Mike Mimoso and Chris Brook discuss the news of the week, including the nuclear power plant ‘disruption,’ the StrongPity APT group, and the proliferation of IoT botnets.

A researcher has found a backdoor, which he calls Pork Explosion, in an Android bootloader built by Foxconn.

A popular Android app called Nine leaks Microsoft Exchange user credentials when users are tricked into connecting to rogue wireless access points.

Bug hunters earned $30,000 in rewards for reporting 21 security flaws that were fixed in Chrome 54.

Facebook announced this week that its paid out more than $5 million to 900 researchers in the five years since it implemented its bug bounty program.

A vulnerability in Cisco’s meeting server software allows a remote attacker to masquerade as legit user.

One year after kicking off monthly Android security updates and Google still is way behind Apple when it comes to patching.

Women’s accessories giant Vera Bradley is reporting a breach of its retail store point-of-sale system.

The head of an international nuclear energy consortium said this week that a cyber attack caused a ‘disruption’ at a nuclear power plant in the last several years.

Microsoft released 10 security bulletins on Patch Tuesday that included patches for five zero day vulnerabilities under attack that had not been publicly disclosed until today.