Plaintext isn't any kind of data protection I ever heard of

from here

Hundreds of millions of passport numbers breached, and it turns out they were not encrypted. At some point we really have to start considering these monumental lapses a form of negligence that businesses and other organizations can be held accountable for.

You Made An Antivirus That False Alarms On Winlogon.exe?

from here and here

Thanks to Graham Cluley for bringing to my attention what is, frankly, an inexcusable cock-up in this day and age. In 2016 it shouldn't be possible for an antivirus to false alarm on a critical system binary like winlogon.exe and cause the system to crash, but apparently that is what Sophos has done.