S3 Ep127: When you chop someone out of a photo, but there they are anyway…
Credit to Author: Paul Ducklin| Date: Thu, 23 Mar 2023 17:59:21 +0000
Listen now – latest episode. Full transcript inside.
Read moredata loss
Windows 11 also vulnerable to “aCropalypse” image data leakage
Credit to Author: Paul Ducklin| Date: Wed, 22 Mar 2023 17:59:10 +0000
Turns out that the Windows 11 Snipping Tool has the same “aCropalypse” data leakage bug as Pixel phones. Here’s how to work around the problem…
Read moreGoogle Pixel phones had a serious data leakage bug – here’s what to do!
Credit to Author: Paul Ducklin| Date: Tue, 21 Mar 2023 17:58:55 +0000
What if the “safe” images you shared after carefully cropping them… had some or all of the “unsafe” pixels left behind anyway?
Read moreBitcoin ATM customers hacked by video upload that was actually an app
Credit to Author: Paul Ducklin| Date: Mon, 20 Mar 2023 17:50:17 +0000
As the misquote goes, “Once is misfortune…” This is the second time, and you know what Lady Bracknell had to say about that…
Read moreS3 Ep 126: The price of fast fashion (and feature creep) [Audio + Text]
Credit to Author: Paul Ducklin| Date: Thu, 16 Mar 2023 17:56:56 +0000
Worried about rogue apps? Unsure about the new Outlook zero-day? Clear advice in plain English… just like old times, with Duck and Chet!
Read moreSHEIN shopping app goes rogue, grabs price and URL data from your clipboard
Credit to Author: Paul Ducklin| Date: Fri, 10 Mar 2023 17:58:29 +0000
It’s not exactly data theft, but it’s worrying close to “unintentional treachery” – apparently because it’s great for marketing purposes
Read moreFeds warn about right Royal ransomware rampage that runs the gamut of TTPs
Credit to Author: Paul Ducklin| Date: Fri, 03 Mar 2023 17:56:34 +0000
Wondering which cybercrime tools, techniques and procedures to focus on? How about any and all of them?
Read moreS3 Ep124: When so-called security apps go rogue [Audio + Text]
Credit to Author: Paul Ducklin| Date: Thu, 02 Mar 2023 15:40:41 +0000
Rogue software packages. Rogue “sysadmins”. Rogue keyloggers. Rogue authenticators. Rogue ROGUES!
Read moreLastPass: Keylogger on home PC led to cracked corporate password vault
Credit to Author: Paul Ducklin| Date: Tue, 28 Feb 2023 02:23:16 +0000
Seems the crooks implanted a keylogger via a vulnerable media app (LastPass politely didn’t say which one!) on a developer’s home computer.
Read moreLastPass: The crooks used a keylogger to crack a corporate password vault
Credit to Author: Paul Ducklin| Date: Tue, 28 Feb 2023 02:23:16 +0000
Seems the crooks implanted a keylogger via a vulnerable media app (LastPass politely didn’t say which one!) on a developer’s home computer.
Read more