Remote code execution through Wifi on iOS and Android. Targeted malware found called Chrysaor.

iOS version 10.3.1 fixes a vulnerability where an attacker can run arbitrary code on your iPhone or iPad when he/she is in WiFi range. Many Android phones are also vulnerable, but no fix is available yet. More on the Android side can be found here.

Google and Lookout found a highly targeted malware package, which affected around 3 dozen individuals. It shows great similarity to the previously found Pegasus iOS malware.

Several owners of popular Github repositories were targeted with Dimnie malware, used to extract data from their machines. A deep dive in the malware can be found here.

A short look at the new filesystem that iOS 10.3 introduces, called APFS (Apple File System), which includes native encryption.

A large number of UK residents were targeted by what must have been a scary attack that knew their name and home address.

McAfee, who has been part of Intel for a while, now reverted back to being a stand-alone company. The merge wasn't working out great, with the two companies needing a very different level of agility.

Brian Krebs gives some recent examples of very hard to spot ATM hacks that try to hijack your card.

A brief look into the daily headaches that the Google Chrome security team need to digest, from OS bloatware to dodgy certificate authorities.

I'm not a man who enjoys April fool's jokes, but Stack Overflow's "Dance Dance Authentication" made me laugh out loud :-)