• Do IoT security risks require new legislation or will standards suffice?
• Bruce Schneier: It's time for internet-of-things regulation
• State-sponsored hacking needs to stop, says Congressman McCaul
• RSA panel covers cryptography trends, elections and more
• Microsoft: Nation-state cyberattacks have changed the security game
• Ramzan advocates collaborative security in RSAC keynote
• RSA President Rohit Ghai details new cybersecurity platform at RSAC 2017
• Nation-state cyberattacks rising, warns former NSA director
• Ransomware threat continues to evolve, defense needs to catch up
• Trump tells White House cybersecurity officer, 'You're fired'
• Corero: Telecom carriers have fallen behind on DDoS defense
• NSA contractor indicted for stealing elite cyberweapons over 20 years
• Is the Ticketbleed flaw the new Heartbleed vulnerability?
• IoT security threat to become real post-Mirai at RSA Conference 2017
• Rapid7's Brown and Beardsley address IoT security issues
• Corero Network Security on why DDoS mitigation strategy must improve
• Google to appeal after loss in cloud data privacy case
• SQL Slammer worm makes a comeback 14 years later
• Q&A: Rapid7's Beardsley and Brown take on bug bounty programs, IoT
• Microsoft delays Windows zero-day patch; researcher drops exploit code
• Experts debate effects of government cybersecurity executive order
• Google G Suite updates aim to improve phishing protection
• Pentagon hack possible due to bad vulnerability management
• Tatu Ylonen explains the risks of IoT SSH implementations
• RSA Conference 2017 "not impacted" by Trump's executive order
• RSAC 2017 Innovation Sandbox highlights top 10 cyber startups
• Hacked CCTV cameras in DC before inauguration leave unanswered questions
• Q&A: Rapid7's Beardsley and Brown dish on Mirai botnet, pen testing
• Symantec CA report offers more clarity on certificate transparency catch
• Google creates its own root certificate authority
• How improper SSH key management is putting enterprises at risk
• Americans split on federal government security, encryption attitudes
• More than 200 vulnerabilities found in Trend Micro security products
• Microsoft defeats DOJ appeal in cloud data privacy case
• Heartbleed bug still found to affect 200,000 services on the web
• Project Zero finds Cisco WebEx vulnerability in browser extensions
• Certificate Transparency snags Symantec CA for improper certs
• SEC to investigate the Yahoo breach disclosures
• Tatu Ylonen: Bad SSH security practices are exposing enterprises
• Future of the federal CISO position in question as Touhill steps down
• Carbanak gang using Google services for command and control
• Vulnerable Adobe extension downloads covertly to Chrome
• Windows 10 security tackles exploits, while Windows 7 gets a warning
• US-CERT reminds users that Windows SMB v1 needs to die
• Gmail phishing campaign uses real-time techniques to bypass 2FA
• Microsoft privacy tools give users control over data collection
• St. Jude Medical finally patches vulnerable medical IoT devices
• Google Cloud KMS simplifies the key management service, but lacks features
• Insecure MongoDB configuration leads to boom in ransom attacks
• January Patch Tuesday sparse before Windows security updates change
• Git repos hide secret keys, rooted out by Truffle Hog
• In a post-Mirai world, the FTC wants more secure routers from D-Link
• FTC launches competition to improve IoT device security
• Doxware: New ransomware threat, or just extortionware rebranded?
• SSL certificate validation flaw discovered in Kaspersky AV software
• Decades-old bug in the libpng open source graphics library patched
• Why ad fraud botnets have become so hard to stop
• FDA issues medical device cybersecurity guidance for manufacturers
• Critical PHPMailer library vulnerability patched, and repatched
• 'Switcher' Android Trojan targets routers with rogue DNS servers
• Massive ad fraud campaign Methbot profits exceed $3 million per day
• Fancy Bear ties to Kremlin strengthened with Ukraine military hack
• Yahoo breach data reveals the need for ethical breach reporting
• Work group attempts to reconcile 'going dark' with strong cryptography
• Google Project Wycheproof offers testing suite for crypto libraries
• Gas stations get three extra years before EMV liability shift
• Google and Microsoft herald death of Flash with default browser blocks
• Vulnerable websites make up half of the internet's top sites
• Yet another Yahoo breach compromises more than 1 billion accounts
• Major Netgear security flaw in routers gets a beta patch
• Facebook Certificate Transparency Monitoring tool will help secure web
• Dec. 2016 Patch Tuesday caps off a record-breaking year for Windows
• Unique threat offers victims ransomware decryption to spread infections
• IBM's Watson for Cyber Security puts a new face on machine learning
• Experts unsure if cyber attribution research will yield results
• More internet-connected devices plagued by attacks, vulnerabilities
• Exploit kit delivered via malvertising targets unpatched systems
• Experts debate the key points of the final Obama cybersecurity report
• Android app security tested by malware and vulnerabilities
• C-level unclear on governance, risk and compliance responsibility
• EU, U.S. authorities take down Avalanche global crimeware network
• Patched Tor browser vulnerability puts users' identity at risk
• Modified Mirai botnet could infect five million routers
• Last ditch Senate efforts fail to stall Rule 41 changes
• SF Municipal Railway restores systems after ransomware attack
• How ad fraud botnets are costing companies billions of dollars
• Cisco expands responsible disclosure timeline from 60 to 90 days
• DHS hiring puts into question the cybersecurity skills shortage
• N.Y. DA wants to turn back the clock on smartphone encryption
• Symantec acquires identity protection firm LifeLock for $2.3B
• Android backdoor discovered in firmware for budget devices
• Sunset for SHA-1 certificates, as Google firms up plans for deprecation
• White House confirms it warned Russia about election hacking
• Congress floats last-chance bill to delay Rule 41 changes
• DLL code flaw marks the latest Symantec vulnerability
• Chinese company caught preinstalling Android spyware on budget devices
• DHS and NIST release complementary IoT security guidance
• Android spyware detected in wild being used by government
• Massive FriendFinder Network breach prompts password security debate
• BlackNurse hits big routers with low-volume denial-of-service attack
• More