June 15, 2023

MOVEit mayhem 3: “Disable HTTP and HTTPS traffic immediately”

Twice more unto the breach... third patch tested and released, shut down web access until you've applied it

Naked Security

May 24, 2019

Directed attacks against MySQL servers deliver ransomware

Someone is attacking internet-facing Windows database servers with GandCrab ransomware

SophosLabs Uncut

April 05, 2019

Patch now! Magento e-commerce sites targeted by SQLi attacks

If you're a Magento admin, stop what you’re doing and patch now.

Naked Security

May 22, 2018

Server? What server? Site forgotten for 12 years attracts hacks, fines

The University of Greenwich might not have noticed the website but hackers did.

Naked Security

February 19, 2018

Hackers sentenced for SQL injections that cost $300 million

It wasn't *only* SQL injection, but it shows how far you can go if a company exposes its soft and fleshy parts to the internet.

Naked Security

January 15, 2018

More SCADA app vulnerabilities found

A big motivation for pulling software apart to find security flaws is the idealistic hope that developers will get the message and do a better job next time. But what happens if they don’t?

Naked Security

September 26, 2017

WordPress 4.8.2 is out, update your website now

The first rule of running WordPress is always use the latest version

Naked Security

July 14, 2017

SQL injection attacks controlled using Telegram messaging app

This weaponising of an encrypted messaging app prompts us to remind you that you should really be focusing on how to avoid SQLi attacks in the first place

Naked Security

January 06, 2017

Best company name ever! Share capital £1, name priceless…

Little Bobby Tables should apply for a job at this company.

Naked Security