Paul Mutton

Autodesk hosting PDF files used in Microsoft phishing attacks

Cloudflare loses 22% of its domains in Freenom .tk shutdown

PHP-less phishing kits that can run on any website

It’s not cricket! Sri Lanka and Bangladesh co-host phishing attack

Hidden Email Addresses in Phishing Kits

Funny and malicious server banners

3.6 million websites taken offline after fire at OVH datacenters

Fake EV certificates used in Steam trade phishing attacks

Netcraft releases anti-phishing app for Android

nginx, Nginx, NGiИX, or NGINX?!

The hidden "well-known" phishing sites

Cloud Wars: Alibaba becomes 2nd largest hosting company

Hotpoint service sites hacked

LEGO vs Cybersquatters: The burden of new gTLDs

New gTLDs: Are they a success?

Hackers still exploiting eBay's stored XSS vulnerabilities in 2017

HTTP Public Key Pinning: You're doing it wrong!

Secure websites shun HTTP Public Key Pinning

95% of HTTPS servers vulnerable to trivial MITM attacks

AlphaBay darknet phishing attack impersonates .onion domain

Brazil Gov website serving up phish and malware… again

BBC websites still suffering after DDoS attack

World Bank hacked by PayPal phishers

Millions still running the risk with Windows Server 2003

DigitalOcean becomes the second largest hosting company in the world

Instagram forgets to renew its SSL certificate

Google's April Fool's prank inadvertently broke their security

Steam Community phishing attacks continue unabated

Phishing with data: URIs

Steam phishing attacks exploiting look-alike domain names

is.gd goes down, takes a billion shortened URLs with it

Certificate revocation: Why browsers remain affected by Heartbleed

Heartbleed certificate revocation tsunami yet to arrive

Half a million widely trusted websites vulnerable to Heartbleed bug

Thousands of websites still hosted on Windows XP

Fake SSL certificates deployed across the internet

Are there really lots of vulnerable Apache web servers?

DigitalOcean now growing faster than Amazon

PHP.net blocked by Google: False positive or not?

Phishers using CloudFlare for SSL

Phishing by proxy

Twitter users fall victim to new XSS worm

Inside a 419 scam site

Clinton and Obama XSS Battle Develops

Mr-Brain: Stealing Phish from Fraudsters

Italian Bank's XSS Opportunity Seized by Fraudsters

Google Fixes Gmail Cross-site Request Forgery Vulnerability

PayPal Security Flaw allows Identity Theft

Fraudsters seek to make phishing sites undetectable by content filters