January 25, 2023

GoTo admits: Customer cloud backups stolen together with decryption key

We were going to write, "Once more unto the breach, dear friends, once more"... but it seems to go without saying these days.

Naked Security

November 27, 2017

Imgur breached back in 2014, wasn’t storing your passwords properly

Photo-sharing site Imgur just found out it was breached back in 2014 - and back then it wasn't storing your passwords securely.

Naked Security

September 14, 2016

Pay-to-click ad service hacked, 6.6M plaintext passwords dumped

It was 20 years ago today, no, make that 40, that Sergeant Pepper taught us not to store plaintext passwords...

Naked Security

August 30, 2016

Opera announces data breach: stored passwords stolen for 1.7M users

1.7M users of "Opera sync" were hit when crooks made off with encrypted passwords stored on the Sync servers.

Naked Security

October 05, 2015

South Korea: Medical data delivers yet another identity crisis

Remember how we TOLD you not to knit your own cryptography? Well, we're telling you again!

Naked Security

September 19, 2015

“Stagefright – are we in the clear now?” [Chet Chat Podcast 214]

Listen to Sophos experts Chester Wisniewski and Paul Ducklin in the latest episode of our weekly security podcast...

Naked Security

September 15, 2015

Who gives the best advice about password security?

Britain's GCHQ has just produced a great document about password security. We like it, and we think you should read it...

Naked Security

September 14, 2015

We hashed them once, we hashed them twice! 60 Second Security

Out weekly wrap-up video. Watch (and smile!) in just 1 minute...

Naked Security

September 10, 2015

11 million Ashley Madison passwords cracked in 10 days

Remember how Ashley Madison did one thing right: hashed the passwords properly? Turns out they missed a few...million.

Naked Security