Yahoo Mail Hack Password Reset

This is why Yahoo did not reset your password after the massive data breach

September 29th at 6:50 AM

This is why Yahoo did not reset your password after the massive data breach

Yahoo last week confirmed what many already feared, that unknown hackers have been able to steal account data belonging to hundreds of millions of users. The massive data breach occurred at some point in 2014, affecting some 500 million users. Yahoo is yet to explain why the data breach happened, and whether it could have done anything to ensure the security of its users.

A new report reveals that Yahoo has been putting off security investments for years, for fear that security features would also hinder overall Yahoo experience. More →

No Comments
iPhone Privacy

Apple logs every iPhone user’s text message contacts, new leak claims

September 28th at 6:35 PM

Apple logs every iPhone user’s text message contacts, new leak claims

Apple likes to make boasts about how secure its Messages app is, but new revelations from The Intercept detail how Apple keeps a log of every iPhone user’s texting contacts that they will readily share with law enforcement authorities when served with a court order.

Now this isn’t a Snowden level leak by any means, nor does it imply or suggest that Apple has access to the content of any privately sent messages, but in today’s age where user privacy is a hot-button issue, it can never hurt to be cognizant of what information might be shared with the police.

More →

No Comments
NSA Hacking Tools

NSA hacking tools were likely stolen after an operative accidentally left them on a computer

September 23rd at 5:30 PM

NSA hacking tools were likely stolen after an operative accidentally left them on a computer

Though the NSA would prefer to fly underneath the radar, the controversial intelligence agency just can’t seem to escape the spotlight in recent months. A few weeks ago, a group of hackers allegedly stole an impressively large number of NSA hacking tools and exploits and put them up for sale. Upon close inspection, a number of security experts went on record and confirmed that the leaked exploits were, in fact, from the NSA’s vast toolkit.

When word of the leak broke, some in the intelligence community initially feared that they were facing another Edward Snowden situation. As it turns out, it now appears that the leaked exploits were probably the result of human error. Embarrassingly, an investigation into the matter has revealed that a NSA operative may have inadvertently left the hacking tools in question on a remote computer, effectively leaving it behind as a gift to whomever discovered it.

More →

No Comments
Yahoo Hack

Massive data breach hit 500 million users, Yahoo confirms

September 22nd at 2:40 PM

Massive data breach hit 500 million users, Yahoo confirms

Yahoo has confirmed that a data breach from 2014 hit 500 million users, allowing hackers access to sensitive information, including poorly encrypted passwords.

A press release from Yahoo confirms the news, and follows reports earlier today that Yahoo was set to confirm the breach. If true, stealing the user credentials from 500 million users would be one of the largest hacks ever to hit a US company.

More →

No Comments
Laptop Camera Cover Comey

FBI director assumes someone is spying on our webcams all the time21

September 15th at 9:00 PM

FBI director assumes someone is spying on our webcams all the time21

FBI Director James Comey, a strong opponent of Apple’s way of encrypting software and hardware, just told us again that covering up that computer webcam with a lid is recommended. That means he strongly believes people can spy on you on devices that aren’t secure.

Imagine a world in which the iPhone would run an unencrypted version of iOS. We’d probably have to put fancy camera covers both on the front and the back of the device. Either that or accessory makers would simply sell premium cases that don’t have camera cutouts.
More →

No Comments
Reddit Scam

And this is why you don’t scam a security professional on Reddit

September 11th at 9:00 AM

And this is why you don’t scam a security professional on Reddit

Trying to scam someone on the internet is always a bad idea, but if that someone turns out to be the head of a security research company, you’re in for a whole world of hurt.

Christian Haschek is an Austrian security researcher who was trying to sell $500 in US Apple gift cards on Reddit, since they’re a pain to use from overseas. He thought he had struck a deal with a buyer, but that buyer turned out to be less than honest.

More →

No Comments
Hacking software demo video

Terrifying video shows government spyware in action for the first time

September 6th at 9:00 PM

Terrifying video shows government spyware in action for the first time

With the Snowden leaks, Stingray and FBI surveillance planes always in the news, most people just assume that The Man has god-like surveillance capabilities on tap. But the nuts and bolts of how government-sanctioned hacking actually works has always been a little mysterious.

A new video obtained by Motherboard shows an Italian software company showing off a hacking tool, intended for use by police forces and government agencies. The video shows how little technical knowledge cops really need to get a scary level of detail out of a target’s computer.

More →

No Comments
PayPal Support Scam

Brutally efficient phishing scam takes advantage of PayPal’s awfulness

September 5th at 5:20 PM

Brutally efficient phishing scam takes advantage of PayPal’s awfulness

Phishing scams that use fake login pages to steal account usernames and passwords are nothing new. The trick for hackers is to fool customers into thinking that they’re following a legit link from a real company, and a new phishing scam is particularly good at that.

A raft of fake PayPal support accounts have popped up on Twitter. The accounts monitor for individuals who tweet support requests to @PayPal, and then reply to those messages with a link to a real-looking login page. Unless you look real close, anyone could fall for it.

More →

No Comments
Google Play Store Android Malware

Brand new malware discovered in Android apps on the Google Play store

September 2nd at 7:00 PM

Brand new malware discovered in Android apps on the Google Play store

Some people dismiss the threat that malware poses in the Android world, but the problem is still real. Individuals with malicious intent will always target the most popular operating systems, and Android is one of them. A new report details a troubling new malware strain that has been found in the wild, and this time around it wasn’t discovered just in shady third-party app stores. It was also found in apps approved in the Google Play store in spite of Google’s various protections.

More →

No Comments
Clinton Email Hacker

Hacker who revealed Hillary’s email server sentenced to 4 years in prison

September 1st at 1:17 PM

Hacker who revealed Hillary’s email server sentenced to 4 years in prison

Marcel Lehel Lazar, the infamous hacker known as Guccifer, has been sentenced to 52 months in federal prison. Lazar pled guilty to a series of charges related to hacking a number of well-known celebrities between October 2012 and January 2014. Victims included former president George W Bush and former secretary of state Colin Powell.

More →

No Comments