When is the best time to book your flight? Google just spilled all the airfare secrets
Zero Day
MAY 2, 2025
Google Flights analyzed four years of airfare data, providing insights on finding the cheapest flights and the best days to book.
Book Related Topics 
Report from the Cambridge Cybercrime Conference
Schneier on Security
JULY 14, 2025
Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Report from the Cambridge Cybercrime Conference The Cambridge Cybercrime Conference was held on 23 June. Summaries of the presentations are here.
Join 28,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
Pakistani Firm Shipped Fentanyl Analogs, Scams to US
Krebs on Security
MAY 7, 2025
and Pakistan whose employees are accused of using online ads to scam westerners seeking help with trademarks, book writing, mobile app development and logo designs, a new investigation reveals. com — alleging they scammed her out of $100,000 after she hired them to help write her book. ” Launched in 2017, eWorldTrade[.]com
“Cybersecurity For Dummies” Third Edition Now Available
Joseph Steinberg
APRIL 7, 2025
The third edition of Cybersecurity For Dummies , Joseph Steinberg ‘s best-selling introductory-level book about cybersecurity, is now available in both print and e-book format. The new book.
Why Phishers Love New TLDs Like.shop,top and.xyz
Krebs on Security
DECEMBER 3, 2024
John Levine is author of the book “The Internet for Dummies” and president of CAUCE. Incredibly, despite years of these reports showing phishers heavily abusing new gTLDs, ICANN is shuffling forward on a plan to introduce even more of them. ICANN’s proposed next round envisions accepting applications for new gTLDs in 2026.
Using Signal Groups for Activism
Schneier on Security
JULY 10, 2025
Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Using Signal Groups for Activism Good tutorial by Micah Lee. It includes some nonobvious use cases.
Booking.com Phishers May Leave You With Reservations
Krebs on Security
NOVEMBER 1, 2024
KrebsOnSecurity last week heard from a reader whose close friend received a targeted phishing message within the Booking mobile app just minutes after making a reservation at a California. The phishing message our reader’s friend received after making a reservation at booking.com in late October.
Victims risk AsyncRAT infection after being redirected to fake Booking.com sites
Malwarebytes
JUNE 2, 2025
According to Malwarebytes research , 40% of people book travel through a general online search, creating a lot of opportunities for scammers. Even if you think youre looking at an actual booking website, this is not the kind of instructions youre expected to follow. com (booking.)badgustrewivers.com[.]com com (booking.)property-paids[.]com
News Alert: SquareX, Fortune 500 CISOs to debut bowser security guide at Black Hat USA 2025
The Last Watchdog
JULY 17, 2025
Co-authored by Audrey Adeline and Vivek Ramachandran, the book covers everything from common to bleeding edge techniques, including sample code snippets and case studies of such attacks unfolding in real life. The Black Hat book signing event is taking place at the Black Hat bookstore on Thursday August 7 at 3:00pm – 3.30pm.
MasterCard DNS Error Went Unnoticed for Years
Krebs on Security
JANUARY 22, 2025
MasterCard.com relies on five shared Domain Name System (DNS) servers at the Internet infrastructure provider Akamai [DNS acts as a kind of Internet phone book, by translating website names to numeric Internet addresses that are easier for computers to manage].
ClickFix: How to Infect Your PC in Three Easy Steps
Krebs on Security
MARCH 14, 2025
From there, they sent out phishing messages asking for financial information from people who’d just booked travel through the company’s app. Some of those lures worked, and allowed thieves to gain control over booking.com accounts.
Can a Linux laptop replace my MacBook? This one is off to a good start
Zero Day
JULY 12, 2025
Tuxedo Computers' Infinity Book Pro 14 is a sleek-looking laptop with Linux pre-installed. But its performance is backed up by some smart design options.
I spoke to a task scammer. Here’s how it went
Malwarebytes
MARCH 5, 2025
Beginning the message with emojis, Birdie started the chat… Group invitation on X [emoji intro] Hello, I am a third-party agency from the UK, specializing in providing ranking and likes services for Booking+Airbnb hotel applications. create an account on a fake booking(dot)com site Here’s that site. It isn’t.)
Secure by Design roundup - March 2024
Adam Shostack
JANUARY 2, 2025
Shostack + Associates updates Open trainings: Our next Essentials (one day) course is at Archimedes in New Orleans ( April 30 ), and two Intensives in person at Blackhat (both two days), which are Aug 3-4 or Aug 5-6 And last but not least, my book Threats is available in Italian! There is a stack of books on the bench.
Fake Booking.com phish uses fake CAPTCHAs to trick hotel staff into downloading malware
Malwarebytes
MARCH 26, 2025
Here’s how it works: Cybercriminals send a fake Booking.com email to a hotels email address, asking them to confirm a booking. Dear Team, You have received a new booking. If you have any questions or need more information, please contact the guest directly or through our platform.
Xerox VersaLink C7025 Multifunction printer flaws may expose Windows Active Directory credentials to attackers
Security Affairs
FEBRUARY 18, 2025
Pass-back attack via users address book – SMB / FTP CVE-2024-12511 (CVSS score: 7.6) – An attacker can modify the user address book configuration to redirect SMB or FTP scans to a host they control, capturing authentication credentials.
Is nowhere safe from AI slop? (Lock and Code S05E27)
Malwarebytes
DECEMBER 30, 2024
There are AI-generated childrens books being advertised relentlessly on the Amazon Kindle store. The dreamy, Vaseline sheen produced by many AI image generators is easy (for most people) to spot, and common mistakes in small details abound: stoves have nine burners, curtains hang on nothing, and human hands sometimes come with extra fingers.
Author’s Q&A: It’s high time for CISOs to start leading strategically — or risk being scapegoated
The Last Watchdog
MAY 13, 2025
This is the backdrop for The CISO on the Razors Edge , a new book by Steve Tout , longtime identity strategist and advisor to Fortune 500 security leaders. I spoke with Steve to explore what pushed him to write this book now, how GenAI changes the game, and what security leaders must do to escape the scapegoat cycle.
Change Healthcare data breach impacted over 100 million people
Security Affairs
OCTOBER 25, 2024
According to the Associated Press, UnitedHealth booked $1.1 billion in total costs from the cyberattack in the second quarter. In early March, the Alphv/BlackCat ransomware gang claimed responsibility for the attack and added the company to its Tor leak site.
Hoarding, Debt and Threat Modeling
Adam Shostack
JANUARY 30, 2025
Maybe one person thinks a good dusting is enough; another that things need to be in containers (books on shelves, desk clutter in baskets, papers in files) and yet another thinks that without bleach, its a waste. So how can we start threat modeling when theres all this technical debt? Some thoughts: Define clean. No new problems.
Tanya Janca on Secure Coding, AI in Cybersecurity, and Her New Book
Security Boulevard
DECEMBER 8, 2024
Discover the latest on her new book about secure coding, exciting updates in Application Security, and the use of AI in security. Learn how her new book goes deeper into secure coding practices, backed by her [] The post Tanya Janca on Secure Coding, AI in Cybersecurity, and Her New Book appeared first on Shared Security Podcast.
How Cybersecurity Fears Affect Confidence in Voting Systems
Schneier on Security
JUNE 30, 2025
Digital systems have replaced poll books, taken over voter identity verification processes and are integrated into registration, counting, auditing and voting systems. The digital transformation of American elections has been swift and sweeping. Just two decades ago, most people voted using mechanical levers or punch cards.
Booking.com reservation abused as cybercriminals steal from travelers
Malwarebytes
JUNE 6, 2025
Robert Woodford, a recruitment marketing specialist, recently shared on LinkedIn how he fell victim to a highly sophisticated scam while booking a hotel in Verona through Booking.com, providing a striking example of how attacks on the hospitality industry affect travelers. Report suspicious messages to the booking platform immediately.
Spying on People Through Airportr Luggage Delivery Service
Schneier on Security
AUGUST 1, 2025
. “The vulnerabilities resulted in complete confidential private information exposure of all airline customers in all countries who used the service of this company, including full control over all the bookings and baggage.
News alert: Sweet Security releases its evolutionary Cloud Native Detection and Response platform
The Last Watchdog
DECEMBER 3, 2024
Book a meeting with Sweet Security at AWS re:Invent 2024 in Las Vegas here. For too long we’ve been content with mediocre visibility into our most important assets. Sweet is on the frontlines of changing that by giving teams the cross-layer visibility they’ve needed for years.”
Digital nomads and risk associated with the threat of infiltred employees
Security Affairs
MARCH 4, 2025
He is also the author of the book La Gestione della Cyber Security nella Pubblica Amministrazione. About the author: Salvatore Lombardo ( X @Slvlombardo ) Electronics engineer and Clusit member, for some time now, espousing the principle of conscious education, he has been writing for several online magazine on information security.
News alert: Seraphic launches BrowserTotal™ — a free AI-powered tool to stress test browser security
The Last Watchdog
JUNE 9, 2025
Users can book a demo time in advance here. .” Attendees of the Gartner Security & Risk Management Summit 2025 can experience Browser Total firsthand at booth #1257. The Seraphic team will be providing live demos, expert insights, and one-on-one consultations on closing the browser security gap.
France links Russian APT28 to attacks on dozen French entities
Security Affairs
APRIL 30, 2025
Some campaigns aim for immediate espionage, stealing conversations, credentials, and address books, without establishing long-term system access. CVE-2023-23397 ). They often target poorly monitored edge devices to avoid detection.
News alert: Arsen launches AI-powered vishing simulation to help combat voice phishing at scale
The Last Watchdog
JUNE 13, 2025
To learn more or book a demo of the Vishing Simulation module, users can visit [link]. About Arsen :Arsen is a cybersecurity company specializing in the defense against social engineering attacks.
Change Healthcare data breach exposed the private data of over half the U.S.
Security Affairs
JANUARY 26, 2025
According to the Associated Press, UnitedHealth booked $1.1 billion in total costs from the cyberattack in the second quarter. In early March, the Alphv/BlackCat ransomware gang claimed responsibility for the attack and added the company to its Tor leak site.
New LightSpy spyware version targets iPhones with destructive capabilities
Security Affairs
NOVEMBER 1, 2024
Destructive plugin: can delete specified contacts from the address book DeleteKernelFile 1.0.0 Can send SMS messages by the command Bootdestroy 1.0.0 Destructive plugin: can prevent the device to boot up Browser 2.0.0 Browser history exfiltration plugin BrowserDelete 1.0.0 Destructive plugin: can wipe browser history cameramodule 1.0.0
1 in 10 people do nothing to stay secure and private on vacation
Malwarebytes
MARCH 17, 2025
38% of people said they will book their next travel opportunity through a general search, which could leave them vulnerable to malvertising. Take, for example, the 38% of people who told Malwarebytes that they would conduct a general search online in booking their next vacation.
News alert: Sweet Security rolls out its advanced runtime detection and response platform for AWS
The Last Watchdog
NOVEMBER 11, 2024
AWS customers visiting AWS re:Invent 2024 in Las Vegas can book a meeting to learn more here. retired).
Cybersecurity Governance: The Road Ahead in an Era of Constant Evolution
SecureWorld News
FEBRUARY 17, 2025
As I look to explore this issue a possible book , what are your thoughts on the future of cybersecurity governance? It must evolve as rapidly as the threats it seeks to mitigate. Those who embrace this evolution will not only protect their organizations but also build a more secure digital future for all. I would welcome your options.
macOS HM Surf flaw in TCC allows bypass Safari privacy settings
Security Affairs
OCTOBER 18, 2024
Microsoft pointed out that Safari can bypass TCC (Transparency, Consent, and Control) checks, allowing it to access sensitive services like the address book, camera, and microphone without typical access restrictions. Apple’s Safari can completely bypass TCC using the “com.apple.private.tcc.allow” entitlement.
Weekly Update 429
Troy Hunt
DECEMBER 7, 2024
The Armenian Government is now the 37th to have free and open access to their domains on HIBP (this gives them API-level domain searches to their gov TLD) After two and a bit years on sale, we're now giving away "Pwned" the book, for free (go grab it in PDF or EPUB format)
3 Key Takeaways from Continuous Threat Exposure Management (CTEM) For Dummies, NetSPI Special Edition
NetSpi Executives
JULY 1, 2025
The recently launched book, Continuous Threat Exposure Management (CTEM) For Dummies, NetSPI Special Edition breaks down everything you need to know about this approach in an easy-to-digest, actionable guide. The book lays out each phase clearly, presenting steps you can implement without wading through technical jargon. Get Your Copy!
How Solid Protocol Restores Digital Agency
Schneier on Security
JULY 24, 2025
When journalist Julia Angwin attempted to correct her information across major data brokers for her book Dragnet Nation , she found that even after submitting corrections through official channels, a significant number of errors reappeared within six months.
Can Cybersecurity Make You a Millionaire?
Hacker's King
OCTOBER 22, 2024
Writing books, offering online courses, speaking at conferences, and being active on social media can create additional streams of income. While this isn't the norm, it does show that cybersecurity can indeed make you a millionaire in the right circumstances.
The Battle for Attention: How Cybersecurity Fights for Truth in a World of Noise
Jane Frankland
JUNE 27, 2025
” This observation, from Chris Hayes’ book T he Sirens’ Call: How Attention Became the World’s Most Endangered Resource cuts to the heart of a growing challenge in every domain of modern society. Drop me a message on LinkedIn or book a call.
My Take: Is Amazon’s Alexa+ a Gutenberg moment — or a corporate rerun of history’s greatest co-opt?
The Last Watchdog
APRIL 15, 2025
Bezos launching Amazon with a single book, and Googles Brain Team engineering the transformer architecture that underpins todays GenAIthese are milestones on the same arc. Jeff Bezos sells his first book on a novelty called Amazon.com in 1999. Fast-forward 560 years.
Hi, robot: Half of all internet traffic now automated
Malwarebytes
APRIL 16, 2025
These bots pull tricks such as pretending to book airline seats online and abandoning the purchase at the last minute, which skews seat pricing. The report also found bots targeting specific sectors. The travel industry accounted for 27% of bad bot traffic (the highest by industry) in 2024, up from 21% in 2023.
Cisco Secure Firewall: First to earn SE Labs AAA in Advanced Performance
Cisco Security
JULY 24, 2025
Read the e-book, see the video, dive into the infographic and more. Get expert perspectives now Why Cisco Security? Explore our Products & Services Learn More CONNECT WITH US X/Twitter Facebook LinkedIn E-mail Read aloud Share x Pause Stop Settings x Rate 1 Pitch 1 Select a voice: Voices are browser-dependent.
An Interview With the Target & Home Depot Hacker
Krebs on Security
NOVEMBER 14, 2024
ChronoPay founder and CEO Pavel Vrublevsky was the key subject of my 2014 book Spam Nation , which described his role as head of one of Russia’s most notorious criminal spam operations. Vrublevsky Sr. recently declared bankruptcy, and is currently in prison on fraud charges.
Let's personalize your content