More than a dozen flaws in smart-city gear could open the door to attackers bent on sowing public panic, according to IBM X-Force.

These vulnerabilities have existed for over 20 years, and we are not even close to closing the door on these significant risks.

Cisco also pushed out seven high-severity fixes for its SD-WAN solution for business users, and a patch for a DoS flaw in the Cisco Nexus 9000 Series Fabric Switches.

Cisco also patched three medium-security flaws in its network security offerings; and, it issued a fix for a high-severity bug in its platform for mobile operator routers, StarOS.

The planned threading in shared memory update gives bad actors a way around the timer mitigations released by browser vendors.

A draft document lays out its criteria for addressing various flaws and notes the exceptions.

Many Android device manufacturers are not telling the truth when they say they have patched devices, researchers found.

AMD notified users about new available Spectre CPU firmware and Windows 10 patches.

Mike Mimoso and Chris Brook discuss the news of the week, including Microsoft’s XP patches, Hidden Cobra, a Nigerian BEC campaign, MacRansom, and more.

The news of the week is discussed, including Schneier’s DDoS article, a patched IE/Edge zero day, a new OS X malware detection method, and Google’s Project Zero prize.