July 12, 2023

Microsoft patches four zero-days, finally takes action against crimeware kernel drivers

Here's a brief reminder to do two things. The first is to patch. The second is to read up why it's a good idea to patch...

Naked Security

May 12, 2022

Serious Security: Learning from curl’s latest bug update

Learn how to write plain-speaking and purposeful security advisories from one of the most widely-used open source tools in the world.

Naked Security

July 26, 2021

Windows “PetitPotam” network attack – how to protect against it

A cute name but an annoying and potentially damaging attack. Here's what to do.

Naked Security

June 01, 2020

No password required! “Sign in with Apple” account takeover flaw patched

A bug bounty hunter found a way to login using "Sign in with Apple"... but without the part where you have to put in a password.

Naked Security

April 23, 2019

Phone fingerprint scanner fooled by chewing gum packet

A video has surfaced claiming to show someone unlocking a Nokia 9 by tapping a gum packet against the fingerprint scanner.

Naked Security

August 14, 2018

Apple Mac “zero day” hack lets you sneakily click [OK]

A security researcher revisited an old bug of his that Apple had patched, made a blunder - and found the old bug was still there after all.

Naked Security

February 28, 2018

Single Sign-On authentication – the bug that lets you logon as someone else

Logon security company Duo recently found a flaw in its own authentication gateway - a bug that affected numerous other vendors, too.

Naked Security

June 22, 2015

Google Chrome “bad link” detection bypass – found, fixed

Here's a small and simple XSS detection hole in Google Chrome - a reminder that even determined programmers sometimes overlook the obvious.

Naked Security

April 08, 2015

SSCC 193 – Pick a YouTube security token, any token! [PODCAST]

Join Sophos experts Chester Wisniewski and Paul Ducklin as they dissect the latest computer security stories in their inimitable style. Turn news into advice with the Sophos Security Chet Chat!

Naked Security