Zero days are coming out of the shadows and are fast becoming a commodity for the criminal masses, warns Trustwave

Zero days are coming out of the shadows and are fast becoming a commodity for the criminal masses, warns Trustwave
Reality check. Its “far too easy” to break OEM updaters, and every one tested by Duo Labs contained a vulnerability
Privacy setback? US appeals court rules police don't need warrant to obtain cell tower records from mobile operators
ANALYSIS: Newspapers and Web sites of all kinds are fighting the use of ad blockers as a threat to their revenue, but maybe they’re fighting the wrong foe
Microsoft announces complete ban of simple or commonly used passwords from all of its accounts
Charging mobile devices using public sockets could be transmitting host of details, Kaspersky Lab warns
Mac attack. Growing ransomware threat on Mac sees security vendor extend its enterprise tool to Apple platform
Government announces GCHQ's National Cyber Security Centre to provide businesses with security guidance
Jon Callas heads back to Apple to help develop security technologies for more secure devices
Security researchers found DDoS service posing as a 'stress tester' that would attack any website for the meek sum of just £3.50
Ransomware gang closes down and gives crypto key to ESET, but reasons are unknown
Professional social network “invalidates” affected passwords, but says there has been no new breach
UK banks ordered to review their cyber security measures after the SWIFT Bank Bangladesh heist
GOOGLE I/O 2016 ANALYSIS: Nobody knows what security is planned for Google Home smart assistant, but buyers need to think about security no matter Google provides
LinkedIn account details including names, emails and passwords were originally stolen in 2012, but reportedly remain up for sale
Consumers are deeply conflicted over national security versus privacy, but still willing to share data with social networks
Peter Galvin, VP of strategy, Thales e-Security, offers a step by step guide on how security teams can ensure their data is protected against new threats
Nulled.IO forum used to sell credentials and cracks is itself hacked, potentially allowing law enforcement to solve other attacks
Emily Ratliff of the Linux Foundation explains the considerations to take when planning to fuzz your open source project
Spam levels are falling, but Kaspersky Lab says that malicious emails are increasingly becoming malicious and criminalised
Security gamification technology has already been used for hundreds of contests, helping to improve the state of security education
SWIFT continues to deny compromise of its systems, but warns of fresh attack on an unnamed bank
Update now. Flaw in popular open source compression tool uncovered by Cisco researcher
The importance of applying patches in a timely manner highlighted after warning of a SAP flaw fixed in 2010
PornHub offers up to £17,300 to anyone who discovers security flaws on the site
“Critical” patches for zero-day vulnerabilities in Internet Explorer, Adobe Flash, and Windows
Popular business apps used across many enterprises are leaky and present security risks, warns Wandera, but it won't say which ones they are...
Google-owned VirusTotal says everyone needs to contribute to security threat information sharing, blocks access to latest threat information to companies who don't play ball
Patchy mobile patching process? FCC and FTC begin smartphone security update investigation
794,000 customers contacted to warn about their details potentially being leaked in Kiddicare data breach