The flaws disclosed this month are related to a critical bug previously discovered by VerSprite in April 2018. Go to Source

In parts of the developing world, dissidents and journalists face hostile governments and other threats — and mobile is their only access to the internet. Go to Source

Hours after researchers publicly disclosed an app that was caught stealing and uploading browser history data, Apple removed it from the Mac App Store. Go to Source

By implementing the “Equifax bug,” it’s the first known time a Mirai IoT botnet variant has targeted an Apache Struts vulnerability. Go to Source

A macOS App called Adware Doctor blocks ads, but shares user browser history with a China-based domain. Go to Source

The main source of infection on industrial control systems was the internet, researchers at Kaspersky Lab found in a new report. Go to Source

Spreading via fake Android apps, the malware lifts a range of sensitive information from victims’ devices. Go to Source

An exhaustive scan shows hundreds of thousands of websites potentially exposing sensitive data such as database passwords, API keys and so on. Go to Source

The airline said information like name, address and bank card details like CVC code were compromised. Go to Source

The Threatpost team breaks down the biggest news from the week ended Sept. 7. Go to Source