Target’s Jodie Kautt on the benefit of innovation beyond the enterprise

Outlook can leak NTLM hashes, potential RCE in a chipset for Wi-Fi calling in phones (and autos!?), the design of OpenSSH's sandboxes, more on the direction of OWASP, celebrating 25 years of Curl.

The U.S. agency tasked with protecting the nation’s cybersecurity and infrastructure added a vulnerability targeting Adobe ColdFusion to its catalog of known exploits after the software maker issued a patch the day before. 

The step comes under a plan announced last May to make 2FA mandatory for all contributors by the end of 2023. If successful, it could help to better secure the accounts of over 100 million users.