412 million user accounts compromised to reveal weak password security

OpenSSL Patches High-Severity Denial-of-Service Bug
An OpenSSL update released on Thursday patched three vulnerabilities included one rated high severity in TLS connections using the ChaCha20-Poly 1305 ciphersuite.

Yahoo staff knew they were breached two years ago
Its quarterly report says that a state-sponsored actor had access to the company’s network in late 2014

Signal Audit Reveals Protocol Cryptographically Sound
Academics audited the popular end-to-end encryption app Signal and their findings are encouraging.

Risk of Election Day Cyberattacks Low According To Experts
Security experts monitoring cyber-chatter for virtual and real-world threats against U.S. Election Day targets don’t believe there will be cyberattack or al-Qaeda terror attack this Tuesday.

Google Releases Supplemental Patch for Dirty Cow Vulnerability
Google’s November Android Security Bulletin patched 15 critical vulnerabilities, but only a supplemental patch for the Dirty Cow Linux vulnerability.

TrickBot Banking Trojan Adds New Browser Manipulation Tools
The banking Trojan TrickBot is evolving fast, according to researchers, and within weeks will expand its victim list and attack scope.