The attack makes use of previously disclosed critical vulnerabilities in the Apple Safari web browser and iOS. Go to Source

Researchers show how rogue web applications can be used to attack vulnerable browser extensions in a hack that gives adversaries access to private user data. Go to Source

The French Data Protection Authority (DPA) found a lack of transparency when it comes to how Google harvests and uses personal data for ad-targeting purposes. Go to Source

The patches are part of Adobe’s second unscheduled update this month. Go to Source

Two apps on Google Play were infecting devices with the Anubis mobile banking trojan. Go to Source

The Fallout EK has added the latest Flash vulnerability to its bad of tricks, among other tune-ups. Go to Source

Threatpost editors break down the top headlines from the week ended Jan. 18. Go to Source

A default configuration allows full admin access to unauthenticated attackers. Go to Source

Twitter has fixed the issue, which has been ongoing since 2014. Go to Source

VOIPO acknowledged that a development server had been accidentally left publicly accessible, and took the server offline. Go to Source