The Privacy and Civil Liberties Oversight Board released its review of the NSA’s phone call metadata collection program, and called it illegal. The board said the program should end and that it has not contributed to a single counter-terrorism investigation.
Exploit code has been published for a Google Chrome bug that allows malicious websites granted permission to use a computer’s microphone for speech recognition to continue listening after a user leaves the website.
Research into the behavior of Tor exit relays found that more than two dozen are malicious or misconfigured and could be snooping on traffic leaving the privacy network.
American gas and oil companies have been targeted in espionage campaigns since 2012, according to a new research report.
Google removed two Chrome extensions from the Chrome Store after both were recently bought by spammers who reconfigured the extensions to inject ads into websites visited by users.
A spambot that behaves similarly to the Cutwail botnet has been discovered. It not only sends out spam messages, but also contains a data-stealing component. Researchers said the malware sends out a good deal of traffic and hides its malicious activity in its own traffic.
A cross-site scripting vulnerability in Microsoft Office 365 casts attention on the need to shore up the security of cloud-based enterprise applications.
President Obama announced reforms to the National Security Agency’s bulk metadata collection program, but maintains it is vital and must continue.
SCADA software company Ecava announced it has released a patch for a zero day in its HMI product that was disclosed this week at the S4 Conference.
BrightBox home and small business routers are vulnerable to a number of security problems that leaving the networking gear exposed locally and remotely to attack.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
