For protecting the most sensitive information, computers are "air-gapped," set up such that they have no direct connection to the Internet. Thus it becomes far easier to control what information is put onto them and taken from them.

However, even this is not perfect security, as a notorious hacking group has produced not one, but two tools for ( Read more... )

Just when you thought it couldn't get worse, computer security experts have discovered 280 Android apps that can use optical character recognition to steal login credentials. However, these are all apps that are available outside the Google Play Store, the usual way for obtaining Android apps ( Read more... )

Typically ransomware attacks have been against high-profile corporate and government targets. But it turns out that being small is no real protection -- a California credit union has reported a devastating ransomware attack that has left its members frozen out of their accounts, and which may take months to resolve. Months in which members are ( Read more... )

How many times have we learned about data breaches months or even years after the fact? Often it seems like companies are more concerned about protecting their own image than the personal information of their customers. It's particularly frustrating if you've already had to deal with a credit card being hacked as a result, or your phone ringing off ( Read more... )

There's a reason a lot of people are uneasy about relying too much on "the cloud" for their data. Sure, it's convenient -- but how much should you trust other people with your most critical data? What protections do they have in place to make sure that a malicious act, or even a dumb mistake, doesn't destroy not only your data, but all their ( Read more... )

A defense contractor has just been sentenced for running a scam by which he sold counterfeit Cisco networking gear to the US military. This is particularly disturbing because it made its way to military bases and into combat units -- where it could have exposed sensitive communications to unknown security holes. And if any of that equipment is ( Read more... )

It seems that a lot of networking hardware built by Citrix is particularly vulnerable to hacking -- and it's been massively exploited ( Read more... )

GitHub has a major problem. Hackers have compromised the code signing certificate system that ensures that a piece of code has indeed been developed by the person named on it.

Code repositories can only be used if they're trusted -- and this attack has just undermined that trust.

Social media has enabled us to reconnect with old friends and make new ones around the globe. However, any good thing we create can be abused, and social media is no exception.

One of the most insidious is the "pig butchering scam," so called because the scammers go for the whole hog -- that is, everything the mark is worth ( Read more... )

Strictly speaking, it's a ban on putting the app on smartphones managed by the House of Representatives' IT support. But it does point up the serious security issues with the TikTok app, which could leave a user's personal data wide open ( Read more... )