July 18, 2023

Microsoft hit by Storm season – a tale of two semi-zero days

The first compromise didn't get the crooks as far as they wanted, so they found a second one that did...

Naked Security

May 20, 2022

Microsoft patches the Patch Tuesday patch that broke authentication

Remember the good old days when security patches rarely needed patches? Because security patches themlelves were rare enough anyway?

Naked Security

March 30, 2020

Google sent ~40K warnings to targets of state-backed attackers in 2019

Google has seen a rising number of attackers impersonating news outlets and journalists to spread fake news among other reporters.

Naked Security

July 08, 2019

Privacy and security risks as Sign In with Apple tweaks Open ID protocol

An open letter from the OpenID Foundation says that Apple introduced potential risks when it diverged from the OpenID Connect protocol.

Naked Security

April 26, 2019

Microsoft drops password expiration from Windows 10 security

Microsoft has recognised that users don't actually change their passwords when prompted, they just tweak them. And that doesn't help anyone.

Naked Security

April 04, 2019

Facebook won’t ask for your email password any more

What's that you say - Facebook was asking for the password to your email account? Yes, sometimes it was.

Naked Security

March 18, 2019

G Suite admins can now disallow SMS and voice authentication

Users of G Suite may find that the option to authenticate themselves via SMS or voice call has suddenly disappeared.

Naked Security

March 12, 2019

Citrix admits attackers breached its network – what we know

Naked Security

January 07, 2019

No Android passcode? No problem! Skype unlocked it for you

Microsoft closed the hole, which let any unauthenticated phone-grabber answer a Skype call and then roam around on your mobile.

Naked Security