2023 457

December 2023

  1. The top 4 ransomware gang failures of 2023
  2. 4 sneaky scams from 2023
  3. How to recognize AI-generated phishing mails
  4. A week in security (December 18 – December 24)
  5. Update Chrome now! Emergency update patches zero-day
  6. US pharmacy Rite Aid banned from operating facial recognition systems
  7. New MetaStealer malvertising campaigns
  8. Mr. Cooper leaks personal data of 14 million loan and mortgage customers
  9. Meet the entirely legal, iPhone-crashing device, the Flipper Zero: Lock and Code S04E25
  10. A week in security (December 11 – December 17)
  11. Chrome starts the countdown to the end of tracking cookies
  12. Apple to introduce new feature that makes life harder for iPhone thieves
  13. Apple now requires a judge’s order to hand over your push notification data
  14. Update now! Apple issues patches for older iPhones and other devices
  15. Healthcare giant Norton breach leads to theft of millions of patient records
  16. The sound of you typing on your keyboard could reveal your password
  17. “Amazon got hacked” messages are a false alarm
  18. A week in security (December 4 – December 10)
  19. Meta’s Purple Llama wants to test safety risks in AI models
  20. US government is snooping on people via phone push notifications, says senator
  21. Android phones can be taken over remotely – update when you can
  22. Windows 10 gets its own extended security updates program
  23. Adobe Coldfusion vulnerability used in attacks on government servers
  24. Roblox and Twitch provider Tipalti allegedly breached by ransomware [updated]
  25. 23andMe says, er, actually some genetic and health data might have been accessed in recent breach
  26. Why a ransomware gang tattled on its victim, with Allan Liska: Lock and Code S04E24
  27. Update your iPhones! Apple fixes two zero-days in iOS
  28. Social media giants to testify over failing to protect kids
  29. A week in security (November 27 – December 3)

November 2023

  1. Associated Press, ESPN, CBS among top sites serving fake virus alerts
  2. Meta sued over forcing users to pay to stop tracking
  3. Update now! Chrome fixes actively exploited zero-day vulnerability
  4. Many major websites allow users to have weak passwords
  5. A week in security (November 20 – November 26)
  6. Windows Hello fingerprint authentication can be bypassed on popular laptops
  7. Chrome pushes forward with plans to limit ad blockers in the future
  8. $19 Stanley cup deal is a Black Friday scam
  9. Malwarebytes consumer product roundup: The latest
  10. Explained: Privacy washing
  11. Nothing Chats pulled from Google Play
  12. How to stop fake System notifications on macOS
  13. Why less is more: 10 steps to secure customer data
  14. Atomic Stealer distributed to Mac users via fake browser updates
  15. Student discount: Get 50% off Malwarebytes
  16. A week in security (November 13 – November 19)
  17. Alarm system cyberattack leaves those in need struggling to call for help
  18. Credit card skimming on the rise for the holiday shopping season
  19. A week in security (November 06 – November 12)
  20. Signal is testing usernames so you don’t have to share your phone number
  21. YouTube shows ads for ad blocker, financial scams
  22. Judge rules it’s fine for car makers to intercept your text messages
  23. Meta whistleblower says company has long ignored how it sexually endangers children
  24. Nude “before and after” photos stolen from plastic surgeon, posted online, and sent to victims’ family and friends
  25. Defeating Little Brother requires a new outlook on privacy: Lock and Code S04E23
  26. A week in security (October 30 – November 5)
  27. YouTube launches “global effort” to block ad blockers
  28. Should you allow your browser to remember your passwords?
  29. [updated] Atlassian: “Take immediate action” to patch your Confluence Data Center and Server instances
  30. What Gen Z really cares about when it comes to privacy
  31. SolarWinds and its CISO accused of misleading investors before major cyberattack

October 2023

  1. A week in security (October 23 – October 29)
  2. Malvertising via Dynamic Search Ads delivers malware bonanza
  3. Update now! Apple patches a raft of vulnerabilities
  4. Patch…later? Safari iLeakage bug not fixed
  5. Cyberattack hits 5 hospitals
  6. Face search engine PimEyes stops searches of children’s faces
  7. Announcing NEW Malwarebytes Identity Theft Protection
  8. Hong Kong residents targeted in malvertising campaigns for WhatsApp, Telegram
  9. Google Chrome wants to hide your IP address
  10. MGM attack is too late a wake-up call for businesses, says James Fair: Lock and Code S04E22
  11. A week in security (October 16 – October 22)
  12. The hot topics from Europe’s largest trade fair for IT security
  13. Clever malvertising attack uses Punycode to look like KeePass’s official website
  14. 3 crucial security steps people should do, but don’t
  15. Customer data stolen from gaming cloud host Shadow
  16. A week in security (October 9 – October 15)
  17. Explained: Quishing
  18. Stalkerware activity drops as glaring spying problem is revealed
  19. 23andMe user data stolen, offered for sale
  20. AI sneak attacks, location spying, and definitely not malware, or, what one teenager fears online: Lock and Code S04E21
  21. Upgrading your Android device? Read this first
  22. A week in security (October 2 – October 8)
  23. Multi-factor authentication has proven it works, so what are we waiting for?
  24. Amazon Prime email scammer snatches defeat from the jaws of victory
  25. Update now! Apple patches vulnerabilities on iPhone and iPad
  26. Meta and TikTok consider charging users for ad-free experience
  27. Exim finally fixes 3 out of 6 vulnerabilities
  28. Update your Android devices now! Google patches two actively exploited vulnerabilities
  29. Gen Z fears physical violence from being online more than anyone else, Malwarebytes finds
  30. Meta is using your public Facebook and Instagram posts to train its AI
  31. Food delivery robots give captured video footage to police
  32. A week in security (September 25 – October 1)

September 2023

  1. Dependabot impersonators cause trouble on GitHub
  2. Update Chrome now! Google patches another actively exploited vulnerability
  3. Malicious ad served inside Bing’s AI chatbot
  4. Xenomorph hunts cryptocurrency logins on Android
  5. Child health data stolen in registry breach
  6. Credit card thieves target Booking.com customers
  7. TikTok flooded with fake celebrity nude photo Temu referrals
  8. What does a car need to know about your sex life? Lock and Code S04E20
  9. A week in security (September 18 – September 24)
  10. Emergency update! Apple patches three zero-days
  11. T-Mobile spills billing information to other customers
  12. Involved in a data breach? Here’s what you need to know
  13. Steer clear of cryptocurrency recovery phrase scams
  14. The privacy perils of the Metaverse
  15. Compromised Free Download Manager website was delivering malware for years
  16. A week in security (September 11 – September 17)
  17. Watch out, this LastPass email with “Important information about your account” is a phish
  18. iPhone 15 launch: Wonderlust scammers rear their heads
  19. Upgrading your iPhone? Read this first
  20. Update Chrome now! Google patches critical vulnerability being exploited in the wild
  21. Major cyberattack leaves MGM Resorts reeling
  22. Re-air: What teenagers face growing up online: Lock and Code S04E19
  23. Wyze home cameras temporarily show other people’s security feeds
  24. A week in security (September 4 – September 10)
  25. Chrome’s “Enhanced Ad Privacy”: What you need to know
  26. Mac users targeted in new malvertising campaign delivering Atomic Stealer
  27. X wants your biometric data
  28. Smart chastity device exposes sensitive user data
  29. Password-stealing Chrome extension smuggled on to Web Store
  30. A week in security (August 28 – September 3)

August 2023

  1. A firsthand perspective on the recent LinkedIn account takeover campaign
  2. Victim records deleted after spyware vendor compromised
  3. “An influx of Elons,” a hospital visit, and magic men: Becky Holmes shares more romance scams: Lock and Code S04E18
  4. A week in security (August 21 – August 27)
  5. Update now! Google Chrome’s first weekly update has arrived
  6. Smart lightbulb and app vulnerability puts your Wi-Fi password at risk
  7. Malwarebytes acquires Cyrus Security
  8. DarkGate reloaded via malvertising and SEO poisoning campaigns
  9. Trusted Advisor puts you in the security driving seat
  10. QR codes used to phish for Microsoft credentials
  11. Chrome will soon start removing extensions that may be unsafe
  12. A week in security (August 14 – August 20)
  13. Attackers demand ransoms for stolen LinkedIn accounts
  14. Catching up with WoofLocker, the most elaborate traffic redirection scheme to tech support scams
  15. Discord.io confirms theft of 760,000 members’ data
  16. Beware malware posing as beta versions of legitimate apps, warns FBI
  17. PCMag ranks Malwarebytes #1 cybersecurity vendor
  18. Ford says it’s safe to drive its cars with a WiFi vulnerability
  19. 25 most popular websites vs Malwarebytes Browser Guard
  20. A new type of “freedom,” or, tracking children with AirTags, with Heather Kelly: Lock and Code S04E17
  21. A week in security (August 7 – August 13)
  22. YouTube makes sweeping changes to tackle spam on Shorts videos
  23. Google’s “browse privately” is nothing more than a word play, lawyers say
  24. Voter data stolen in UK Electoral Commission systems breach
  25. Facial recognition tech lands innocent woman with bogus carjacking charge
  26. Server breach could be fatal blow for LetMeSpy
  27. Digital assets continue to be prime target for malvertisers
  28. TikTok facing fines for violating children’s privacy
  29. FCC comes down hard on robocallers with record $300m fine
  30. A week in security (July 31 – August 6)
  31. The end looms for Meta’s behavioural advertising in Europe
  32. Film companies lose battle to unmask Reddit users
  33. How to protect your child’s identity
  34. Hey, are you REALLY ready to go on vacation? (No, you aren’t)
  35. Minecraft fans beware: Players and servers at risk from BleedingPipe vulnerability

July 2023

  1. Supply chain attacks disrupt emergency services communications
  2. Meta subsidiaries must pay $14m over misleading data collection disclosure
  3. A week in security (July 24 – July 30)
  4. How Apple fixed what Microsoft hasn’t, with Thomas Reed: Lock and Code S04E16
  5. 60,000 Androids have stalkerware-type app Spyhide installed
  6. Update now! Apple fixes several serious vulnerabilities
  7. How to set up computer security for your parents
  8. A week in security (July 17 – 23)
  9. Amazon in-van delivery driver footage makes its way online
  10. Google fixes “Bad.Build” Cloud Build flaw, researchers say it’s not enough
  11. Plane sailing for ticket scammers: How to keep your flight plans safe
  12. Spy vs. spy: Exploring the LetMeSpy hack, with maia arson crimew
  13. A week in security (July 10 – 16)
  14. Tax preparation firms shared sensitive information with Meta
  15. Proposed Massachusetts law to ban sale of your mobile location data
  16. Threatening rogue finance apps removed from the Apple Store
  17. [Updated] Apple issues Rapid Security Response for zero-day vulnerability
  18. Malwarebytes Browser Guard introduces three new features
  19. A week in security (July 3 – 9)
  20. Update Android now! Google patches three actively exploited zero-days
  21. Warning issued over vulnerability in cardiac device monitoring software
  22. Self-driving cars are a privacy issue, says security expert
  23. Google plans to scrape everything you post online to train its AI
  24. Malicious ad for USPS fishes for banking credentials
  25. Fake reviewers face big fines
  26. Elderly targeted in car accident scam, kingpin arrested
  27. Of sharks, surveillance, and spied-on emails: This is Section 702, with Matthew Guariglia
  28. Brave browser will prevent websites from port scanning visitors
  29. A week in security (June 26 – July 2)

June 2023

  1. Spyware app LetMeSpy hacked, tracked user data posted online
  2. Online safety tips for LGBTQIA+ communities
  3. New technique can defeat voice authentication “after only six tries”
  4. “Free” Evil Dead Rise movie scam lurks in Amazon listings
  5. Why blocking ads is good for your digital health
  6. Surveillance camera insecurities argument comes to one inevitable conclusion: Always update
  7. Criminal secure messaging system takedown: 6500+ arrests and €900 million+ seized
  8. Software company accused of illegally profiling millions of mobile phone users
  9. SupremeBot and Mario cross the finish line together
  10. Company finds lost SSD—and confidential data—for sale on eBay
  11. 81% concerned about ChatGPT security and safety risks, Malwarebytes survey shows
  12. OpenSSH trojan campaign targets Linux systems and IoT devices
  13. A week in security (June 19 – 25)
  14. 9 basic security tips for seniors
  15. UPS warns customers of phishing attempts after data accessed
  16. Update now! Apple fixes three actively exploited vulnerabilities
  17. 6 tips for a cybersecure honeymoon
  18. Ransomware attackers email bemused students as leverage for a payout
  19. DNA testing company failed to protect sensitive genetic and health data, says FTC
  20. Update now! ASUS fixes nine security flaws
  21. Why businesses need a disinformation defense plan, with Lisa Kaplan: Lock and Code S04E13
  22. Baby monitor safety: What you need to know
  23. Phishing scam takes $950k from DoorDash drivers
  24. A week in security (June 12 – 18)
  25. Fake security researchers push malware files on GitHub
  26. Update Chrome now! Google fixes critical vulnerability in Autofill payments
  27. Ticket scammers target Taylor Swift tour
  28. Edge browser feature sends images you view back to Microsoft
  29. Public and free WiFi: Can I safely use it?
  30. Strava heatmap loophole may reveal users’ home addresses
  31. A week in security (June 5 – 11)
  32. Former TikTok exec: Chinese Communist Party had “God mode” entry to US data
  33. Update Chrome now! Google patches actively exploited zero-day
  34. Warning: Victims’ faces placed on explicit images in sextortion scam
  35. Microsoft illegally collected and retained children’s data, says FTC
  36. Trusting AI not to lie: The cost of truth: Lock and Code S04E12
  37. Information stealer compromises legitimate sites to attack other sites
  38. A week in security (May 29 – June 4)
  39. 5 unusual cybersecurity tips that actually work

May 2023

  1. Amazon’s Ring cameras were used to spy on customers
  2. Microsoft gives Apple a migraine
  3. Financial services company OneMain fined $4.25 million for security lapses
  4. A week in security (May 22-28)
  5. “Beautiful Cookie Consent Banner” WordPress plugin vulnerability: Update now!
  6. Update now! Apple issues patches for three actively used zero-days
  7. Malvertising via brand impersonation is back again
  8. Google to pay $40m for “deceptive and unfair” location tracking practices
  9. Employee guilty of joining ransomware attack on his own company
  10. AI generated Pentagon explosion photograph goes viral on Twitter
  11. ChatGPT: Cybersecurity friend or foe?
  12. A week in security (May 15-21)
  13. Identity crisis: How an anti-porn crusade could jam the Internet, featuring Alec Muffett: Lock and Code S04E11
  14. Child safety app riddled with vulnerabilities: Update now!
  15. KeePass vulnerability allows attackers to access the master password
  16. PharMerica breach impacts almost 6 million people
  17. 3 reasons to use a VPN
  18. Update now! Ruckus vulnerability added to CISA’s list of actively exploited bugs
  19. A week in security (May 8-14)
  20. YouTube is testing ad blocker detection
  21. Sponsored Twitter post uses fake BBC News site to boost slippery oil trading app
  22. Google Passkeys: How to create one and when you shouldn’t
  23. Google adds unwanted tracker detection to Find My Device network
  24. New Discord username policy raises user privacy fears
  25. Fake system update drops Aurora stealer via Invalid Printer loader
  26. Brightline breach hits at least 964,000 people, US records show
  27. The rise of “Franken-ransomware,” with Allan Liska: Lock and Code S04E10
  28. A week in security (May 1 – 7)
  29. Google and Apple cooperate to address unwanted tracking
  30. Microsoft vs Google spat sees users rolling back security updates to fix browser issues
  31. Newspaper evades Russian censors, hides news in Counter-Strike map
  32. Apple releases first Rapid Security Response update for iOS, iPadOS, and macOS users
  33. The one and only password tip you need
  34. AI-powered content farms start clogging search results with ad-stuffed spam
  35. Google Authenticator WILL get end-to-end encryption. Eventually.
  36. Google takes CryptBot to the wood shed
  37. Is it OK to train an AI on your images, without permission?

April 2023

  1. Microsoft: You’re already using the last version of Windows 10
  2. A week in security (April 24 -30)
  3. Magecart threat actor rolls out convincing modal forms
  4. GuLoader returns with a rotten shipment
  5. Removing the human: When should AI be used in emotional crisis? Lock and Code S03E09
  6. Adult content malvertising scheme leads to clickjacking
  7. Fake Flipper Zero sellers are after your money
  8. A week in security (April 17 – 23)
  9. Update now, there’s a Chrome zero-day in the wild
  10. iOS Lockdown Mode effective against NSO zero-click exploit
  11. Would-be hitman busted after being fooled by parody website
  12. US Facebook users can now claim Cambridge Analytica settlement cash
  13. FTC tackles tech support scams by chasing payment processor firms
  14. Instagram scam promises money in exchange for your image
  15. Swatting-as-a-Service is a growing and complicated problem to solve
  16. Spring cleaning tips for your browser
  17. Avoid this “lost injured dog” Facebook hoax
  18. Woman tracks down and turns table on Airbnb scammer
  19. Update Chrome now! Google patches actively exploited flaw
  20. Fake Chrome updates spread malware
  21. Beware: Fake IRS tax email wants your Microsoft account
  22. A week in security (April 10 – 16)
  23. WhatsApp introduces new security features
  24. Massive malvertising campaign targets seniors via fake Weebly sites
  25. Is AI being used for virtual kidnapping scams?
  26. Google Pay accidentally handed out free money, bug now fixed
  27. Sextortion “assistance” scammers con victims further
  28. Don’t plug your phone into a free charging station, warns FBI
  29. Apple releases emergency updates for two known-to-be-exploited vulnerabilities
  30. A week in security (April 3 – 9)
  31. How the cops buy a “God view” of your location data, with Bennett Cyphers: Lock and Code S04E08
  32. Visitors of tax return e-file service may have downloaded malware
  33. IoT garage door exploit allows for remote opening attack
  34. Google aims to reduce data theft with app data and account deletions
  35. New tool allows you to opt out of Facebook’s targeted advertising
  36. Uber data theft: Driver info stolen after law firm breached
  37. Western Digital confirms breach, affects My Cloud and SanDisk users
  38. Update Android now! Google patches three important vulnerabilities
  39. TikTok misused children’s data, faces $15.6M fine
  40. TikTok: What’s going on and should I be worried?
  41. New macOS malware steals sensitive info, including a user’s entire Keychain database
  42. Big changes to Twitter verification: How to spot a verified account
  43. A week in security (March 27 – April 2)

March 2023

  1. Steer clear of this EE phish that wants your card details
  2. 3 tips to raise your backup game
  3. Update now! Apple fixes actively exploited vulnerability and introduces new features
  4. Smart home assistants at risk from “NUIT” ultrasound attack
  5. “BingBang” flaw enabled altering of Bing search results, account takeover
  6. [Updated April 3] 3CX desktop app used in a supply chain attack
  7. “Log-out king” Instagram scammer gets accounts taken down, then charges to reinstate them
  8. Fake DDoS services set up to trap cybercriminals
  9. ChatGPT helps both criminals and law enforcement, says Europol report
  10. Solving the password’s hardest problem with passkeys, featuring Anna Pobletts
  11. Bogus Chat GPT extension takes over Facebook accounts
  12. A week in security (March 20 – 26)
  13. ChatGPT leaks bits of users’ chat history
  14. USB bombs sent to news organizations
  15. Zero-day spells disaster for Bitcoin ATM
  16. Beware: Fake IRS tax email delivers Emotet malware
  17. BreachForums to be shut down after all for fear of law enforcement infiltration
  18. Google Pixel: Cropped or edited images can be recovered
  19. New Kritec Magecart skimmer found on Magento stores
  20. The NBA tells fans about data breach
  21. A look at a Magecart skimmer using the Hunter obfuscator
  22. Malware creator who compromised 10,000 computers arrested
  23. How to avoid potentially unwanted programs
  24. Google reveals 18 chip vulnerabilities threatening mobile, wearables, vehicles
  25. “ViLE” members posed as police officers and extorted victims
  26. A week in security (March 13 – 19)
  27. Hackers threaten to leak STALKER 2 assets if devs don’t heed demands
  28. Facebook illegally processed user data, says court
  29. Investment fraud overtakes business email compromise as most reported fraud
  30. “Just awful” experiment points suicidal teens at chatbot
  31. WhatsApp refuses to weaken encryption, would rather leave UK
  32. “Brad Pitt,” a still body, ketchup, and a knife, or the best trick ever played on a romance scammer, with Becky Holmes: Lock and Code S04E06
  33. Breast cancer photos published by ransomware gang
  34. A week in security (March 6 – 12)
  35. TikTok “a loaded gun” says NSA
  36. Update Android now! Two critical vulnerabilities patched
  37. DeepStreamer: Illegal movie streaming platforms hide lucrative ad fraud operation
  38. Play ransomware gang leaks City of Oakland data
  39. DoppelPaymer ransomware group disrupted
  40. National Cybersecurity Strategy Document: What you need to know
  41. A week in security (February 27 – March 5)
  42. 8 cybersecurity tips to keep you safe when travelling
  43. YouTube under fire for allegedly gathering children’s data
  44. Internet Explorer users still targeted by RIG exploit kit

February 2023

  1. LastPass was undone by an attack on a remote employee
  2. AI voice cracks telephone banking voice recognition
  3. US Marshals Service hit by ransomware and data breach
  4. iPhone users targeted in phone AND data theft campaign
  5. TikTok probed over child privacy practices
  6. Fighting online censorship, or, encryption’s latest surprise use-case, with Mallory Knodel: Lock and Code S04E05
  7. How to work from home securely, the NSA way
  8. A week in security (February 20 – 26)
  9. Fake Amazon Prime email abuses LinkedIn’s URL shortener
  10. Arrested: Fearmongering data thieves who victimized thousands of businesses
  11. Samsung adds Message Guard protection against zero-click exploits
  12. DNA testing company fined after customer data theft
  13. Twitter and two-factor authentication: What’s changing?
  14. How to set up two-factor authentication on Twitter using a hardware key
  15. How to set up two-factor authentication on Twitter using an app
  16. Multilingual skimmer fingerprints ‘secret shoppers’ via Cloudflare endpoint API
  17. GoDaddy says it’s a victim of multi-year cyberattack campaign
  18. A week in security (February 13 – 19)
  19. TikTok car theft challenge: Hyundai, Kia fix flaw
  20. Mortal Kombat ransomware forms tag team with crypto-stealing malware
  21. iPhone calendar spam: What it is, and how to remove it
  22. Two Supreme Court cases could change the Internet as we know it
  23. Fake Hogwarts Legacy cracks lead to adware, scams
  24. Four EU telco giants will start asking users if they want personalized targeted ads
  25. Arris router vulnerability could lead to complete takeover
  26. WordPress sites backdoored with ad fraud plugin
  27. TrickBot gang members sanctioned after pandemic ransomware attacks
  28. Update now! Apple patches vulnerabilities in MacOS and iOS
  29. One in nine online stores are leaking your data, says study
  30. Should you share passwords with your partner?
  31. Android 14 developer preview highlights multiple security improvements
  32. What is AI good at (and what the heck is it, actually), with Josh Saxe: Lock and Code S04E04
  33. French law to report cyberincidents within 3 days to become effective soon
  34. Consent to gather data is a “misguided” solution, study reveals
  35. A week in security (February 6 – 12)
  36. Reddit breached, here’s what you need to know
  37. Beware fake Facebook emails saying “your page has been disabled”
  38. $800,000 recovered from Business Email Compromise attack
  39. Ryuk ransomware laundering leads to guilty plea
  40. Stalkerware-type app developers fined by NY Attorney General
  41. Encrypted messaging service eavesdropped on by police, users arrested
  42. On the 20th Safer Internet Day, what was security like back in 2004?
  43. [update]Two year old vulnerability used in ransomware attack against VMware ESXi
  44. A week in security (January 30 – February 5)
  45. Cyberthreats facing UK finance sector “a national security threat”
  46. Business Email Compromise attack imitates vendors, targets supply chains
  47. Cybersecurity and privacy tips you can teach your 5+-year-old

January 2023

  1. Up to 10 million people potentially impacted by JD Sports breach
  2. Google sponsored ads malvertising targets password manager
  3. 40% of online shops tricking users with “dark patterns”
  4. Update your LearnPress plugins now!
  5. Riot Games refuses to pay ransom to avoid League of Legends leak
  6. New data wipers deployed against Ukraine
  7. Analyzing and remediating a malware infested T95 TV box from Amazon
  8. A private moment, caught by a Roomba, ended up on Facebook. Eileen Guo explains how: Lock and Code S04E03
  9. A week in security (January 23—29)
  10. What happened in privacy in 2022
  11. WhatsApp hijackers take over your account while you sleep
  12. “2.6 million DuoLingo account entries” up for sale
  13. Video game playing FISH live streams credit card ‘theft’
  14. Grand Theft Auto 5 exploit allows cheaters to tamper with your data
  15. Consumer privacy and social media
  16. What privacy can get you
  17. VASTFLUX ad fraud massively affected millions of iOS devices, dismantled
  18. Riot Games compromised, new releases and patches halted
  19. Own an older iPhone? Check you’re on the latest version to avoid this bug
  20. T-Mobile reports data theft of 37 million customers in the US
  21. TikTok CEO told to “step up efforts to comply” with digital laws
  22. Microsoft to end direct sale of Windows 10 licenses at the end of January
  23. 4 ways to protect your privacy while scrolling
  24. A week in security (January 16—22)
  25. Mailchimp breach feels like deja vu
  26. [updated]Ransomware money laundering operation disrupted, founder arrested
  27. Credit card fraud group member could get up to 30 years in jail
  28. Update now! Two critical flaws in Git’s code found, patched
  29. Google sponsored ads lead to rogue imitation sites
  30. LastPass users should move their crypto funds, experts warn
  31. CircleCI: Malware stole GitHub OAuth keys, bypassing 2FA
  32. Web skimmer found on website of Liquor Control Board of Ontario
  33. TikTok dances to the tune of $5.4m cookie fine
  34. “Untraceable” surveillance firm sued for scraping Facebook and Instagram data
  35. Law enforcement app SweepWizard leaks data on crime suspects
  36. Google to support the use of Rust in Chromium
  37. Fighting technology’s gender gap with TracketPacer: Lock and Code S04E02
  38. Accountant ordered to pay ex-employer after bossware shows “time theft”
  39. A week in security (January 9—15)
  40. US Department of the Interior’s passwords “easily cracked”
  41. WhatsApp lawsuit against NSO Group greenlit by Supreme Court
  42. Maternal & Family Health Services discloses ransomware attack months after discovery
  43. 2023 prediction: Security workforce shortage will lead to nationally significant cyberattack
  44. Identity thieves bypass security questions to access Experian credit reports
  45. Open redirect on government website sends users to adult content
  46. Polite WiFi loophole could allow attackers to drain device batteries
  47. US school district sues Facebook, Instagram, Snapchat, TikTok over harm to kids
  48. Pokemon NFT card game malware chooses you
  49. Security vulnerabilities in major car brands revealed
  50. Crypto-inspired Magecart skimmer surfaces via digital crime haven
  51. Louisiana wants your ID if you’re looking at adult-only websites
  52. A week in security (January 1 – 8)
  53. New Twitter data dump is a cleaned up version of old Twitter dump
  54. Google patches 60 vulnerabilities in first Android update of 2023
  55. FBI warns of imposter ads in search results
  56. Fake Flipper Zero websites look to cause a big splash
  57. Software provider denied insurance payout after ransomware attack
  58. Update VPN Plus Server now! Synology patches vulnerability with a CVSS of 10
  59. LastPass updates security notice with information about a recent incident
  60. New device? Here’s how to safely dispose of your old one
  61. Why does technology no longer excite us? Lock and Code S04E01

← 2020–2022 2025–2026 →