EMM News Explorer: Graham Cluley

[ said]: The good news is that it's not individuals who are having money stolen from their accounts, but rather the financial institutions,

news 11-MAY-13

[-said]: There are likely to be gangs of other people outside the United States who were involved in this, and it will be interesting to see if there are further arrests overseas,

news 11-MAY-13

[-said]: We don't know how they managed to break into the card processors' network to remove the spending limits on the prepaid cards,

news 11-MAY-13

[-said]: No one else has had an opportunity to test this researcher's claims as he has, thankfully, kept secret details of the vulnerabilities he was able to exploit,

cnn 12-APR-13

[-said]: From the sound of things, this researcher has got himself a lot of media attention, but still believes in responsible disclosure, rather than potentially putting aircraft and passengers at risk,

cnn 12-APR-13

[ said]: It’s hard to jump to the immediate conclusion that this was necessarily evidence of a cyber-warfare attack coming from North Korea,

stabroeknews 22-MAR-13

[ writes]: Whether the legitimate owners of the @BBCWeather account were phished, had their password cracked, or made the mistake of using the same password in multiple places isn't currently clear - but what is obvious is that right now they have no control over their account,

[-writes]: Once again, a corporate brand is left wishing that Twitter offered some additional levels of protection - such as two factor authentication,

ibtimes 21-MAR-13

[ said]: This is really the new era of cybercrime,

straitstimesSG 21-FEB-13

[ said]: The reason Anonymous fell victim is probably human weakness,

bbc 21-FEB-13

[ said]: This is the new era of cybercrime,

scmp 21-FEB-13

[ said]: None of us would be very surprised or be uncomfortable saying we strongly suspect the Chinese authorities are involved in spying this way,

CBC 19-FEB-13

[-wrote]: You can imagine how a man, believing he is being seduced online by a sexy woman, might be all too eager to click on a link she suggests or run a malicious program on his computer,

cnn 18-FEB-13

[-also said]: Normally attacks are against individual accounts with the intention of spreading diet spam or malicious links, rather than against Twitter's systems themselves.

siliconrepublic 03-FEB-13

[ said]: We’ve seen a real escalation of attacks that seem to be designed to steal information rather than make money,

thehimalayantimes 03-FEB-13

[-said]: If Twitter has any information that does point a finger of suspicion towards China (such as if dissident or human rights Twitter accounts were targeted) they haven't shared that with the media,

siliconrepublic 03-FEB-13

[ said]: If certain types of data have been stolen (such as PII and customer records) there may be legal and moral obligations to issue a press release and guidance for those who could be impacted,

ibtimes 01-FEB-13

[-asked]: How do you prove that it was Chinese hackers?

ibtimes 01-FEB-13

[ said]: You can understand why people who might have provided information for the investigation into Wen Jiabao's family would want to be reassured that their identities had not been revealed to whoever was behind the hack,

siliconrepublic 31-JAN-13

[-said]: Security experts brought in by the newspaper have pointed the finger of blame at China. And, in all likelihood, they're right,

siliconrepublic 31-JAN-13

[-said]: But let's not be too naive ... In all probability, The New York Times' conclusion is correct, and this attack was sanctioned by the powers that be in Beijing,

siliconrepublic 31-JAN-13

[-explains]: It's an unfortunate historic screw-up that the names of the different technologies are so similar,

siliconrepublic 15-JAN-13

[ explains]: The reason is that Java keeps getting exploited by malicious cyber-criminals,

siliconrepublic 15-JAN-13

[ says]: Most people won’t notice any difference at all as only a small number of websites require Java,

siliconrepublic 15-JAN-13

[ says]: More and more cyber-criminals are hunting for security holes in Java that they can exploit,

siliconrepublic 15-JAN-13

[-says that]: is a malicious application to retrieve data from all profiles. It's very aggressive, just a click makes it starts sending requests to all your friends/contacts. If a request comes from me just ignore it; NOTE please copy and warn your friends

cnn 11-JAN-13

[ said]: Let's hope that Mickey Virus does not glamourise or trivialise hacking and malware creation too much,

[-said]: Reventlov seems to have only given Instagram a couple of weeks to get their act together and fix their systems. That doesn't seem like long enough to me,

ibtimes 04-DEC-12

[ wrote]: It appears that the worm took advantage of Tumblr's reblogging feature, meaning that anyone who was logged into Tumblr would automatically reblog the infectious post if they visited one of the offending pages,

[ asks]: [I]f someone takes a photograph of you without your permission it will be automatically uploaded to Facebook – you may demand that they delete the photo off their phone, but will it also have been removed from their private Facebook album?

rt 03-DEC-12

[-writes]: Is the apparent security snafu damaging to Nintendo? Probably not. They appear to have resolved the issue quickly, and there is no suggestion that sensitive information was stolen from users, unlike last year's Sony PlayStation network hack where hackers stole the personal data of millions of people,

[ said]: Unfortunately, many Facebook users will be too excited about the prospect of perhaps changing the look and feel of Facebook that they will not spot suspicious clues,

siliconrepublic 14-NOV-12

[-concludes]: Sharing a naked photo of yourself with someone via the internet is putting yourself at dangerous risk of embarrassment, humiliation or serious bullying,

[ explains]: guidelines online explaining how jailbroken iPhones can subvert Snapchat, and take snapshots without informing the image's sender,

[ said]: Spam emails arrive in your inbox via other people’s infected computers,

siliconrepublic 16-OCT-12

[added:]: Skype users may be less in the habit of being suspicious about links sent to them than, say, Facebook users.

[-agreed]: They're just not able to get to the site for a few hours.

msnbc 01-OCT-12

[-said]: I think the only impact of the DDoS attacks on customers is that they may not be able to access their bank's website,

msnbc 01-OCT-12

[-said]: Any joker can post messages on the Internet claiming to be responsible — but that's very different from finding a smoking gun,

msnbc 01-OCT-12

[ said]: We don't have any way of confirming the source of the data, or what else might have been taken, but it does appear that the files do contain at least some genuine Apple UDIDs,

cnn 05-SEP-12

[ said]: Quite why the FBI was collecting the UDIDs and personal information of millions of iPhone and iPad users is not yet clear — but it’s obvious that the data (and the computer it was apparently stored on) was not adequately secured,

thenews 05-SEP-12

[ said]: Quite why the FBI was collecting the UDIDs and personal information of millions of iPhone and iPad users is not yet clear-but it’s obvious that the data (and the computer it was apparently stored on) was not adequately secured,

kuwaittimes 04-SEP-12

[ said]: Quite why the FBI was collecting the UDIDs and personal information of millions of iPhone and iPad users is not yet clear -- but it's obvious that the data (and the computer it was apparently stored on) was not adequately secured,

deccanherald 04-SEP-12

[ said]: Quite why the FBI was collecting the UDIDs and personal information of millions of iPhone and iPad users is not yet clear - but it's obvious that the data (and the computer it was apparently stored on) was not adequately secured,

news_com_au 04-SEP-12

[ said]: This was purely happening on Android phones,

bbc 03-SEP-12

[ said]: You have to read the small print and people never do,

bbc 03-SEP-12

[said:]: These attacks have been used by Anonymous before and they may still be doing this now ready to launch another attack. It is one of the easiest ones they can do, which is why they do it.

telegraph 21-AUG-12

[-said]: Amazon made it too easy for someone to add a credit card to an account (and subsequently gain access to the account), but Apple made it too easy to access account information using the final four digits,

[-added]: It's a shame to see the new Outlook.com miss an opportunity to encourage the use of longer passwords,

[-explains]: When registering an account with Gmail, I was unable to hit a limit on password length,

[-said]: Clearly all Facebook users are interested in the site becoming a safer place, and the level of spam and malicious links being minimised,

thehimalayantimes 04-AUG-12

[-said]: Clearly all Facebook users are interested in the site becoming a safer place, and the level of spam and malicious links being minimized,

news 03-AUG-12

[ commented]: The spam itself, of course, doesn't have to promote Indian goods,

[ said]: Spam is becoming increasingly malicious,

latimes 21-JUL-12

[commented:]: Unless someone associated with the hack owns up to their involvement, it seems that the story of Climategate may remain a mystery.

[ warned]: Be wary of emails claiming to be from Facebook, and saying that you have been tagged in a photograph,

telegraph 19-JUL-12

[-wrote]: although the amount of malware written for different operating systems can vary, it's becoming increasingly hard to argue on any OS that it's safe to surf the Web without anti-virus protection,

msnbc 11-JUL-12

[notes that this:]: isn't, of course, the first cross-platform malware that we have seen. For instance, in 2010 we saw the Boonana malware which similarly used a malicious Java applet to deliver a cross-platform attack that attempts to download further malware on Windows, Unix and Mac OS X.

msnbc 11-JUL-12

[-explained]: In business environments the concept of automatic, silent updates to the Mac operating system may be less popular,

[ notes]: Of course, most days it is unlikely that Apple will have released a security update - but for those times when they have, this feature will hopefully reduce the window of opportunity for malicious hackers to exploit any vulnerabilities in OS X,

[-said]: Hacking for Christ.

smh 27-JUN-12

[says:]: it's probably cheaper and less dangerous to spy on another state's government or a foreign company using malware than to use the old-fashioned method of planting a physical agent there.

ibtimes 26-JUN-12

[-says]: After all,

ibtimes 26-JUN-12

[said:]: It's just a matter of time before the money-stealing elements who operate on the internet start using it to harvest the accounts of ordinary people.

skynews 21-JUN-12

[ said]: Don’t underestimate the seriousness of this vulnerability,

gulfnews 21-JUN-12

[ said]: One way that hackers break into large companies and organisations is to target their supply chain. It’s reasonable to speculate that whoever was behind this attack actually had bigger fish to fry the type of businesses that regularly visit the websites of aeronautical suppliers, such as defence companies,

gulfnews 21-JUN-12

[ said]: One way that hackers break into large companies and organisations is to target their supply chain. It's reasonable to speculate that whoever was behind this attack actually had bigger fish to fry - the type of businesses that regularly visit the websites of aeronautical suppliers, such as defence companies,

albawaba 21-JUN-12

[ said]: I'd be quite wary of this,

independent 15-JUN-12

[ said]: Facebook's default has always been that you have to opt out of sharing your data, rather than trying to convince you of the positive benefits, because they know fewer people would do it,

independent 15-JUN-12

[-said]: For instance, there has been much Windows malware over the years which has incorporated anti-sandboxing, virtual machine detection and anti-debugging tricks to make analysis more difficult,

ibtimes 10-JUN-12

[-said]: Don't give up. Don't think this is all futile,

cnn 07-JUN-12

[ wrote]: A file containing 6,458,020 SHA-1 unsalted password hashes has been posted on the internet, and hackers are working together to crack them,

msnbc 07-JUN-12

[-warned that]: It's `game over' once the site is compromised.

nzherald 07-JUN-12

[ said]: LinkedIn,

abs 07-JUN-12

[ said]: Although the data which has been released so far does not include associated email addresses, it is reasonable to assume that such information may be in the hands of the criminals,

ibtimes 07-JUN-12

[-also warned]: where hackers were encouraged to join forces to crack them.

france24 07-JUN-12

[-said]: Although the data which has been released so far does not include associated email addresses, it is reasonable to assume such information may be in the hands of the criminals,

irishexaminer 07-JUN-12

[ said]: That's what we think,

cnn 07-JUN-12

[-warned that]: once the site is compromised.

nzherald 07-JUN-12

[ said]: It would seem sensible to suggest to LinkedIn users that they change their passwords as soon as possible as a precautionary step,

mid 06-JUN-12

[-told]: We've confirmed there are LinkedIn passwords in the data,

CBSnews 06-JUN-12

[said:]: It would seem sensible to suggest to all LinkedIn users that they change their passwords as soon as possible as a precautionary step.

irishtimes 06-JUN-12

[ said]: In the past, staff who simply wanted to access a Facebook page’s admin panel to view statistics on how users were engaging with it, or running advertising campaigns, needed full admin rights–something which could be a disaster waiting to happen,

zimtelegraph 31-MAY-12

[ said]: Facebook page managers have the power to send messages, view insights, and create posts and adverts. Crucially, they are also the only role which can access admin roles, and remove other administrators,

zimtelegraph 31-MAY-12

[ said]: A Facebook page which has been hijacked could be used to spread malicious links, spam, or scams–all in your brand’s name,

zimtelegraph 31-MAY-12

[ writes]: Other tricks that Skywiper/Flame might have up its sleeve may take some time to ascertain. It's code more than twenty times larger than Stuxnet, which means it could take substantial effort to analyse it all,

[ commented]: It's easy to see how such a large network of infected PCs was created, as people clicked on seemingly legitimate attachments and websites, oblivious to the infection that would go on to take control of their PC, and in some cases steal passwords and usernames,

[ said]: The social engineering being used by the tricksters behind this malware attack is pretty cunning,

[ said]: This additional level of protection when it comes to Safari users running Flash is good to see - as Adobe's software is so frequently exploited by malware authors and malicious hackers to infect web surfers,

bbc 15-MAY-12

[ said]: It's encouraging to see Apple has not left users of this older version of the Mac OS X operating system completely out in the cold when it comes to protecting against the latest threats. Clearly they realise that it's not good for the Apple Mac's image if older computers connected to the internet are harbouring malware,

bbc 15-MAY-12

		People and OrganisationsEnglish
		RSS feed for this entity
		Daily News Analysis, across languages and over time