- Seeking ways to make computer passwords unnecessary, NYTimes.com
- ‘Fileless’ malware installs into RAM, The Register
- New steganography technique relies on letter shapes, The Register
- Advertising trojan with Swiss signature, The H Security: News and Features
- VLC Media Player 2.0.1 closes security holes, The H Security: News and Features
- Researchers find privacy and security holes in Android apps with ads, Ars Technica
- Avi Rubin on computer security, Schneier on Security
- Apple, CBS, Fox, Sony, Warner Bros. and 15 others hacked?, ZDNet
- Twitter bots target Tibetan protests, Krebs on Security
- Facebook ‘cloaking’ flaw allows unexpected snooping, The Register
- Trial finds EIGHT WAYS to defeat Google, PayPal and other SSOs, The Register
- Newly compiled driver shows Duqu authors still at work, threatpost
- Address spoofing vulnerability in iOS’s Safari, The H Security: News and Features
- Exploit for Ms12-020 RDP bug moves to Metasploit, threatpost
- New Mac OS X malware variant spotted in the wild, ZDNet
- Firefox users to get secure Google search by default, threatpost
- Compromised WordPress sites serving client-side exploits and malware, ZDNet
- Chrome 17 update fixes high-risk vulnerabilities, The H Security: News and Features
- Embarrassing security failure at PayPal, The H Security: News and Features
- CA reveals ARCserve DDOS threat, The Register
- Video: College professor, students crack Zeus trojan mystery, threatpost
- LibreOffice 3.4.6 fixes “potential security problem”, The H Open Source: News and Features
- Firefox switching to encrypted Google search, The H Open Source: News and Features
- Mozilla proposes change to handling of subordinate CA certificates, threatpost
- Scores of US federal agencies still open to 2008 cache attack, The Register
- Address spoofing vulnerability discovered in Mobile Safari on iOS 5.1, Ars Technica
- Can translucency save privacy in the cloud?, Slashdot