November 07, 2022

Public URL scanning tools – when security leads to insecurity

Never make your users cry/By how you use an API

Naked Security

February 23, 2022

Dridex bots deliver Entropy ransomware in recent attacks

Some code used in the ransomware bear a resemblance to code used in Dridex malware, hinting at a common origin

Threat Research

May 22, 2020

Apple and Google launch COVID-19 contact tracing API

The first phase of Apple and Google's contact tracing framework to help identify people at risk from coronavirus.

Naked Security

April 23, 2020

Password-free database of exercise app Kinomap leaks 42m user records

It's like a cloud of personal information breathed out in a plume by a database that didn't bother to wear a mask.

Naked Security

December 06, 2019

SophosLabs Intelix: Threat intelligence APIs for everyone

Our new, cloud-based threat intelligence and threat analysis platform has launched on AWS Marketplace.

Threat Research

November 20, 2019

Instagram stalker app Ghosty yanked from Play store

It was sucking up private profiles by requiring users to hand over their logins, giving it access to whatever accounts they follow.

Naked Security

November 13, 2019

Apple pulls Instagram-watching app from store

Apple has yanked an app from its iTunes App Store that allowed Instagram users to follow their friends’ activities on the social network.

Naked Security

July 04, 2019

Open Sesame! Zipato’s smart hub hacked to open front doors

The Zipato controller has three critical security flaws which could be used together by hackers to open your home’s doors for you, according to researchers.

Naked Security

January 22, 2019

Rogue websites can turn vulnerable browser extensions into back doors

A researcher has found that websites can use some extensions to bypass security policies, execute code, and even install other extensions.

Naked Security