Security News

Secure software development practices for developers, organizations and technology users
2018-04-03 11:30

SAFECode announced today the publication of the Fundamental Practices for Secure Software Development: Essential Elements of a Secure Development Life Cycle Program (Third Edition). The...

Firefox Fails at Keeping Passwords Secure, Developer Claims
2018-03-19 17:07

Recovering Encrypted Firefox Passwords via Brute Force Attacks is Easy, Developer Says Firefox does a poor job at securing stored passwords even if the user has set up a master password, a...

'NanoCore RAT' Developer Gets 33-Month Prison Sentence
2018-02-26 14:02

Arkansas Man Admits Developing, Selling Software Intended for Malicious UseArkansas developer Taylor Huddleston has been sentenced to serve more than two years in prison for developing, marketing...

Google booted 100,000 malicious developers from Google Play
2018-02-01 19:15

New malware and unwanted apps are discovered on Google Play nearly every day – or so it seems. According to Google’s statistics, in 2017 the company has taken down more than 700,000 apps that...

ZeuS Variant Abuses Legitimate Developer’s Website
2018-01-07 15:21

The official website of Ukraine-based accounting software developer Crystal Finance Millennium (CFM) was abused for the distribution of a variant of the ZeuS banking Trojan, Talos reports. read more

Critical Flaw in Major Android Tools Targets Developers and Reverse Engineers
2017-12-06 12:03

Finally, here we have a vulnerability that targets Android developers and reverse engineers, instead of app users. Security researchers have discovered an easily-exploitable vulnerability in...

Developers Targeted in ‘ParseDroid’ PoC Attack
2017-12-05 17:27

A proof of concept attack developed by researchers target users of the development platforms for Android and Java.

GitHub starts alerting developers of security vulnerabilities in dependencies
2017-11-20 18:34

Popular Git repository hosting service GitHub has introduced a new feature to help developers keep their projects safer: security alerts for vulnerabilities in software packages which their...

GitHub Warns Developers When Using Vulnerable Libraries
2017-11-17 17:26

Code hosting service GitHub now warns developers if certain software libraries used by their projects contain any known vulnerabilities and provides advice on how to address the issue. read more

Node.js security: Are developers confident in the quality of their code?
2017-11-10 13:00

A NodeSource and Sqreen joint developer survey of nearly 300 CTOs, CIOs and developers revealed that, while the developer community fully understands the risks of operating in the open Internet...