Help Net Security newsletters: Daily and weekly news, cybersecurity jobs, open source projects, breaking news – subscribe here!

Please turn on your JavaScript for this page to function normally.
PayPal
Phishers target panicking PayPal users with fake “failed transaction” emails

With the end-of-the-year holidays quickly approaching and many users worrying whether the gifts they bought online will be delivered in time for the festivities, an email from …

bitcoin
How secure are cryptocurrency mobile apps?

Are the mobile apps you’re using to store or handle your cryptocurrency stash, track the currencies’ price, or interact with cryptocurrency exchanges secure? …

SF
Stealthy in-browser cryptomining continues even after you close window

In-browser cryptocurrency mining is, in theory, a neat idea: make users’ computers “mine” Monero for website owners so they don’t have to bombard users …

professional
UK shipbroker Clarksons refuses to pay hackers ransom for stolen data

London-based shipbroking firm Clarksons has suffered a data breach and refuses to pay the attackers to prevent the stolen data from being publicly released. About the …

Cisco WebEx
Triggered via malicious files, flaws in Cisco WebEx players can lead to RCE

Cisco has plugged six security holes in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) files that could be exploited …

healthcare
OpenEMR flaw leaves millions of medical records exposed to attackers

A vulnerability in the free, open source electronic medical record and medical practice management software OpenEMR can be exploited to steal patients’ medical records …

macOS
Critical macOS High Sierra bug allows easy root access

If you’re using a Mac, and are running macOS High Sierra, drop everything that you’re doing and go and apply this update. Why? What’s happening? Turkish …

Android
Tizi backdoor rooted Android devices by exploiting old vulnerabilities

Google has discovered and removed from Google Play a number of apps that contained the Tizi backdoor, which installs spyware to steal sensitive data from popular social media …

patch
PowerDNS patches five security holes in widely used nameserver software

PowerDNS, the company behing the popular open source DNS software of the same name, has pushed out security updates and patches for its Authoritative Server and Recursor …

Mercedes
No key required: How thieves use relay boxes to steal cars

Getting in your car and starting it without having to pull the key out of your pocket is one of the small conveniences that come with many modern vehicles. Unfortunately, the …

Facebook
Have you been fooled by Russian propaganda? Facebook’s new tool will show you

If you’re one of those people who mentally check out of news the day before Thanksgiving, you might have missed Facebook’s announcement about a new tool aimed at …

Furby
Should you risk buying your child smart toys currently on offer?

As the end-of-the-year holiday season approaches, many security researchers, consumer groups and even governments warn against buying specific products or, at least, to make …

Don't miss

Cybersecurity news
Daily newsletter sent Monday-Friday
Weekly newsletter sent on Mondays
Editor's choice newsletter sent twice a month
Periodical newsletter released when there is breaking news
Weekly newsletter listing new cybersecurity job positions
Monthly newsletter focusing on open source cybersecurity tools