Bruce has some thoughts on a well-circulated article suggesting that application security isn't that important after all.
Solid analysis of SimBad, a rogue malware campaign that infiltrated the Google Play store.
Terrifying tool that creates a spoofed cert for any website and signs an executable for AV Evasion.
More awesome research from Rapid7, on deserialization bugs. A topic, as regular readers know, that is near and dear to my heart.
And that's the news!