Web app framework Django contains a vulnerability that puts session cookies at risk, but the group in charge has decided not to patch the flaw, and instead warn developers about the problem.
NSA Director Gen. Keith Alexander confirmed the existence of a 2010 pilot program to collect cell phone location data, but said the program was abandoned.
Mike Mimoso and Dennis Fisher look back at the news of the last couple of weeks, including some new NSA PR efforts and the Icefog cyberespionage campaign.
Gen. Keith Alexander and the National Security Agency continue to struggle to win back the public and political support they’ve lost while keeping their tenuous grasp on the collection tools they’ve been employing for more than a decade.
NSA Director Gen. Keith Alexander faced questions about whether the spy agency collects cell location data on Americans yesterday during a Senate Intelligence Committee hearing.
Versions 2.0 to 4.0 of the popular open source web framework Ruby on Rails are vulnerable to a web security issue involving cookies that could make it much easier for someone to login to an app as another user.
WASHINGTON–Faced with trying to accomplish its mission in an environment that suddenly has become quite hostile and inquisitive about its methods, the National Security Agency is becoming more and more public about the challenges that lie ahead and how the agency plans to address them. One of the key parts of this is a public […]
Dropbox filed an amicus brief with the FISA court, looking for permission to publish the number of National Security Letter requests it receives.
Hackers have only had a few days to play around with Apple’s latest mobile operating system, iOS 7, but apparently that’s all the time one of them needed to find a flaw that can allow anyone to bypass the lockscreen on phones running the much-buzzed operating system.
The NSA may have clamped down on the access its employees have to the data it collects, but like most other enterprises, the enhanced security is a reactive measure
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
