• Tatu Ylonen explains the risks of IoT SSH implementations
• RSA Conference 2017 "not impacted" by Trump's executive order
• RSAC 2017 Innovation Sandbox highlights top 10 cyber startups
• Hacked CCTV cameras in DC before inauguration leave unanswered questions
• Q&A: Rapid7's Beardsley and Brown dish on Mirai botnet, pen testing
• Symantec CA report offers more clarity on certificate transparency catch
• Google creates its own root certificate authority
• How improper SSH key management is putting enterprises at risk
• Americans split on federal government security, encryption attitudes
• More than 200 vulnerabilities found in Trend Micro security products
• Microsoft defeats DOJ appeal in cloud data privacy case
• Heartbleed bug still found to affect 200,000 services on the web
• Project Zero finds Cisco WebEx vulnerability in browser extensions
• Certificate Transparency snags Symantec CA for improper certs
• SEC to investigate the Yahoo breach disclosures
• Tatu Ylonen: Bad SSH security practices are exposing enterprises
• Future of the federal CISO position in question as Touhill steps down
• Carbanak gang using Google services for command and control
• Vulnerable Adobe extension downloads covertly to Chrome
• Windows 10 security tackles exploits, while Windows 7 gets a warning
• US-CERT reminds users that Windows SMB v1 needs to die
• Gmail phishing campaign uses real-time techniques to bypass 2FA
• Microsoft privacy tools give users control over data collection
• St. Jude Medical finally patches vulnerable medical IoT devices
• Google Cloud KMS simplifies the key management service, but lacks features
• Insecure MongoDB configuration leads to boom in ransom attacks
• January Patch Tuesday sparse before Windows security updates change
• Git repos hide secret keys, rooted out by Truffle Hog
• In a post-Mirai world, the FTC wants more secure routers from D-Link
• FTC launches competition to improve IoT device security
• Doxware: New ransomware threat, or just extortionware rebranded?
• SSL certificate validation flaw discovered in Kaspersky AV software
• Decades-old bug in the libpng open source graphics library patched
• Why ad fraud botnets have become so hard to stop
• FDA issues medical device cybersecurity guidance for manufacturers
• Critical PHPMailer library vulnerability patched, and repatched
• 'Switcher' Android Trojan targets routers with rogue DNS servers
• Massive ad fraud campaign Methbot profits exceed $3 million per day
• Fancy Bear ties to Kremlin strengthened with Ukraine military hack
• Yahoo breach data reveals the need for ethical breach reporting
• Work group attempts to reconcile 'going dark' with strong cryptography
• Google Project Wycheproof offers testing suite for crypto libraries
• Gas stations get three extra years before EMV liability shift
• Google and Microsoft herald death of Flash with default browser blocks
• Vulnerable websites make up half of the internet's top sites
• Yet another Yahoo breach compromises more than 1 billion accounts
• Major Netgear security flaw in routers gets a beta patch
• Facebook Certificate Transparency Monitoring tool will help secure web
• Dec. 2016 Patch Tuesday caps off a record-breaking year for Windows
• Unique threat offers victims ransomware decryption to spread infections
• IBM's Watson for Cyber Security puts a new face on machine learning
• Experts unsure if cyber attribution research will yield results
• More internet-connected devices plagued by attacks, vulnerabilities
• Exploit kit delivered via malvertising targets unpatched systems
• Experts debate the key points of the final Obama cybersecurity report
• Android app security tested by malware and vulnerabilities
• C-level unclear on governance, risk and compliance responsibility
• EU, U.S. authorities take down Avalanche global crimeware network
• Patched Tor browser vulnerability puts users' identity at risk
• Modified Mirai botnet could infect five million routers
• Last ditch Senate efforts fail to stall Rule 41 changes
• SF Municipal Railway restores systems after ransomware attack
• How ad fraud botnets are costing companies billions of dollars
• Cisco expands responsible disclosure timeline from 60 to 90 days
• DHS hiring puts into question the cybersecurity skills shortage
• N.Y. DA wants to turn back the clock on smartphone encryption
• Symantec acquires identity protection firm LifeLock for $2.3B
• Android backdoor discovered in firmware for budget devices
• Sunset for SHA-1 certificates, as Google firms up plans for deprecation
• White House confirms it warned Russia about election hacking
• Congress floats last-chance bill to delay Rule 41 changes
• DLL code flaw marks the latest Symantec vulnerability
• Chinese company caught preinstalling Android spyware on budget devices
• DHS and NIST release complementary IoT security guidance
• Android spyware detected in wild being used by government
• Massive FriendFinder Network breach prompts password security debate
• BlackNurse hits big routers with low-volume denial-of-service attack
• Postelection Russian hacker cyberattacks evade malware detection
• Pawn Storm APT ramps up attacks after Google's zero-day disclosure
• Adobe data breach settlement pays $1 million to 15 states
• Yahoo breach investigation adds more questions than answers
• Google releases supplemental Android patch for Dirty COW
• Microsoft kills Windows zero-day flaw in November 2016 Patch Tuesday
• Poor OAuth implementation leaves millions at risk of stolen data
• Dark web markets get warning shots from global law enforcement
• Mirai botnet attacks Liberia as new and improved IoT malware looms
• Experts question Microsoft's Windows zero-day response
• Microsoft claims Windows zero-day exploited by Russian state actors
• Nematode worm could dismantle Mirai IoT botnet
• Mandatory certificate transparency for Chrome trust starts Oct 2017
• The Shadow Brokers dumps list of NSA-targeted servers
• Mozilla drops WoSign as trusted certificate authority, adopts TLS 1.3
• FCC passes new ISP privacy rules to protect customers
• Details emerging on Dyn DNS DDoS attack, Mirai IoT botnet
• Windows atom tables vulnerable to code-injection attack
• XNU kernel vulnerability patched for iOS and macOS
• Adobe Flash patch for Flash zero-day exploit on Windows
• Clapper, Flashpoint: Dyn DNS DDoS attacker likely not a state actor
• FBI queried on use of vulnerabilities equities process in Playpen case
• Drammer proves Rowhammer can be used to root Android
• More