security It's dismayingly easy to make an app that turns a smart-speaker into a password-stealing listening device and sneak it past the manufacturer's security checks Cory Doctorow

security Phishers steal San Diego school data going back to 2008 — UPDATED Cory Doctorow

bside New sextortion phishing scam uses target's harvested password Andrea James

infosec Jargon watch: smishing and vishing Cory Doctorow

fraud Spam was nearly dead, then it became an essential tool for crime and came roaring back Cory Doctorow

security Unknown hackers have gained near-total control over some US power generation companies Cory Doctorow

hackers How a fishing guide's WordPress site became home to half a million fraudulent pages Andrea James

security Amnesty: hackers spent months building personas used to phish Qatari labor activists Cory Doctorow

security It turns out that halfway clever phishing attacks really, really work Cory Doctorow

happy mutants 12 days of two-factor authentication: this Xmas, give yourself the gift of opsec Cory Doctorow

security Whaling: phishing for executives and celebrities Cory Doctorow

security Researchers learn about wire-fraud scam after Nigerian scammers infect themselves with their own malware Cory Doctorow

corruption EFF and partners reveal Kazakh government phished journalists, opposition politicians Cory Doctorow

security Iranians connected to phishing attempt on tortured Syrian activist Cory Doctorow

Business Phishing for Bitcoin with fake 0-days Cory Doctorow

Business Phishers trick Mattel into transferring $3M to a Chinese bank Cory Doctorow

happy mutants Security-conscious darkweb crime marketplaces institute world-leading authentication practices Cory Doctorow

security US Embassy staffer ran a sextortion racket from work computer for 2 years Cory Doctorow

Business Phishers make off with W2 tax forms for several thousand Seagate employees Cory Doctorow