WordPress 4.7.2 Update Fixes XSS, SQL Injection Bugs
WordPress fixed three security issues, including a XSS and SQL injection, with WordPress 4.7.2 this week.
Chris Brook
About
"Distrust and caution are the parents of security" - Benjamin Franklin
Threatpost News Wrap, January 27, 2017
The Star Wars Twitter botnet, the return of Lavabit, a critical Cisco Webex flaw, and the St. Louis Library ransomware story are discussed.
Facebook Touts ‘Safer’ Security Key Login
Facebook is letting users tie a physical security key to their account as an added layer of security.
A researcher earned $9K for identifying a XXE vulnerability in third party backup software used by Uber.
A new version of the SpyNote Trojan is designed to trick Android users into thinking it’s a legitimate Netflix application.
Lavabit, the secure email provider that suspended operations back in 2013 after the US government asked for its users SSL keys, relaunched Friday under a new architecture.
A coalition of researchers and cryptographers are urging the Guardian to retract a story it published last week which suggested the encrypted messaging app WhatsApp contained a backdoor.
Mike Mimoso, Tom Spring, and Chris Brook discuss security-wise what they hope will and won’t change under a Trump presidency, then discuss the news of the week, including SHA-1 deprecation, Carbanak’s return, and the WhatsApp “backdoor” debacle.
Encrypted email service ProtonMail announced early Thursday that it had added its own Tor hidden service.
MedSec CEO Justine Bone talks to Mike Mimoso about the St. Jude Medical vulnerabilities, the considerations her company and Muddy Waters made in short selling St. Jude stock, and the current state of medical device security.
