Debian developers alerted Linux users late last week of a new build, linux-2.6 that fixes 11 separate vulnerabilities that could open the kernel to a denial of service attack, information leak or privilege escalation.
Microsoft’s latest Law Enforcement Requests Report shows that no requests for Skype user content were made in the first half of 2013.
HD Moore, in collaboration with the University of Michigan, has kicked off Project Sonar, a repository Internet scan data. Moore hopes to crowdsource additional analysis of the data looking for vulnerabilities in embedded devices.
I had a chance to visit a number of industrial events this year and can see the evolution of cybersecurity in the industrial field. One of these was the 4th National Institute of Standards and Technology’s (NIST) Cybersecurity Framework Workshop (CFW).
Silent Circle has said that it plans to replace the NIST-related cipher suites in its products with independently designed ones, not because the company distrusts NIST, but because its executives are worried about the NSA’s influence on NIST’s development of ciphers in the last couple of decades.
Mike Mimoso and Dennis Fisher look back at the news of the last couple of weeks, including some new NSA PR efforts and the Icefog cyberespionage campaign.
Gen. Keith Alexander and the National Security Agency continue to struggle to win back the public and political support they’ve lost while keeping their tenuous grasp on the collection tools they’ve been employing for more than a decade.
LinkedIn was susceptible to four reflected cross site scripting (XSS) vulnerabilities before issuing a fix for those flaws over the summer.
NSA Director Gen. Keith Alexander faced questions about whether the spy agency collects cell location data on Americans yesterday during a Senate Intelligence Committee hearing.
Telecommunications company Cisco this week is warning customers and those running their software of eight separate vulnerabilities it has patched in its IOS infrastructure product.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
