Collaborate Disseminate
NIST has made a public plea for submissions for new crypto algorithms that can stand up against quantum computing and protect data. Continue reading NIST Calls for Submissions to Secure Data Against Quantum Computing
Panasonic Avionics has pushed back against research released Tuesday by IOActive disclosing vulnerabilities in in-flight entertainment systems. Continue reading Panasonic, IOActive Clash on Vulnerability Report
Now that a proposed revision to the Wassenaar Arrangement has been rejected, it will be up to the Trump administration to decide whether to attempt to renegotiate again. Continue reading Wassenaar Renegotiation Will Be in Trump Administration’s Hands
IOActive researchers disclosed vulnerabilities in Panasonic Avionics In-Flight Entertainment systems that could be abused to manipulate flight data shown to passengers, or steal their personal information. Continue reading In-Flight Entertainment System Flaws Put Passenger Data at Risk
Researchers at Flashpoint said their analysis of the latest ShadowBrokers dump of NSA tools leads them to believe an insider with access to a code repository stole the data. Continue reading ShadowBrokers Dump Came from Internal Code Repository, Insider
Experts at InfoArmor said the stolen database of 1 billion Yahoo accounts has been sold multiple times for at least $300,000 each time. Continue reading Stolen Yahoo Data Sold to Spammers, One Government Client
Nagios Core has been updated to take care of two critical vulnerabilities that can be pinned together to attack servers hosting the open source IT infrastructure monitoring software. Continue reading Nagios Core Patches Root, RCE Vulnerabilities
Microsoft followed Google’s lead and said it will soon block Flash Player by default in the Edge browser. Continue reading Microsoft, Google to Block Flash by Default in Edge, Chrome
Results of a NTIA survey published today show that researchers prefer open communication with vendors over financial compensation when it comes to vulnerability disclosure. Continue reading Bug Hunters Prefer Communication Over Compensation
Yahoo disclosed today that attackers in 2013 stole data associated with more than 1 billion accounts. CISO Bob Lord said this incident is “distinct” from a 2014 attack in which 500 million accounts were breached. Continue reading Yahoo Discloses Data From 1 Billion Accounts Stolen in 2013