New submitter Zmobie writes: In a new program, the U.S. Air Force has converted and tested F-16 planes as drones that are able to fly with complex mission parameters. The program is designed to use retiring F-16 jets to act…

Microsoft Kills Off Security Bulletins
Microsoft has officially retired the security bulletins this week, which were issued to detail “each month’s slate of vulnerabilities and accompanying patches for customers — especially administrators responsible for companies’ IT operations,” writes Gregg Keizer via Computerworld. “The move to…

SAP Updates Two-Year-Old Patch for TREX Vulnerability
SAP has issued an updated patch for a code-injection vulnerability affecting the TREX search engine integrated into more than a dozen SAP products.

Office Zero Day Delivering FINSPY Spyware to Victims in Russia
Researchers have learned that the recently patched Office zero day was used to target victims in Russia with FINSPY spyware.

Phone Hack Uses Sensors To Steal PINs
University researchers created a browser-based JavaScript that leverages a phone’s smart device sensor data to steal PINs.

Netflix’s HTTPS Update Can’t Combat Passive Traffic Analysis Attacks
Academics argue that Netflix’s recent upgrade to HTTPS is doing little to protect its users from a passive traffic analysis attack.

Unsecured database exposed diabetics’ sensitive data
Close to a million records belonging to senior citizens in the US were exposed – and since deleted – but included details such as health insurance providers and medical issues

Pwned at the factory: attackers think outside the box
There are steps you can take to avoid ending up with a device that’s been compromised even before you’ve started up your new phone, but nothing can guarantee you’ll get a clean device

Nothing is certain except death, taxes – and tax scams, phishing and ransomware
It’s the time of year when criminals turn their attention to honest taxpayers – here’s our advice on what to look out for to avoid falling victim to their scams

Attackers using a Word zero-day to spread malware
Microsoft expected to patch the vulnerability later today, but meanwhile, here’s what we know and what you can do to protect yourself