Security News

LinkedIn Slams Breach Data Reseller With Cease and Desist Order (Threatpost)
2016-05-20 16:35

LinkedIn is striking back against websites that are attempting to monetize the 117 million usernames and passwords stolen from the company as part of a 2012 data breach.

Threatpost News Wrap, May 20, 2016 (Threatpost)
2016-05-20 15:46

Mike Mimoso and Chris Brook discuss the news of the week, including a big LinkedIn breach, TeslaCrypt closing up shop, and a breakthrough in random number generation. The two also recap this...

Protecting Cloud APIs Critical to Mitigating Total Compromise (Threatpost)
2016-05-19 18:20

When it comes to cloud computing, APIs more or less drive everything, but in the eyes of some researchers, existing security controls haven't kept pace.

Android Qualcomm Vulnerability Impacts 60 Percent of Devices (Threatpost)
2016-05-19 17:08

Duo Labs describes how a critical Android vulnerability chains two exploits together to completely pwn an Android OS device.

Ubiquiti Networks Gear Targeted By Worm (Threatpost)
2016-05-19 14:14

Ubiquiti Networks is fending off a stubborn worm targeting its networking equipment running outdated AirOS firmware.

Master Decryption Key Released for TeslaCrypt Ransomware (Threatpost)
2016-05-19 13:41

The criminals behind the TeslaCrypt ransomware have closed up shop and publicly released the master decryption key that unlocks files encrypted by the malware.

2012 LinkedIn Breach Just Got a Lot Worse: 117 Million New Logins For Sale (Threatpost)
2016-05-18 16:47

More than 100 million LinkedIn usernames and passwords for sale on dark web as 2012 breach comes back to haunt business-savvy social network.

Scope of Gaping Android Security Hole Grows (Threatpost)
2016-05-18 11:00

Security researchers at Skycure are upping the ante on a vulnerability that it says now leaves 95.4 percent of all Android devices vulnerable to an attack that hands over control of a phone or...

Google Set to Kill SSLv3 and RC4 in SMTP, Gmail in June (Threatpost)
2016-05-17 21:02

Google announced this week that it will begin to disable SSLv3 and RC4 a month from now, on June 16.

Academics Make Theoretical Breakthrough in Random Number Generation (Threatpost)
2016-05-17 16:25

Two University of Texas academics have made what some experts believe is a breakthrough in random number generation that could have longstanding implications for cryptography and computer security.