December 01, 2022

The CHRISTMA EXEC network worm – 35 years and counting!

"Uh-oh, this viruses-and-worms scene could turn out quite troublesome." If only we'd been wrong...

Naked Security

June 26, 2019

Social engineering forum hacked, user data dumped on rival site

Social Engineered, dedicated to the “Art of Human Hacking,” was gutted, with 55,121 users' details leaked on the same day as the hack.

Naked Security

June 19, 2019

Pass the salt! Popular CMSs aren’t securing passwords properly

A group of researchers has discovered that many of the web's most popular content management systems are using obsolete algorithms to protect their users' passwords.

Naked Security

March 13, 2019

Update now! WordPress abandoned cart plugin under attack

Hackers have been spotted targeting websites running unpatched versions of the WordPress plugin Abandoned Cart for WooCommerce.

Naked Security

October 24, 2018

WordPress takes aim at ancient versions of its software

If you’re running a very old version of WordPress on your website, the project’s staff would like a word with you.

Naked Security

October 23, 2018

Patch now! Multiple serious flaws found in Drupal

Drupal website owners have some important patching homework to do.

Naked Security

November 25, 2016

The WordPress megahack that wasn’t

The auto-update server had a flaw, now fixed, that would have let anyone add anything to websites, putting 27% of the entire web at risk.

Naked Security

August 11, 2016

Feds move to stop social media mockery of nursing home residents

Workers sharing degrading/intimate/nonconsensual photos and videos may mean facilities get fined, written up or cut from Medicare.

Naked Security

March 07, 2016

Pirates hacked shipping company to steal info for efficient hijackings

Here's a lesson in modern web security, taken from a story about modern maritime pirates.

Naked Security