Top 10 Stories

JavaScript web apps and web servers are susceptible to a specific type of vulnerabilities/attacks known as regular expression (regex) denial of service (ReDoS). These vulnerabilities take place when an attacker sends large and complex pieces of text to the open input of a JavaScript-based web server or app. View Full Story ORIGINAL SOURCE: Bleeping Computer

No longer the carrot, now the stick: the European Commission is considering imposing an hour-long deadline for social networks to remove terrorist and extremist content after voluntary measures appear to have failed. View Full Story ORIGINAL SOURCE: ZDNet

If smart appliances that can be remotely controlled over the internet were to be compromised and used in a botnet, then attackers could cause local power outages or even large-scale blackouts, according to a presentation given by Princeton University researchers at the USENIX Security Symposium. View Full Story ORIGINAL SOURCE: CSO Online

The peak body representing tech giants Facebook, Google, Twitter and Amazon has blasted a Coalition bill that would force them to assist law enforcement agencies in decrypting private communications. View Full Story ORIGINAL SOURCE: The Guardian

The number of computer hacking prosecutions fell for the second successive year in 2017, despite the ever-increasing threat to businesses and individuals, says RPC, the City-headquartered law firm. View Full Story ORIGINAL SOURCE: London Loves Business

Asked only once at a Senate hearing Thursday about the fake security incident that’s needled his agency for more than a year, the chairman of the Federal Communications Commission, Ajit Pai, acknowledged for the first time knowing secretly for several months that his office likely fed U.S. lawmakers false information. View full story ORIGINAL SOURCE: Gizmodo

U.S. state election officials are demanding better access to sometimes classified federal government information about hacking threats to voting systems. View full story ORIGINAL SOURCE: Reuters

The Trump administration has reportedly reversed an Obama-era framework for how and when the US can use cyber attacks against foes. President Trump undid Presidential Policy Directive 20 yesterday according to the Wall Street Journal's sources, and with it reversed a classified framework detailing a multi-agency process that must be followed before carrying out an attack. View full story ORIGINAL SOURCE: Engadget

Security researchers from Proofpoint have discovered a new malware strain that they named Marap and which is currently distributed via massive waves of spam emails carrying malicious attachments (malspam). View full story ORIGINAL SOURCE: Bleeping Computer

Hundreds of Google employees have written to the company to protest against plans to launch a "censored search engine" in China. They said the project raised "urgent moral and ethical questions" and urged the firm to be more transparent. View full story ORIGINAL SOURCE: BBC