Security News > 2018 > April

Hacks Fifth Avenue: Crooks slurp bank cards from luxury chain Saks
2018-04-01 00:00

Bougie buyers bitten by baddies' bank-blasting bug Updated Luxury store chain Saks Fifth Avenue has confirmed it was the victim of a massive cyber-attack that could compromise millions of shoppers.…

Block blocked: Google to banish cryptominers from Chrome Web Store
2018-04-01 00:00

9 in 10 plugin submissions broke rules, ads giant groans Google will throw cryptocurrency-mining extensions out of its Chrome Web Store after finding so many were badly behaved.…

One solution to wreck privacy-hating websites: Flood them with bogus info using browser tools
2018-04-01 00:00

Call for software to throw badly behaved biz in fake data tar pits Ad and JavaScript blocking is not enough to thwart privacy invasions by the likes of Facebook: more active countermeasures are needed.…

Badmins: Magento shops brute-forced to scrape card deets and install cryptominers
2018-04-01 00:00

Change your passw... ugh, what's the point? Hackers have compromised hundreds of e-commerce sites running the popular open-source Magento platform to scrape credit card numbers and install...

Mad March Meltdown! Microsoft's patch for a patch for a patch may need another patch
2018-04-01 00:00

If at first, er, second, ah, third, no, fourth, you fail, sadly, you're probably Redmond Updated Days after Microsoft released its third attempt at a fix for the Meltdown security vulnerability in...

Do(ug)h! Half-baked security at Panera Bread spills customer data
2018-04-01 00:00

After eight months of loafing, baguette biz finally rises to security obligations The website for restaurant chain Panera Bread has made the personal information for customers' online accounts...

Furious gunwoman opens fire at YouTube HQ, three people shot
2018-04-01 00:00

Shooter, enraged by vid biz, kills self as hundreds of staff flee campus Final update A woman armed with a handgun shot three people at the headquarters of YouTube today, police say. She was later...

Hold the phone: Mystery fake cell towers spotted slurping comms around Washington DC
2018-04-01 00:00

US Homeland Security says it detected 'anomalous' spy kit The US Department of Homeland Security (DHS) says it has detected strange fake cellphone towers – known as IMSI catchers – in America's capital.…

Intel admits a load of its CPUs have Spectre v2 flaw that can't be fixed
2018-04-01 00:00

And won’t fix Meltdown nor Spectre for 10 product families covering 230-plus CPUs Intel has issued fresh "microcode revision guidance" that reveals it won’t address the Meltdown and Spectre design...

They forked this one up: Microsoft modifies open-source code, blows hole in Windows Defender
2018-04-01 00:00

Rar! That's a scary bug A remote-code execution vulnerability in Windows Defender – a flaw that can be exploited by malicious .rar files to run malware on PCs – has been traced back to an...