Open Whisper Systems, the group behind Signal, was served with a subpoena earlier this year but was unable to produce most of the data it was asked for.

In Cigital’s seventh annual Building Security in Maturity Model report, cloud, agile software development and IoT factor into maturing secure software movement.

Researchers are warning patients who use insulin pumps made by Johnson & Johnson this week that vulnerabilities in the devices could be exploited to trigger an overdose.

A Linux admin and open source developer has come up with a 48-character attack that crashes Linux servers, but experts argue the security implications of the bug.

Apple said over the weekend it would soon distrust certificates issued by WoSign’s Free SSL Certificate G2 intermediate CA on macOS.

An attacker known as Anna-senpai released source code for the Mirai malware, which was used in a 620 Gbps DDoS attack against Krebs on Security.

The Firefox browser will now deny TLS connections to servers using weak Diffie-Hellman keys.

Victims infected with the MarsJoke ransomware can now decrypt their files; researchers cracked the encryption in the CTB-Locker lookalike last week.