September 20, 2019

Server-squashing zero-day published for phpMyAdmin tool

A researcher has just published a zero-day security bug in one of the web's most popular database administration software packages.

Naked Security

May 10, 2019

Chrome browser pushes SameSite cookie security overhaul

Slowly but steadily, developers are being given the tools with which to tame the promiscuous and often insecure world of the browser cookie.

Naked Security

March 18, 2019

WordPress 5.1.1 patches dangerous XSS vulnerability

Researchers have offered more detail on a recently patched vulnerability that would allow an attacker to take over a WordPress site.

Naked Security

February 19, 2019

Facebook flaw could have allowed an attacker to hijack accounts

The CSRF bypass flaw has now been fixed, and the researcher who discovered it has netted $25,000.

Naked Security

December 12, 2018

Samsung fixes flaws that could have let attackers hijack your account

Flaws in the mobile site were leaving users vulnerable to attackers who could have reset their user passwords and hijacked their accounts.

Naked Security

May 22, 2018

DrayTek router user? Patch now to keep the crooks out…

DrayTek has announced a security hole in its Vigor range of routers.

Naked Security

January 20, 2016

Supermarket patches its web security…how safe are *your* web forms?

ASDA's website had some security holes, now fixed - but how about your website?

Naked Security