Secure coding in Java: Bad online advice and confusing APIs – Help Net Security

stackoverflowA group of Virginia Tech researchers has analyzed hundreds of posts on Stack Overflow, a popular developer forum/Q&A site, and found that many of the developers who offer answers do not appear to understand the security implications of coding options, showing a lack of cybersecurity training.

https://www.helpnetsecurity.com/2017/10/03/secure-coding-java/

Moscow Deploys Facial Recognition to Spy on Citizens in Streets – Bloomberg

Moscow is adding facial-recognition technology to its network of 170,000 surveillance cameras across the city in a move to identify criminals and boost security.

Since 2012, CCTV recordings have been held for five days after they’re captured, with about 20 million hours of video stored at any one time.

https://www.bloomberg.com/news/articles/2017-09-28/moscow-deploys-facial-recognition-to-spy-on-citizens-in-streets

Cloudflare CEO: DDoS Attacks Will Now Be ‘Something You Only Read About In The History Books’ – Motherboard

Cloudflare, a major internet security firm, is on a mission to render distributed denial-of-service (DDoS) attacks useless. The company announced Monday that every customer—including those who only use its free services—will receive a new feature called Unmetered Mitigation, which protects against every DDoS attack, regardless of its size.

https://motherboard.vice.com/en_us/article/59dd5q/cloudflare-ceo-ddos-attacks-will-now-be-something-you-only-read-about-in-the-history-books

The CCleaner Malware Fiasco Targeted at Least 20 Specific Tech Firms | WIRED

HUNDREDS OF THOUSANDS of computers getting penetrated by a corrupted version of an ultra-common piece of security software was never going to end well. But now it’s becoming clear exactly how bad the results of the recent CCleaner malware outbreak may be. Researchers now believe that the hackers behind it were bent not only on mass infections, but on targeted espionage that tried to gain access to the networks of at least 20 tech firms.

https://www.wired.com/story/ccleaner-malware-targeted-tech-firms/