Open MongoDB databases are being targeted by criminals who are deleting the contents and asking for a ransom.

Security researcher and activist Claudio Guarnieri talks to Mike Mimoso about a new project announced last week at the Chaos Communication Congress called Security Without Borders.

Confidential documents and data belonging to Box.com users were accessible via search engine queries. Box.com has “fixed” the issue.

A security researcher claims that data belonging to doctors deployed in the United States Special Operations Command was left unsecured online.

Threatpost writers recap 2016’s biggest news stories, including the proliferation of IoT botnets, ransomware, the FBI vs. Apple story, and more.

A bug bounty hunter earned $5,000 for a Facebook hack that allowed him to bypass security protection and access any Facebook user’s true email address.

Researchers have neutralized the threat of the latest strain of CryptXXX v.3 ransomware, releasing a decryption tool for unlocking files.

A trove of data belonging to Ameriprise Financial was found earlier this month and included Social Security number, decryption keys and confidential internal company documents.

Mike Mimoso and Chris Brook discuss the news of the week including Yahoo’s latest breach announcement, a DDoS-for-hire crackdown, hackers seeking help with Mirai, and some new Adobe patches.

Yahoo disclosed today that attackers in 2013 stole data associated with more than 1 billion accounts. CISO Bob Lord said this incident is “distinct” from a 2014 attack in which 500 million accounts were breached.