IOActive researcher Andrew Zonenberg said he has carried out previous hardware-based hacks against silicon chips that he believes could by used by the FBI to unlock the San Bernardino shooter’s iPhone 5c.
Joomla is the newest prey of attackers behind a campaign that has targeted WordPress websites by injecting JavaScript files with malicious code.
IOActive report claims popular SimpliSafe’s wireless home security system is vulnerable to hackers who can record and reuse PIN entries to disarm alarm.
Security expert Dan Guido wrote that Apple has the technical capabilities to bypass or disable passcode protections on the San Bernardino shooter’s iPhone.
Apple chief executive Tim Cook opposes a court order mandating that Apple help the FBI crack an iPhone belonging to San Bernardino shooter Syed Farook.
Socat published a security advisory warning users that a hard-coded 1024 Diffie-Hellman prime number was not prime, and that an attacker could listen and recover secrets from a key exchange.
While the government still covets exceptional access to encrypted data, a Harvard paper says that plenty of surveillance opportunities remain, especially with the Internet of Things, metadata and more.
The OpenSSL project team today patched two vulnerabilities in the crypto library, one of which is rated high severity.
OpenSSL announced that it will release updates for 1.0.2f and 1.0.1r that patch two high-severity vulnerabilities.
OpenSSH patched a critical vulnerability that could be exploited by an attacker to force a client to leak private cryptographic keys.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
