Security News

Symantec API Flaws reportedly let attackers steal Private SSL Keys and Certificates (The Hackers News)
2017-03-28 09:54

A security researcher has disclosed critical issues in the processes and third-party API used by Symantec certificate resellers to deliver and manage Symantec SSL certificates. The flaw,...

WordPress REST API Bug Could Be Used in Stored XSS Attacks (Threatpost)
2017-03-14 15:43

The recently patched REST API Endpoint vulnerability in WordPress could be leveraged to pull off stored cross-site scripting attacks.

Firefox Removing Battery Status API (Schneier on Security)
2016-11-07 18:59

Firefox is removing the battery status API, citing privacy concerns. Here's the paper that described those concerns: Abstract. We highlight privacy risks associated with the HTML5 Battery Status...