Microsoft has issued a long write-up about flaws that could lead to escalation of privilege on Linux systems, which it has collectively called Nimbuspwn, but failed to mention that none of these flaws can be exploited remotely.
American security company WatchGuard has been accused of withholding full details of a remotely exploitable vulnerability in its firewall devices until news broke that the flaw was being exploited by attackers from Russia's military to assemble a botnet, according to a report in the American website Ars Technica.
Security firm Keeper Security has sued Ars Technica security editor Dan Goodin, accusing him and his employer of defamation, violation of the Illinois Deceptive Trade Practices Act and commercial disparagement under Illinois law.