April 07, 2020

Thousands of Android apps contain undocumented backdoors, study finds

A study has found that thousands of legitimate Android apps are taking liberties or installing with capabilities that users wouldn’t expect to exist.

Naked Security

March 13, 2020

EARN IT Act threatens end-to-end encryption

The bill, which would undercut Section 230 protections for online publishing, presents itself as a way to stop online child abuse.

Naked Security

February 21, 2020

The Amazon Prime phishing attack that wasn’t…

When we followed the phishing trail, we found ourselves at a web page we weren't expecting...

Naked Security

January 15, 2020

Malicious npm package taken down after Microsoft warning

Criminals have been caught trying to sneak a malicious package on to the popular Node.js platform npm (Node Package Manager).

Naked Security

January 15, 2020

Apple says no to unlocking shooter’s phone; AG and Trump lash back

Attorney General Barr and President Trump are demanding Apple unlock the mass shooter's iPhone. Apple replies: You can't break just 1 phone.

Naked Security

August 02, 2019

4 million Club Penguin Rewritten accounts exposed in breach

The hugely popular gaming site Club Penguin Rewritten suffered a serious data breach.

Naked Security

July 09, 2019

Backdoor discovered in Ruby strong_password library

An eagle-eyed developer has discovered a backdoor recently sneaked into a library (or ‘gem’) used by Ruby on Rails (RoR) web apps to check password strength.

Naked Security

April 25, 2019

ExtraPulsar backdoor based on leaked NSA code – what you need to know

A US security researcher has come up with an open-source Windows backdoor loosely based on NSA attack code that leaked back in 2017.

Naked Security

April 08, 2019

Bootstrap supply chain attack is another attempt to poison the barrel

Somebody smuggled something bad into the vast third-party, open-source supply chain we all depend upon.

Naked Security