Sloppy Android developers not following security guidelines for external storage opens the door to device takeover and more.

Malware can to worm its way onto Macs thanks to a recently discovered code-signing bypass flaw.

Owners of Github repositories were the focus of a phishing campaign spreading the Dimnie information-stealing malware.

An unexpected behavior in a relatively new and popular open source API framework called Swagger could lead to code execution, researchers at Rapid7 said. The company today disclosed some details on the vulnerability, and released a Metasploit exploit module and a proposed patch written by researcher Scott Davis who found the flaw. Details were privately...