Cyber Security, Without the Jargon

SAP disclosed a credential-leaking flaw in its Cloud SDK for Python, while independent testing found the repaired behavior missing from six later releases. The durable fix is an upgrade plus a small test at the trust boundary.

Attackers reached root on a fully patched Ivanti Connect Secure appliance and cleaned up much of their trail. The repair needs two receipts: proof that the entry path is closed and evidence that the earlier appliance was not already used.

Researchers found a three-step route to full control of two LG webOS television models from the same local network. Here is what to update, what to separate, and what not to panic about.

Researchers found malware built into the firmware of thousands of low-cost Android phones. Here is how to check a phone before moving your messages, banking, and family accounts onto it.

Authorities disrupted two tools used in China-linked intrusions. Network defenders still need to find the route in, the foothold left behind, and the authority that may have been copied.