Facebook prowls the internet looking for your password

Facebook explains that it’s keeping its eye out for credentials – email, password combinations – dropped on sites after data breaches, running them against its own users’ credentials to see if password reuse is going to land its users in trouble.

“Oops! I’m sorry about that” – 60 Sec Security [VIDEO]

Here it is – this week’s 60 Second Security video. News that will amuse, and it only takes a minute…

‘The Snappening’: stolen Snapchat photos site defaced, details of site owner published

Owner of TheSnappening.org photo site, Mudit Grover, took the stolen Snapchat images and the site down. But within hours, attackers identifying themselves as “Team Danny” allegedly took over the domain and published Grover’s personal details.

POODLE attack takes bytes out of your enrypted data – here’s what to do

Heartbleed, Shellshock, Sandworm…and now POODLE. It’s a security hole that could let crooks read your encrypted web traffic. Paul Ducklin takes you through how it works, and what you can do to avoid it, in plain (well, plain-ish) English…

Snapchat to address sketchy third-party apps with public API … at some point

Oh, those darn third-party apps, their home-brewed APIs and their photo-leaking ways, Snapchat moaned on Wednesday morning, promising to cook up a public API to fix the situation… sooner or later.

Attacker takes over Facebook page set up for ‘Bucket List Baby’ Shane, posts porn

A Facebook page set up to chronicle the extremely short life of a baby with the rare, terminal condition of anencephaly was hijacked within days of the infant’s death and set to display lewd images. The parents, who had lost their child mere days before, fell for one of the most vile phishing attacks ever.

Dropbox passwords leaked, third-party services blamed

Hundreds of Dropbox logins were posted on Pastebin and Reddit, but it turns out they were stolen from a third-party service months ago, Dropbox says. So why did some of those passwords work, as Reddit users claimed? Think password reuse.