Arrest Made in TalkTalk Hack
TalkTalk CEO Dido Harding said someone purporting to be the hackers who attacked the U.K. telecom demanded a ransom to keep them from publishing the stolen data.
Michael Mimoso
NSA’s Divorce from ECC Causing Crypto Hand-Wringing
The NSA is moving away from Elliptic Curve Cryptography, and cryptographers aren’t buying their reasoning that advances in post quantum computing put ECC in jeopardy.
Novel NTP Attacks Roll Back Time
Researchers at Boston University have published new attacks against the Network Time Protocol (NTP) that jeopardize the security of numerous online activities.
Researchers at Security Explorations say a change implemented by Google to the Java security model as its implemented in the Google App Engine leads to sandbox escapes.
Google said it will move gmail.com to a policy of rejecting any messages that don’t pass the authentication checks spelled out in the DMARC specification.
Microsoft opened a bounty for the .NET Core and ASP.NET Beta, paying out up to $15,000 for eligible vulnerabilities.
Let’s Encrypt hit a milestone last night when it received the cross-signatures necessary to render its beta-and free-certificates trusted by all browsers.
Some consumer-grade, self-encrypting external hard drives from Western Digital are littered with security vulnerabilities that render their encryption an afterthought.
Apple said it will remove 256 misbehaving apps from its App Store that were using private APIs to pull personal and device information.
The sixth version of the Building Security in Maturity Model (BSIMM) was released today and for the first time includes data on the software security practices of health care organizations.
