Security News > 2015 > April

Critical Vulnerabilities Affect JSON Web Token Libraries (Threatpost)
2015-04-01 18:58

Critical vulnerabilities exist in several JSON Web Token (JWT) libraries – namely the JavaScript and PHP versions – that could let an attacker bypass the verification step.

Verizon Allows Opt Out of UIDH Mobile Supercookie (Threatpost)
2015-04-01 17:30

Verizon Wireless has made a change that now allows customers to opt out of the ad-targeting program that relies on the so-called supercookie identifier that was inserted into Web requests users...