A consumer privacy campaign group, The Privacy Collective, has filed a lawsuit in Amsterdam against Salesforce and Oracle for allegedly violating the European Union’s General Data Protection Regulation over the companies' use of cookies and real-time bidding.
A group of academic researchers have developed practical attacks targeting two widely used end-to-end encryption schemes for email, which could lead to man-in-the-middle decryption attacks and exfiltration of private keys.
TeamTNT, a crypto-mining botnet, is stealing Amazon Web Services credentials from infected Docker and Kubernetes servers.
The EmoCrash exploit took advantage of a flaw in the Emotet trojan's code to help defenders stop the malware for more than six months.
A vulnerability in Apache Struts (CVE-2019-0230) can lead to remote code execution in some circumstances.