Code Reuse a Peril for Secure Software Development

Open source and third-party software bugs haunt even the best developers’ projects, despite the industry’s best efforts to avoid them. Continue reading Code Reuse a Peril for Secure Software Development→

Google Discloses Contents of Eight National Security Letters

Google Tuesday disclosed the contents of eight National Security Letters it received between 2010 and 2015, becoming the latest company under reforms afforded by the USA Freedom Act to do so. Continue reading Google Discloses Contents of Eight National Security Letters→

Ransomware Gives Free Decryption Keys to Victims Who Infect Others

Researchers say they have uncovered a ransomware sample that is still under development that comes with a novel and nasty twist. Infected victims of the ransomware, known as Popcorn Time, have the option to either pay-up or they can opt to infect two others using a referral link. If the two new ransomware targets pay […] Continue reading Ransomware Gives Free Decryption Keys to Victims Who Infect Others→

Researchers Question Security in AMD’s Upcoming Zen Chips

Two German researchers are calling into question the security afforded by AMD’s Secure Encrypted Virtualization feature debuting in the chip maker’s upcoming Zen server chips. Continue reading Researchers Question Security in AMD’s Upcoming Zen Chips→

Solar Power Firm Patches Meters Vulnerable to Command Injection Attacks

Locus Energy has patched 100,000 of its residential and commercial power meters that were vulnerable to command injection attacks and code execution. Continue reading Solar Power Firm Patches Meters Vulnerable to Command Injection Attacks→