Top 10 Stories

The Internet Engineering Task Force's (IETF's) decision last year to push back against surveillance is bearing fruit, with the 'net boffins and the IEEE proclaiming successful MAC address privacy tests. While MAC address randomisation has been a feature of various clients (including Linux, Windows, Apple OSs and Android) for some time, it has yet to be written into standards. View full story

China is the "leading suspect" in the massive hack of a US government agency holding the personnel records of millions of Americans, US intelligence chief James Clapper has said. He is the highest-ranking US official to publicly implicate Beijing since news of the data breach emerged. View full story

Many Cisco security appliances contain default, authorized SSH keys that can allow an attacker to connect to an appliance and take almost any action he chooses. The company said that all of its Web Security Virtual Appliances, Email Security Virtual Appliances, and Content Security Management Virtual Appliances are affected by the vulnerability. View full story

A woman has told the Victoria Derbyshire programme how she was conned out of her life savings by scammers who sent her a 'phishing' email. 59-year-old Vivian Gabb, a pilates and tennis coach from London, was in the final stages of buying a house when the scammers struck. View full story

It wasn't malware that disabled Windows Update on your PC, it was Samsung When Microsoft MVP Patrick Barker tried to help a user with a computer problem, he stumbled across something curious. Windows Update kept randomly being disabled. Was malware at work, turning off Windows Update to prevent Microsoft patches and security updates from being installed? No, malware wasn't to blame. It was Samsung. View full story

Dyre malware, which quickly emerged as one of the most prominent financial trojans following the Gameover Zeus botnet takedown last June, is still steadily making its mark in the underground market – and in victims' accounts – prompting researchers to deem the threat a malicious tool successfully, though likely temporarily, filling the void of Zeus. View full story

Hershey Entertainment and Resorts, the company that owns Hersheypark, is investigating a possible data breach that may have exposed guests’ credit card information. View full story

A serious vulnerability has been discovered with the MacKeeper utility program which would enable an attacker to encode executable instructions in a URL link. View full story

The US National Archives and Records Administration (NARA) has discovered illicit activity on three of its desktop computers, which may have been compromised in much the same manner as those of theOffice of Personnel Management (OPM). View full story

Adobe is advising users and administrators to patch its Flash Player after yet another remote-code execution vulnerability was discovered in the plugin. The patch fixes bug CVE-2015-3113, which allows attackers to take control of a system if it opens a malicious Flash file. Miscreants are exploiting the flaw in the wild to hijack PCs, targeting Internet Explorer on Windows 7 and Firefox on Windows XP. View full story