What started as a normal-enough bug report spiraled into talk of lawyers and reaching out over the researcher’s head to drag his contract employer in. Source: Sophos

The US presidential campaign of Bernie Sanders found itself in trouble when a staffer improperly accessed a voter database belonging to the rival campaign of Hillary Clinton. Source: Sophos

57.5% of the apps still don’t offer 2FA authentication, and 12.5% don’t bother to check whether the SSL certificate is legit. Source: Sophos

For 3 years, the same Office exploit has topped the charts of criminal usage – but there’s a new kid on the block. Source: Sophos

Digital gift card retailer Gyft has forced a password reset for some of its users. The move comes in response to the theft of usernames and passwords from a subset of Gyft customers. Mountain View, Calif. based Gyft lets customers buy and use gift cards entirely from their mobile devices. Acting on a tip from a trusted source […]

Fraud analysts in the banking industry tell KrebsOnSecurity that the latest hospitality firm to suffer a credit card breach is likely Landry’s Inc., a company that manages a nationwide stable of well-known restaurants — including Bubba Gump, Claim Jumper, McCormick & Schmick’s, and Morton’s.  Update, 2:57 p.m. ET: Landry’s has acknowledged an investigation. Their press release […]

Hzone threatened to infect the admin for a site that planned to write about its week-long spillage of a laundry list’s worth of PII. Source: Sophos