Security News > 2016 > December

My Priorities for the Next Four Years (Schneier on Security)
2016-12-15 09:50

Like many, I was surprised and shocked by the election of Donald Trump as president. I believe his ideas, temperament, and inexperience represent a grave threat to our country and world. Suddenly,...

Yahoo Discloses Data From 1 Billion Accounts Stolen in 2013 (Threatpost)
2016-12-15 00:16

Yahoo disclosed today that attackers in 2013 stole data associated with more than 1 billion accounts. CISO Bob Lord said this incident is "distinct" from a 2014 attack in which 500 million...

ENISA says crypto backdoors are a bad idea (Help Net Security)
2016-12-14 20:54

“History has shown that technology beats legislation, and criminals are best placed to capitalise on this opportunity,” the European Network and Information Security Agency (ENISA) noted in a...

Mirai Giving DDoS-as-a-Service Industry a Boost (Threatpost)
2016-12-14 19:12

Activity on a number of Dark Web hacker forums indicates that while people are downloading the Mirai malware source code, they need help setting it up.

Google Discloses Contents of Eight National Security Letters (Threatpost)
2016-12-14 18:57

Google Tuesday disclosed the contents of eight National Security Letters it received between 2010 and 2015, becoming the latest company under reforms afforded by the USA Freedom Act to do so.

Apple Fixes 97 Vulnerabilities Across macOS, iTunes, Safari, iCloud (Threatpost)
2016-12-14 18:04

Apple released a massive update for macOS Sierra on Tuesday to address 72 vulnerabilities in the operating system.

Flash Player Bug An Eavesdropper’s Delight (Threatpost)
2016-12-14 17:21

Details have surfaced on another patched Flash Player flaw that is a potential privacy nightmare.

Corporate Office 365 users hit with clever phishing attack (Help Net Security)
2016-12-14 15:01

Corporate Office 365 users are being targeted by phishers using a clever new trick to bypass email filters and the default security protections of the Microsoft service. The attack comes in the...

DDoS attacks via WordPress now come with encryption (Help Net Security)
2016-12-14 13:51

Kaspersky Lab experts have noted an emerging trend – a growth in the number of attacks using encryption. Such attacks are highly effective due to the difficulty in identifying them amongst the...

End the air gapping myth in critical infrastructure security (Help Net Security)
2016-12-14 13:30

In an environment where we’re seeing increasing demand for connectivity between operational technology (OT) and IT, security teams have to dispel the air gapping myth to acknowledge that IT...