Security News

Critical Yahoo Mail Flaw Patched, $10K Bounty Paid (Threatpost)
2016-01-19 15:02

A researcher earned a $10,000 bounty from Yahoo for a stored cross-site scripting vulnerability in Yahoo Mail.

OpenSSH Patches Critical Flaw That Could Leak Private Crypto Keys (Threatpost)
2016-01-14 19:33

OpenSSH patched a critical vulnerability that could be exploited by an attacker to force a client to leak private cryptographic keys.