Plus: The FTC cracks down on GoodRx, Microsoft boots “verified” phishing scammers, researchers disclose EV charger vulnerabilities, and more.
vulnerabilities
T-Mobile’s 2023 Data Breach Shows Its $150 Million Security Investment Isn’t Cutting It
The mobile operator just suffered at least its fifth data breach since 2018, despite promising to spend a fortune shoring up its systems.
A Siemens S7-1500 Logic Controller Flaw Raises the Specter of Stuxnet
More than 120 models of Siemens’ S7-1500 PLCs contain a serious vulnerability—and no fix is on the way.
Twitter Data Leak: What the Exposure of 200 Million User Emails Means for You
The exposure of hundreds of millions of email addresses puts pseudonymous users of the social network at risk.
Update Android Right Now to Fix a Scary Remote-Execution Flaw
Plus: Patches for Apple iOS 16, Google Chrome, Windows 10, and more.
The Password Isn’t Dead Yet. You Need a Hardware Key
Any multifactor authentication adds protection, but a physical token is the best bet when it really counts.
LastPass Data Breach: It’s Time to Ditch This Password Manager
The password manager’s most recent data breach is so concerning, users need to take immediate steps to protect themselves.
Log4j’s Log4Shell Vulnerability: One Year Later, It’s Still Lurking
Despite mitigation, one of the worst bugs in internet history is still prevalent—and being exploited.
Google Moves to Block Invasive Spanish Spyware Framework
The Heliconia hacking tool exploited vulnerabilities in Chrome, Windows Defender, and Firefox, according to company security researchers.