Chrome to Mark More HTTP Pages ‘Not Secure’
Starting with Chrome 62, Google will start marking any HTTP page where users may enter data, and any HTTP page visited in incognito mode
Michael Mimoso
The Time Has Arrived to Embrace Hackers
Source Boston keynoter Keren Elazari sounded a call to action for industry to extend an acceptance of hackers.
Lack of Security Talent Afflicts Healthcare
At Source Boston, Josh Corman of the Atlantic Council said that healthcare is suffering from a lack of security talent, devices rife with vulnerabilities, and government incentivizing bad behavior.
Exploits for patched Android elevation of privilege vulnerabilities were published through the Zimperium N-Days Exploit Acquisition Program.
Hyundai Motor America patched its Blue Link mobile app after researchers found a cleartext encryption key that could be use to expose user and vehicle information.
Scans show tens of thousands of Windows servers infected with the DoublePulsar kernel exploit leaked by the ShadowBrokers two weeks ago.
Google asked for MLAT reform, and released its biannual Transparency Report revealing it received a record number of government requests for user data.
Endpoints are still encountering exploits for the LNK vulnerability, one of the principal infection mechanisms used by the Stuxnet worm.
Drupal released a point update for its core engine to patch a critical access bypass vulnerability.
Two vulnerabilities were identified in Bosch’s Drivelog Connect OBD-II dongle and smartphone app that allowed researchers to shut off the engine of a vehicle.
