Security News

Yahoo Mail XSS Bug Worth Another $10K to Researcher (Threatpost)
2016-12-09 13:00

Finnish security researcher Jouko Pynnonen found a second stored cross-site scripting vulnerability in Yahoo Mail in less than a year, both of which earned him $10,000 bug bounties.

Researchers Question Security in AMD’s Upcoming Zen Chips (Threatpost)
2016-12-08 18:22

Two German researchers are calling into question the security afforded by AMD’s Secure Encrypted Virtualization feature debuting in the chip maker's upcoming Zen server chips.

Researchers identify domain-level service credential exploit (Help Net Security)
2016-11-17 13:00

CyberArk Labs unveiled new research detailing what it considers to be a significant risk across all Windows endpoints, including those on Windows 10 with Credential Guard enabled. The exploit...

Researchers reveal WiFi-based mobile password discovery attack (Help Net Security)
2016-11-14 19:28

A group of researchers has come up with WindTalker, a new attack method for discovering users’ passwords and PINs as they enter them into their smartphones. WindTalker is the name of the attack,...

Researchers set to work on malware-detecting CPUs (Help Net Security)
2016-11-11 13:30

Adding hardware protections to software ones in order to block the ever increasing onslaught of computer malware seems like a solid idea, and a group of researchers have just been given a $275,000...

Signal Protocol’s crypto core has no major flaws, researchers find (Help Net Security)
2016-11-09 13:45

A group of computer science and cryptography professors and doctoral students has effected a security analysis of the secure messaging Signal Protocol – specifically, of its Key Agreement and...