Researchers from the New Jersey Institute of Technology have written a paper, which they will present at the Usenix Security Symposium in Boston, demonstrating how threat actors (or governments or law enforcement) could de-anonymise a users from their browsing habits. The attackers would analyse browsing activity and state to determine …
Not the comic software I use…
Comic book reading platform Mangatoon has leaked the personal data of over 23 million accounts: Mangatoon data breach exposes data from 23 million accounts (bleepingcomputer.com) Thankfully I do not use this service to read comics – but I do use “keyless” with my car!
Information leaks because of messaging apps – does it impact you?
This is a very interesting report from the ICO about the use of messaging apps, in particular WhatsApp, during the pandemic and the issue of information being lost or unaccountable because “backed-up”, “approved” channels were not used. Behind the Screens (ico.org.uk) We have an issue at the moment similar to …
Continue reading “Information leaks because of messaging apps – does it impact you?”
The story of Pegasus spyware continues UPDATED 12 July 2022
This post was first published on 15 June 2022 Update 12 July 2022 President Bidens’ administration’s decision to blacklist the NSO Group is proving to be a problem for L3Harris, a US defence contractor that wants to buy the Pegasus spyware part of the business: L3Harris in move to buy …
Continue reading “The story of Pegasus spyware continues UPDATED 12 July 2022”
Are you trying to improve your organisation’s cyber security? Lessons from the largest data theft ever. UPDATED 11 July 2022.
This post was first published on 5 July 2022. The Chinese President, Xi Jinping, is calling for improved cyber security, in the country following the unprecedented alleged data theft by ChinaDan: Security warning after sale of stolen Chinese data – BBC News Details of the theft are starting to be …
The Online Safety Bill is still going through parliament and we are back to the question of end-to-end encryption
I quite like the the government’s Online Safety Bill is that it will compel the Big Tech companies to action about child sex abuse material (CSAM), and delivery huge fines if they fail to do so. However a requirement to monitor communications apps with end-to-end encryption (E2EE), for CSAM causes …
Apple announces specialised security for high risk users
In the autumn Apple will be adding “Lockdown mode” functionality to the range of it’s operating systems – iOS 16, iPadOS 16, and macOS Ventura. For a drastic reduction in functionality, users, who are at risk from sophisticated cyber attacks, such as those posed by Pegasus and Hermit spyware, will …
Continue reading “Apple announces specialised security for high risk users”
