Information

20 Apr

The devil is in the fine print – Week in security with Tony Anscombe

Information

Video Temu’s cash giveaway where people were asked to hand over vast amounts of their personal data to the platform puts the spotlight on the data-slurping practices of online services today 05 Apr 2024 Temu, the popular China-based online marketplace, recently launched a promotion where people received cash in exchange for new sign-ups that involved handing over vast amounts of their personal data, including their ‘voice’ and ‘biographical information’. Many people bagged Temu’s offer and…

Read More
20 Apr

Beyond fun and games: Exploring privacy risks in children’s apps

Information

Kids Online Should children’s apps come with ‘warning labels’? Here’s how to make sure your children’s digital playgrounds are safe places to play and learn. Phil Muncaster 11 Apr 2024  •  , 6 min. read Our children spend more time on their phones than ever. Some 80% of European 9-16-year-olds access the internet from their phones every day. In the UK, 91% of children have a mobile phone by the age of 11. And in…

Read More
20 Apr

Bitcoin scams, hacks and heists – and how to avoid them

Information

Scams Here’s how cybercriminals target cryptocurrencies and how you can keep your bitcoin or other crypto safe Phil Muncaster 15 Apr 2024  •  , 6 min. read Bitcoin is on a tear. The world’s largest digital currency by market cap passed its previous record value of nearly $69,000 in early March. It’s now worth an estimated $1.3 trillion. Yet the fluctuating value of cryptocurrency doesn’t necessarily correspond to the level of cybercrime activity we can…

Read More
19 Apr

eXotic Visit includes XploitSPY malware – Week in security with Tony Anscombe

Information

Video Almost 400 people in India and Pakistan have fallen victim to an ongoing Android espionage campaign called eXotic Visit 12 Apr 2024 Could your messaging app of choice have been authored by a threat actor known as Virtual Invaders? As described by ESET researchers this week, this is what happened to the victims of an ongoing and targeted Android espionage campaign called eXotic Visit that began in late 2021 and pose as messaging services.…

Read More
19 Apr

The ABCs of how online ads can impact children’s well-being

Information

Kids Online From promoting questionable content to posing security risks, inappropriate ads present multiple dangers for children. Here’s how to help them stay safe. Imogen Byers 16 Apr 2024  •  , 5 min. read In today’s digital world, ads are practically unavoidable. From pop-up ads on your daily Wordle to sneaky affiliate posts on your favorite social media accounts, we are constantly bombarded with targeted marketing messages promoting products and services – and children are…

Read More
19 Apr

The many faces of impersonation fraud: Spot an imposter before it’s too late

Information

Scams What are some of the most common giveaway signs that the person behind the screen or on the other end of the line isn’t who they claim to be? Phil Muncaster 18 Apr 2024  •  , 5 min. read Our world is becoming more impersonal as it becomes more digital-centric. And because we can’t see the person or organization at the other end of an email, social media message or text, it’s easier for…

Read More
16 Apr

Who Stole 3.6M Tax Records from South Carolina?

Data Breaches, Information, Insights

For nearly a dozen years, residents of South Carolina have been kept in the dark by state and federal investigators over who was responsible for hacking into the state’s revenue department in 2012 and stealing tax and bank account information for 3.6 million people. The answer may no longer be a mystery: KrebsOnSecurity found compelling clues suggesting the intrusion was carried out by the same Russian hacking crew that stole of millions of payment card…

Read More
15 Apr

Crickets from Chirp Systems in Smart Lock Key Leak

Information, Insights

The U.S. government is warning that “smart locks” securing entry to an estimated 50,000 dwellings nationwide contain hard-coded credentials that can be used to remotely open any of the locks. The lock’s maker Chirp Systems remains unresponsive, even though it was first notified about the critical weakness in March 2021. Meanwhile, Chirp’s parent company, RealPage, Inc., is being sued by multiple U.S. states for allegedly colluding with landlords to illegally raise rents. On March 7,…

Read More
11 Apr

Why CISA is Warning CISOs About a Breach at Sisense

Data Breaches, Information, Insights

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) said today it is investigating a breach at business intelligence company Sisense, whose products are designed to allow companies to view the status of multiple third-party online services in a single dashboard. CISA urged all Sisense customers to reset any credentials and secrets that may have been shared with the company, which is the same advice Sisense gave to its customers Wednesday evening. New York City based…

Read More
10 Apr

Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers

Information, Insights

On April 9, Twitter/X began automatically modifying links that mention “twitter.com” to read “x.com” instead. But over the past 48 hours, dozens of new domain names have been registered that demonstrate how this change could be used to craft convincing phishing links — such as fedetwitter[.]com, which until very recently rendered as fedex.com in tweets. The message displayed when one visits carfatwitter.com, which Twitter/X displayed as carfax.com in tweets and messages. A search at DomainTools.com…

Read More