The infosec community say California’s IoT security bill is “nice,” but doesn’t hit on the important issues. Go to Source

The Magecart Group has been blamed for the British Airways breach that compromised 380k payment cards. Go to Source

The development fits a trend that sees threat actors turning to well-known, commodity malware, overcoming its easy detection with ever-better obfuscation methods. Go to Source

A flaw in Safari – that allows an attacker to spoof websites and trick victims into handing over their credentials – has yet to be patched. Go to Source

Osiris’ fundamental makeup positions it in the fore of malware trends, despite being based on old source code that’s been knocking around for years. Go to Source

Overall, the number of email fraud attacks per targeted company rose 25 percent from the previous quarter (to 35 on average) and 85 percent from the year-ago quarter. Go to Source

Microsoft’s September Patch Tuesday release tackles three vulnerabilities actively being exploited in the wild. Go to Source

These stealthy downloaders initially infect systems and then only install additional malware on systems of interest. Go to Source

Exposed data included names, emails addresses and IP addresses. Go to Source

Adobe issued fixes for versions of its ColdFusion web development platform – including six critical flaws. Go to Source