Microsoft’s new plan to keep the US government’s hands off its customers’ data: Germany will be a safe harbor in the digital privacy storm. Microsoft on Wednesday announced that beginning in the second half of 2016, it will give foreign customers the option of keeping data in new European facilities that, at least in theory,...

A distributed denial-of-service attack (DDoS) is a cheap but effective way to take out your target’s website by flooding it with so much traffic that the web server becomes overwhelmed and the website crashes. There are those who use DDoS attacks as a kind of online protest, such as hacktivist groups like Anonymous. Then there...

US federal prosecutors, on Tuesday, unveiled criminal charges against three men accused of orchestrating the biggest theft of customer data from financial institutions in the country’s history – encompassing personal data belonging to more than 100 million people. Unsealing a 23-count indictment in Manhattan, the Justice Department charged Gery Shalon, Joshua Samuel Aaron and Ziv Orenstein with computer hacking...

Facebook’s testing a new feature for Messenger. Photo Magic – which sounds like something a costumed character at the Magic Kingdom would bestow with a twinkly wand – uses facial recognition to paw through your phone’s camera roll, ID your friends, and then nudge you to send photos to the people it spots. David Marcus, head...

Max Schrems must be pleased. He who rose up from the ranks of Facebook’s privacy-ravaged users to file complaints against what he said was Facebook’s illegal data collection/retention, and is now witnessing the fruits of his labor. Or, as he tweeted in response to the Belgian court giving Facebook 48 hours to stop tracking those without...

Comcast says it wasn’t hacked, but hundreds of thousands of its customers may have been, forcing the cable giant to reset passwords to email accounts of about 200,000 customers. The forced password reset came after an independent security researcher spotted an ad on a Dark Web marketplace offering 590,000 Comcast subscriber email addresses and plaintext passwords for $1000...

A 15-year-old schoolboy arrested and questioned over the TalkTalk cyberattack is suing three UK newspapers over alleged breach of privacy. Lawyers for the teenager, who’s from Northern Ireland, told the court that the boy was recognizable in the newspapers’ coverage, even though the publications altered his image. According to the Irish Independent, his lawyers said...

A fugitive is back in custody having spent a year posting selfies onto Facebook showing his tanned mug and his beachside hideaway. Nick Grove’s 2014 escape from jail, by scaling a barbed-wire fence, would have been worthy of being the next Jason Bourne movie if only he’d been followed around by a Hollywood production staff...

We come across a lot of spams, scams and phishing attempts here at Naked Security. Some come to our “send us a comment” email address, because it’s widely publicised. Some come to our personal addresses, especially those of us who have had the same email for many years. And many – the most interesting! – are reported...

It’s about six weeks since we first wrote about XcodeGhost. That’s the Apple Mac malware that was specially created by crooks in China to create iOS malware. You read that correctly. Just as the infamous Stuxnet virus tried to infect PCs with the ultimate goal (allegedly) of indirectly infecting uranium centrifuge controllers, so XcodeGhost aims...