Boko Haram takes a page from ISIS's information operations playbook and shows the junior varsity can be a murderous and coldly repellent as the varsity.

Consensus attribution of the Anthem breach to China leads analysts to ask what good such attribution does. Opinion ranges from "none" to "a lot."

Observers think the Lenovo affair is just "the tip of the crapware iceberg."

The FREAK (Factoring Attack on RSA-EXPORT Keys) vulnerability is said to affect export-grade encryption in widespread use since the 1980s, enabling attackers to break HTTPS in both Apple and Android devices.

Cisco's Talos unit observes attackers using the Angler exploit kit to shadow GoDaddy subdomains.

Symantec describes a phishing campaign designed to induce iCloud users to surrender credentials.

AdaptiveMobile finds a worm, "Gazon," spreading through mobile devices via SMS spam: the hook's a bogus Amazon gift card offer.

A MongoDB zero-day exploit is hawked in the black market.

Mobile payment systems are increasingly popular but increasingly vulnerable, and banks are reported "scrambling" for a fix to the systems' lax security.

The US GAO tells the FAA its National Airspace System is vulnerable to cyber attack. The White House releases its annual cyber report card for Federal agencies to Congress: grades are disappointing — if many agencies were middle-schoolers, they'd spend their summer in remedial classes.

China wonders why people object to its surveillance policies, since, China says, they're so American in style.

Former US DCI Petraeus pleads to a misdemeanor. Former Secretary of State Clinton's email accounts are scrutinized.