Security News

Critical Yahoo Mail Flaw Patched, $10K Bounty Paid (Threatpost)
2016-01-19 15:02

A researcher earned a $10,000 bounty from Yahoo for a stored cross-site scripting vulnerability in Yahoo Mail.

OpenSSH Patches Critical Flaw That Could Leak Private Crypto Keys (Threatpost)
2016-01-14 19:33

OpenSSH patched a critical vulnerability that could be exploited by an attacker to force a client to leak private cryptographic keys.

Microsoft Patches Six Critical Flaws With First Update of 2016 (Threatpost)
2016-01-12 20:41

Microsoft only released nine bulletins for its first Patch Tuesday of 2016, but six of them are marked critical and seven can lead to remote code execution.