Uber has finally come up with a figure for the number of UK-based riders and drivers affected by its massive data breach: 2.7 million.The taxi hire firm has been slammed by regulators around the world for keeping the hack, which happened in October 2016, quiet for the best part of a year. Read more

Alleged computer hacker Lauri Love’s appeal against extradition from the UK to the US begins this morning at the Royal Courts of Justice in London. United States prosecutors have accused 33-year-old Love of having “carried out a series of cyber attacks against the websites and computer systems” of a list of American government agencies and

A leaked document shines new light on a surveillance program developed by the National Security Agency.The program, known as Ragtime, collects the contents of communicati toons, such as emails and text messages, of foreign nationals under the authority of several US surveillance laws. Read more

The search firm says it first detected the Tizi backdoor in September 2017 when Google Play Protect discovered an application with rooting capabilities on an Android device downloading an app from the Play store. Google Play Protect is the company’s own security solution for apps published in the store, and it automatically scans every download

US prosecutors have indicted three Chinese nationals accused of hacking into US companies to steal trade secrets and conduct corporate espionage.On Monday, the US Department of Justice (DoJ) said that Wu Yingzhuo, Dong Hao, and Xia Lei worked for Internet security firm Guangzhou Bo Yu Information Technology (Boyusec) in order to infiltrate US companies and

Exim is a mail transfer agent (MTA) used on Unix-like operating systems. Exim is free software distributed under the terms of the GNU General Public License, and it aims to be a general and flexible mailer with extensive facilities for checking incoming e-mail. Read more

A new method named “Golden SAML” has been discovered by security researchers from CyberArk Labs allows cybercriminals forge authentication requests and access the cloud-based applications of organizations that use SAML-compatible domain controllers (DCs) for the authentication of users against cloud services. Read more

Attempting to scare people by telling them their password choices are stupid or easily guessable is counterproductive: because it serves only to reassure them that they are just like everyone else. By saying users are stupid, you perpetuate a stereotype that people are the problem, according to Dr Jessica Barker. Read more

Security researchers from Malwarebytes Labs found that cyber criminals using fake Symantec blog website to spread Proton malware against macOS users. On the fake website, the attackers published an “analysis” discussing the existence of a phony malware threat called CoinThief. Read more