May 21, 2019

Amnesty sues maker of Pegasus, the spyware let in by WhatsApp zero day

Amnesty International, which was sent the Pegasus spyware via a WhatsApp message, is seeking to stop NSO Group’s "web of surveillance."

Naked Security

May 13, 2019

Two people indicted for massive Anthem health data breach

They're part of a gang that spearphished millions of records out of the health insurer and other businesses, the DOJ says.

Naked Security

April 01, 2019

Microsoft slaps down 99 APT35/Charming Kitten domains

Court order in hand, Microsoft seized control of the hacker group's (which it calls Phosphorous) phishing sites.

Naked Security

September 13, 2018

Veeam leaves MongoDB database wide open, exposes 445m records

The data-management firm's customer database held names, email addresses, some IP addresses and more: a wealth of ammo for phishers.

Naked Security

August 24, 2018

DNC ‘spearphishing attack’ was actually a test

A fake login page turned out to be a test phishing attack from the Michigan Democratic Party, which hadn't told the DNC or the ISP about it.

Naked Security

August 03, 2018

Amnesty International spearphished with government spyware

Pegasus spyware is supposed to be used solely by governments, to enable them to invisibly track criminals and terrorists

Naked Security

July 27, 2018

Spearphishers tool up for attack targeting builders

A sophisticated spearphishing attack targets construction contractors in Boulder County, Colorado in the latest iteration of a months-long campaign.

SophosLabs UncutThreat Research

April 23, 2018

Yahoo mega-breach hacker faces nearly 8 years in prison

The hacker exposed half a billion Yahoo accounts on behalf of Russia's FSB

Naked Security

March 02, 2018

Don’t fall for fake iTunes and App Store messages

Apple posted a new guide with tips on distinguishing official emails from phishing attempts that are getting more convincing all the time.

Naked Security