Damaging INFOSEC Credibility: News Articles and…

The author criticises sensational news reporting of security flaws, using examples like a Netgear CSRF vulnerability and a Tesla mobile-app credential-theft case to argue these issues are overstated: both require user interaction (phishing or installing a malicious app), have limited likelihood of mass exploitation, and should be communicated more accurately by researchers and media.