Two new confidential NSA documents have been leaked explaining how the agency handles encrypted data and data collected from U.S. persons whose location is unknown. Both documents could impact users of encrypted email and anonymity services such as Tor.
Top WordPress plug-ins and themes remain vulnerable to common Web-based attacks such as cross-site scripting and SQL injection.
Facebook is no longer blocking visitors using the Tor anonymity service after its malware detection services saw a surge in activity this week from Tor exit nodes.
As many as 65 websites have been compromised and are hosting malicious ads redirecting visitors to websites hosting the ZeroAccess Trojan.
Researchers in Germany discovered a weakness in how iOS generates default passwords for mobile hotspots.
Oracle released 40 patches on Tuesday for Java, most of them fixing remotely executable vulnerabilities in the browser plug-in.
NSA whistleblower Edward Snowden answered a wide range of questions during a live chat today on the Guardian UK newspaper website.
The government made requests for data on as many as 10,000 Apple user accounts through May 31, Apple said, adding that most of the requests involved criminal matters, though some pertained to national security.
Despite a rating of “Important,” a Microsoft Office 2003 zero-day vulnerability and patch deserve a close look from enterprise IT administrators.
A man in the browser attack has been detected against CareerBuilder’s website. The attack redirects victims to a money-mule recruitment website.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
