April 27, 2020

Web shell warning issued by US and Australia

The US NSA and its Australian counterpart the ASD have published a set of guidelines to help companies avoid a common kind of attack: web shell exploits.

Naked Security

April 24, 2020

Shadow Broker leaked NSA files point to unknown APT group

A security researcher claims to have unearthed a previously-unknown APT group after reading the NSA files leaked by the Shadow Brokers in 2016.

Naked Security

January 16, 2020

NSA and Github ‘rickrolled’ using Windows CryptoAPI bug

We said, "Assume that someone will find out how to do it pretty soon," and that's exactly what happened.

Naked Security

November 18, 2019

NSA won’t collect phone location data, promises US government

US intelligence agencies won’t harvest US residents’ geolocation data in future investigations, revealed the US government this month.

Naked Security

October 02, 2019

O.MG! Evil Lightning cable about to hit mass distribution

This malicious O.MG Lightning cable has come a long way, with extensive work on the kinds of payload it can deliver.

Naked Security

September 19, 2019

US files suit against Snowden to keep book profits out of his hands

The government, alleging that Snowden violated NDAs with the CIA and NSA, isn't looking to stop the book's publication or distribution.

Naked Security

June 10, 2019

The GoldBrute botnet is trying to crack open 1.5 million RDP servers

Even its most optimistic users would have to concede that it’s been a bracing few weeks for anyone who relies on Microsoft’s Remote Desktop Protocol (RDP).

Naked Security

April 26, 2019

NSA asks to end mass phone surveillance

The NSA has asked the White House to end its mass phone surveillance program because the work involved outweighs its intelligence value.

Naked Security

April 25, 2019

ExtraPulsar backdoor based on leaked NSA code – what you need to know

A US security researcher has come up with an open-source Windows backdoor loosely based on NSA attack code that leaked back in 2017.

Naked Security