Truffle Security, creators of the new XSS Hunter tool that detects bugs and security vulnerabilities, elicited concern by allegedly inspecting sensitive user data. The company tweeted statistics about vulnerabilities it found, leading to accusations of infringing user privacy. Truffle swiftly deleted the tweet and defended its practice, claiming the reports viewed by employees were anonymised.
Qualys uncovers large-scale Murdoc Botnet campaign
The Murdoc Botnet, a new element of the Mirai campaign, is targeting IoT devices worldwide. Uncovered by Qualys, the botnet targets vulnerabilities in AVTECH cameras