Featured Post
Google and Apple Privacy Relaxations
Recent changes announced by Google and Apple will harvest data from users without their consent. The Google changes have been announced but are not …
Latest Posts
Google and Apple Privacy Relaxations
Recent changes announced by Google and Apple will harvest data from users without their consent. The Google changes have been announced but are not …
Scam Promotions on Facebook
Web adverts promoting questionable offers and schemes are old hat. Facebook is no exception but unlike wholly dubious hosts or otherwise reliable sites depending …
Sitting Duck Attacks
The Sitting Duck attack revolves around taking control of a domain and then using it to distribute malware or as a source for phishing …
Developers Hit By Compromised Software Packages
A Typosquat campaign uses slight variations on well-known names to mislead a user to access a rogue rather than genuine asset. It is well …
Data Privacy in Job Recruitment
The online job-market business model involves building up a bank of CVs and matching those with possible job vacancies. Unlike an old school recruitment …
ChatGPT Fake Citations
Anyone undertaking research will want to back up their conclusions with citations as to where their source material came from. It is assumed that …
UK Data (Use and Access) Bill
The Data (Use and Access) Bill had its first reading in the Lords on 23 October 2024. This step is merely a formal introduction …
Zero-Day Attacks
In October 2024 Google Mandiant reported on 138 exploited vulnerabilities since 2023. They concluded there had been an increase in the number and speed …
Smart TVs – Getting Smarter At Watching You
Kindus has described how connected devices harvest personal data and how that can be misused or breached either by the hosting body or others …
SSL Certificate Renewal
SSL/TLS authentication is part of the encryption suite to ensure that a requester is who they say they are and to grant or refuse …
Back In Time For Business Continuity
Business Continuity is that part of Disaster Recovery ensuring that at least some part of a business keeps running following a computer outage. Regardless …
The SPAM Bomb
The symptoms of a SPAM, email or subscription bomb attack are almost impossible to miss. The victim will suddenly receive a very large volume …
OFCOM vs Scam Callers
OFCOM is the UK regulator of phone and Internet services. They are responsible for ensuring these services are safe and effective. Part of their …
NHS Federated Data Platform Progress
Those with long memories will recall the time and money spent by the UK NHS in the early years of this century to build …
Google and Facebook Single Sign On (SSO)
Single Sign On (SSO) options are commonly seen through providers such as Google, Facebook and to a lesser extent Apple. There are also less …
Doxing
Doxing (or Doxxing) is the dropping of documents or information onto the Internet. It is generally taken to mean the disclosing of information that …
Ransomware in Healthcare
The ThreatLabz 2024 Ransomware Report highlights the relative susceptibility of the healthcare industry to ransomware attacks. 312 attacks on the Healthcare industry were reported …
Surveillance Pricing
In July 2024 the US Federal Trade Commission issued orders to 8 companies seeking information about their possible use of Surveillance Pricing. These orders …
Bad Bots
Kindus has discussed the role of bots on the Internet and how webmasters can use ‘robots.txt’ to control them. Unfortunately many bots do not …
Lessons from the Cloudstrike Outage
On July 19, 2024 at 04:09 UTC, CrowdStrike released an update for ‘Falcon Sensor 7.11’ or above to Windows systems. This caused a system …
Categories