September 16, 2016
Threatpost News Wrap, September 16, 2016
Cover your webcam – protect your privacy from hackers
September 16, 2016
There’s a lot that happens in the cybersecurity world, with many stories getting lost in the mix. In an effort to keep our readers informed and updated, we present the Webroot Threat Recap, highlighting 5 major security news stories of the week. Patch Tuesday Changing Update Format In one of the largest changes that Microsoft has implemented, […]
September 16, 2016
National Cyber Security Centre to shift UK to ‘active’ defence
September 16, 2016
Judge Decides to Extradite Lauri Love to the US
September 16, 2016
Pramworld admits mailing list breach
September 16, 2016
FBI Director James Comey wants you to cover your webcam
September 16, 2016
The Feds Will Soon Be Able to Legally Hack Almost Anyone
September 16, 2016
Pardon Edward Snowden
September 16, 2016
Gmail outage for business users lasted over 12 hours
September 16, 2016
Some security advice for Colin Powell to better protect his Gmail account
September 16, 2016
Chrome and Firefox mark ThePirateBay.org as Malicious Site Again
September 16, 2016
You call it ‘hacking.’ I call it ‘investigation’
September 16, 2016
Emerging technologies are poking holes in security
September 16, 2016
The real threat to our elections: Disinformation and doubt
September 16, 2016
New Google API cryptographically secures Chromebooks
September 16, 2016
Ransomware scum infect Comic Relief server: Internal systems taken down
September 16, 2016
Researcher says Patch Tuesday fix should have been made earlier
September 16, 2016
Remote hacker nabs Win10 logins in ‘won’t-fix’ Safe Mode* attack
September 16, 2016
Cisco drops patch for nasty WebEx remote code execution hole
September 16, 2016
Online Ad Service ClixSense Hacked; 6M Plain-Text Passwords Leaked
September 15, 2016
Encryption backdoors? It’s an ongoing dialogue, say anti-terror bods
September 15, 2016
It’s OK for the FBI’s fake hacks to hack suspects’ PCs, says DoJ watchdog
September 15, 2016
Neverquest Trojan Gets Big Summer Update
September 15, 2016
Risk Medium Date Discovered September 13, 2016 Description Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Edge and Internet explorer […]
September 15, 2016
Attack Leverages Windows Safe Mode
September 15, 2016
Snowden: 4 big security and privacy assumptions he undermined
Oliver Stone’s movie about Edward Snowden, which opens on Friday, September 16th, 2016, has a lot of people looking back at one of the biggest information security breaches in US history, the one we learned about in June, 2013. That’s when the UK-based Guardian newspaper published classified information about the mass electronic surveillance activities of […]
September 15, 2016
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: kernel security, bug fix, and enhancement update Advisory ID: RHSA-2016:1847-01 Product: […]
September 15, 2016
Red Hat: 2016:1875-01: kernel-rt: Important Advisory Posted by Anthony Pell An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: […]
September 15, 2016
Red Hat: 2016:1883-01: kernel-rt: Important Advisory Posted by Anthony Pell An update for kernel-rt is now available for Red Hat Enterprise MRG 2.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: […]
September 15, 2016
Debian: 3667-1: chromium-browser: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3667-1 security@debian.org https://www.debian.org/security/ Michael Gilbert September 15, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : chromium-browser CVE ID : CVE-2016-5170 CVE-2016-5171 CVE-2016-5172 CVE-2016-5173 CVE-2016-5174 CVE-2016-5175 CVE-2016-7395 Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5170 A use-after-free issue […]
September 15, 2016
Debian: 3666-1: mysql-5.5: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3666-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 14, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : mysql-5.5 CVE ID : CVE-2016-6662 Dawid Golunski discovered that the mysqld_safe wrapper provided by the MySQL database server insufficiently restricted the load path for custom […]
September 15, 2016
Microsoft Shuts Down Zero Day Used in AdGholas Malvertising Campaigns
September 15, 2016
Cisco Patches Critical WebEx Meetings Server Vulnerability
September 15, 2016
Can you stay anonymous by hiding your face?
September 15, 2016
Hacked TalkTalk data used in scamming people with thousands of pounds
September 15, 2016
Trump website server config snafu left interns’ CVs exposed
September 15, 2016
Bruce Schneier on Probing Attacks Testing Core Internet Infrastructure
September 15, 2016
DDoSers do it more now, but they do it less fiercely*
September 15, 2016
Google offers $200,000 for Android-busting exploit
September 15, 2016
Will Congress ever vote on the “The Stop Mass Hacking Act”?
September 15, 2016
Internet of targets: Webcams and routers in the crosshairs of bad guys
Mass surveillance, stolen data, passwords and misused sensitive information; it seems that there is so much to worry about these days when it comes to your online privacy. All most people want is to browse the web and enjoy its treats instead of bumping into malware or other problems, right? Then you read about things occurring online that […]
September 15, 2016
‘Cyber Terrorists’ Hack Housing Authority Data; Demand $4k Ransom
September 15, 2016
Why hackers hack: Is it all about the money?
September 15, 2016
Cybersecurity In The Obama Era
September 15, 2016
Hack an Android phone remotely, and win $200,000
September 15, 2016
Hackers found 47 new vulnerabilities in 23 IoT devices at DEF CON
September 15, 2016
NTP reflection attacks hit record high
September 15, 2016
Mr. Robot eps2.9pyth0n-pt1.p7z – the security review
September 15, 2016
Hacker and chums jailed over gold bullion hack, track ‘n’ grab scam
September 15, 2016
Turning the tables on a scammer… by contacting his mum on Facebook
September 15, 2016
Gutted: 6.6M cleartext creds, dox, breached in ClixSense site hack
September 15, 2016
Double-dipping malware steals iOS creds and roots Android
September 15, 2016
Google GPS grab felt like a feature, was actually a bug
September 15, 2016
35,000 ARRIS cable modems at risk from firmware dumper bot
September 15, 2016
French hackers selling hidden .22 calibre pen guns on secret forums
September 15, 2016
It was discovered that there was a CSRF vulnerability in mailman, a web-based mailing list manager, which could allow an attacker to obtain a user’s password. For the stable distribution (jessie), this problem has been fixed in version 1:2.1.18-2+deb8u1. For the unstable distribution (sid), this problem has been fixed in version 1:2.1.23-1. We recommend that […]
September 15, 2016
Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5170 A use-after-free issue was discovered in Blink/Webkit. CVE-2016-5171 Another use-after-free issue was discovered in Blink/Webkit. CVE-2016-5172 Choongwoo Han discovered an information leak in the v8 javascript library. CVE-2016-5173 A resource bypass issue was discovered in extensions. CVE-2016-5174 Andrey Kovalev discoved a way to bypass […]
September 15, 2016
Discovered: September 15, 2016 Updated: September 15, 2016 3:44:33 PM Type: Trojan Infection Length: Varies Systems Affected: Linux Linux.Trojan is a generic detection used to identify malicious software that targets computers running the Linux operating system. Antivirus Protection Dates Initial Rapid Release version September 15, 2016 Latest Rapid Release version September 15, 2016 Initial Daily […]
September 15, 2016
Google Play obsessed with tracking Android users’ every move
September 14, 2016
DualToy Windows Trojan Attacks Android, iOS Devices
September 14, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft ASP.NET Core MVC is prone to multiple privilege escalation vulnerabilities. Attackers can exploit these issues to gain elevated privileges. Microsoft ASP.NET Core MVC 1.0.0 is vulnerable. Technologies Affected Microsoft ASP.NET Core MVC 1.0.0 Recommendations Block external access at the network boundary, unless external parties require service. […]
September 14, 2016
Risk Medium Date Discovered September 13, 2016 Description Microsoft Application Virtualization is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2007 SP3 Microsoft Office 2010 Service Pack 2 (32-bit editions) Microsoft Office 2010 Service Pack 2 (64-bit editions) […]
September 14, 2016
Phony Pokémon GO Android App Gave Attackers Root Access
September 14, 2016
Snowden Makes Case for a Presidential Pardon
September 14, 2016
An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2016:1865-01 Product: Red Hat Enterprise Linux Supplementary Advisory […]
September 14, 2016
Slackware: 2016-257-01: mariadb / mysql: Security Update Posted by Anthony Pell New mariadb or mysql packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. [More Info…] [slackware-security] mariadb / mysql (SSA:2016-257-01) New mariadb or mysql packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a […]
September 14, 2016
WADA cyberattack compromises agency’s database
The World Anti-Doping Agency (WADA) has revealed that it was the victim of a cyberattack, which it has attributed to the Russian cyberespionage group, Tsar Team (APT28). According to the agency, the group, which also goes by the moniker Fancy Bear, was able to gain access to its Anti-Doping Administration and Management System (ADAMS) database. […]
September 14, 2016
AdBlock Plus launches its ad-selling platform
September 14, 2016
Tenable brings network visibility into Google Cloud Platform
September 14, 2016
Adblock Plus wants to put more ads on your screen
September 14, 2016
A single ransomware network has pulled in $121 million
September 14, 2016
Pay-to-click ad service hacked, 6.6M plaintext passwords dumped
September 14, 2016
Google Project Zero Prize Pays $200,000 for Critical Vulnerability Chains
September 14, 2016
Surveillance Middlemen Make it Harder to Track Who’s Responsible For Hacks
September 14, 2016
Long-Secret Stingray Manuals Detail How Police Can Spy on Phones
September 14, 2016
Instagram users to take control over abusive comments
September 14, 2016
Microsoft Intune to support Android for Work
September 14, 2016
Google offers $200K for top prize in new Android hack challenge
September 14, 2016
Hackers smear Olympic athletes with data dump of medical files
September 14, 2016
US National Security Agency gets CREST smile
September 14, 2016
Logins for US Navy, NASA’s JPL among US gov logins sold on deepweb
September 14, 2016
Great British Block-Off: GCHQ floats plan to share its DNS filters
September 14, 2016
Top infosec vendors, cops, liberate thousands from ransomware
September 14, 2016
Researcher reports XSS hole in Google France
September 14, 2016
Dawid Golunski discovered that the mysqld_safe wrapper provided by the MySQL database server insufficiently restricted the load path for custom malloc implementations, which could result in privilege escalation. The vulnerability was addressed by upgrading MySQL to the new upstream version 5.5.52, which includes additional changes, such as performance improvements, bug fixes, new features, and possibly […]
September 14, 2016
Risk Level: Very Low. Type: Trojan.
September 14, 2016
Risk Level: Very Low. Type: Trojan.
September 14, 2016
Risk Level: Very Low. Type: Trojan.
September 14, 2016
A patchtastic day for Flash and Windows users – don’t delay!
September 13, 2016
Will iOS 10, “the biggest release of iOS ever,” brick your device?
September 13, 2016
This man is creating a chatbot for his mom so they can talk after she dies
September 13, 2016
Hacker jailed after stealing thousands of pounds worth of gold bullion
September 13, 2016
Microsoft Patches 47 Vulnerabilities with September Patch Tuesday
September 13, 2016
‘Now the cyber is so big’ says Donald Trump
September 13, 2016