About
"Distrust and caution are the parents of security" - Benjamin Franklin
Digital rights advocates are again pleading with the World Wide Web Consortium (W3C) to reconsider standardizing DRM in Encrypted Media Extensions, a draft specification that would ultimately feed into HTML 5.
Developers with the open source content management framework Drupal patched a series of highly critical remote code execution bugs in three separate modules today. If exploited, the bugs could let an attacker take over any site running the modules.
Riffle, a new anonymity network concocted by MIT researchers, can guarantee anonymity among a large group of users, as long as there’s one honest server.
Niantic said Monday night it wasn’t the company’s intent to request full access permission of its users’ Google accounts via Pokémon GO.
No encryption is needed for the ransomware Ranscam, which simply deletes users’ files, even if the victim chooses to pay, researchers claim.
Researchers are warning would-be Pokémon Trainers that a malicious, backdoored version of the massively popular game Pokémon Go could be making the rounds soon.
A report on ICS security released today by Kaspersky Lab reveals how dire the situation really is.
Mike Mimoso, Tom Spring and Chris Brook discuss the news of the week, including all things Android: the crypto weakness, the full disk encryption bypass, and new malware, Hummingbad, which impacts the mobile operating system. The three also discuss the TP-Link router fiasco.
Researchers have spotted several types of ransomware, including CryptXXX and a fairly new strain, Cryptobit, being pushed through the same shady series of domains.
The default implementation for KeyStore, the system in Android designed to store users credentials and cryptographic keys, is broken, researchers say.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
