September 13, 2016
Backdoor targeting corporate data through… Microsoft Publisher files?
iOS 10 Security Updates Move to HTTPS
September 13, 2016
Red Hat: 2016:1858-01: ruby193-rubygem-actionpack: Moderate Advisory Posted by Anthony Pell An update for ruby193-rubygem-actionpack is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: ruby193-rubygem-actionpack security update Advisory ID: RHSA-2016:1858-01 Product: Red Hat Software Collections […]
September 13, 2016
Red Hat: 2016:1857-01: ror40-rubygem-actionpack: Moderate Advisory Posted by Anthony Pell An update for ror40-rubygem-actionpack is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: ror40-rubygem-actionpack security update Advisory ID: RHSA-2016:1857-01 Product: Red Hat Software Collections […]
September 13, 2016
Red Hat: 2016:1855-01: rh-ror42: Moderate Advisory Posted by Anthony Pell An update for rh-ror42-rubygem-actionview, rh-ror42-rubygem-activerecord, and rh-ror42-rubygem-actionpack is now available for Red Hat Software Collections. [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: rh-ror42 security update Advisory ID: RHSA-2016:1855-01 Product: Red Hat Software Collections Advisory URL: https://rhn.redhat.com/errata/RHSA-2016-1855.html Issue date: 2016-09-13 CVE Names: CVE-2016-6316 CVE-2016-6317 […]
September 13, 2016
Red Hat: 2016:1856-01: rh-ror41-rubygem-actionview: Moderate Advisory Posted by Anthony Pell An update for rh-ror41-rubygem-actionview is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: rh-ror41-rubygem-actionview security update Advisory ID: RHSA-2016:1856-01 Product: Red Hat Software Collections […]
September 13, 2016
An update for libarchive is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: libarchive security update Advisory ID: RHSA-2016:1844-01 Product: Red Hat Enterprise Linux […]
September 13, 2016
An update for libarchive is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: libarchive security update Advisory ID: RHSA-2016:1850-01 Product: Red Hat Enterprise Linux […]
September 13, 2016
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: chromium-browser security update Advisory ID: RHSA-2016:1854-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2016-1854.html Issue date: 2016-09-12 CVE Names: […]
September 13, 2016
Adobe Back With New Flash Player Security Update
September 13, 2016
Risk Level: Very Low. Type: Trojan.
September 13, 2016
Discovered: September 12, 2016 Updated: September 13, 2016 3:19:08 PM Type: Trojan Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Trojan.Riccietex is a Trojan horse that installs potentially malicious software and modifies browser settings […]
September 13, 2016
How Google Play tracks you even if your other apps don’t
September 13, 2016
Tor Joins Movement Against Expanding Hacking Powers
September 13, 2016
9/11 hoax story tops Facebook Trending Topics
September 13, 2016
Anonymous ‘Fancy Bears’ Hack World Anti-Doping Agency (WADA) Again
September 13, 2016
Could a phone steal a secret product prototype off your 3D printer?
September 13, 2016
Judge Rules Use of FBI Malware Is A ‘Search’
September 13, 2016
Kingpin Denial of Service website vDOS gets taken out by hacker
September 13, 2016
UK oversight body tipped to examine phone snooping tech in prisons
September 13, 2016
Facebook Post Tagging Scam Steals Your Login Credentials
September 13, 2016
Generic OS X Malware Detection Method Explained
September 13, 2016
How encryption molded crypto-ransomware
Ransomware is a major threat that keeps growing over time. According to Cisco’s recent midyear report, it dominates the malware market and is the most profitable malware type in history. By now, it seems unlikely any regular reader of our blog does not already know something about ransomware. If you do not—or would like a […]
September 13, 2016
Security Solved: Company says their tech renders servers hack proof
September 13, 2016
DDoS Attacks Up by 75 Percent in Q2 2016
September 13, 2016
Mr. Robot eps2.8_h1dden-pr0cess.axx – the security review
September 13, 2016
Bad news: MySQL can dish out root access to cunning miscreants
September 13, 2016
Afraid of online hacks? Worry more about your phone
I talk a lot about the security problems and weaknesses of the internet, as well as the devices connected to it. It’s all true, and we badly need improvements. Yet the irony is that security in our online world is actually better than in our physical world. Think of how many people are scammed by […]
September 13, 2016
Action Fraud warns of fraudulent anti-fraud warnings posing as Action Fraud
September 13, 2016
IP telephony biz VoIPtalk quietly admits to possible data breach
September 13, 2016
Security takes a backseat for uninterrupted, video game marathons
��}ے�ƒ��(A�”i/}o��%�:#YZ�|�gdmG(���f��8��O�1���32_��YA6�M��t�%�ʪ�����ʪ|t��룷�}�����Ww����z���5�b��4t��q��? ��0��u�
September 13, 2016
Infected Android phones could flood America’s 911 with DDoS attacks
September 13, 2016
Dropbox apologies for clunky administrator account access on Macs
September 13, 2016
Risk Medium Date Discovered September 13, 2016 Description Microsoft Office is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft Outlook 2007 Microsoft Outlook 2010 (32-bit editions) Service Pack 2 Microsoft Outlook 2010 […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to execute arbitrary code on the target system. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Multiple vulnerabilities in OpenJPEG, a JPEG 2000 image compression / decompression library, may result in denial of service or the execution of arbitrary code if a malformed JPEG 2000 file is processed. For the stable distribution (jessie), these problems have been fixed in version 2.1.0-2+deb8u1. We recommend that you upgrade your openjpeg2 packages.
September 12, 2016
New Windows Patch Policy At Odds With Acceptable Risk
September 12, 2016
FDA, DHS Investigating St. Jude Device Vulnerabilities
September 12, 2016
Bitcoin Mining malware infects Seagate Central NAS devices
September 12, 2016
Debian: 3665-1: openjpeg2: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3665-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff September 11, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : openjpeg2 CVE ID : CVE-2015-6581 CVE-2015-8871 CVE-2016-1924 CVE-2016-7163 Multiple vulnerabilities in OpenJPEG, a JPEG 2000 image compression / decompression library, may result in denial of […]
September 12, 2016
Slackware: 2016-254-01: gnutls: Security Update Posted by Anthony Pell New gnutls packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. [More Info…] [slackware-security] gnutls (SSA:2016-254-01) New gnutls packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the […]
September 12, 2016
Debian: 3664-1: pdns: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3664-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 10, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : pdns CVE ID : CVE-2016-5426 CVE-2016-5427 CVE-2016-6172 Debian Bug : 830808 Multiple vulnerabilities have been discovered in pdns, an authoritative DNS server. The Common Vulnerabilities […]
September 12, 2016
Debian: 3663-1: xen: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3663-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 09, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : xen CVE ID : CVE-2016-7092 CVE-2016-7094 CVE-2016-7154 Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following […]
September 12, 2016
Ubuntu: 3075-1: Imlib2 vulnerabilities Posted by Anthony Pell Several security issues were fixed in Imlib2. ========================================================================== Ubuntu Security Notice USN-3075-1 September 09, 2016 imlib2 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 16.04 LTS – Ubuntu 14.04 LTS – Ubuntu 12.04 LTS Summary: Several security issues were […]
September 12, 2016
Slackware: 2016-252-01: php: Security Update Posted by Anthony Pell New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…] [slackware-security] php (SSA:2016-252-01) New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 […]
September 12, 2016
After sitting down with Hal Lonas to get a deeper look at the inner workings of Webroot, there was no questioning why he’s uniquely qualified to serve as the company’s CTO. And with machine learning getting thrown around as the hot new buzzword, it was refreshing to hear Hal’s down-to-earth perspective on motivations, ideas, solutions […]
September 12, 2016
Malware Authors Rename Ransomware After Emsisoft’ Security Researcher
September 12, 2016
Critical MySQL Vulnerability Disclosed
September 12, 2016
Meet DDoSaaS: Distributed Denial of Service-as-a-Service
September 12, 2016
4.5 million web servers have private keys that are publicly known!
September 12, 2016
14-year-old sues Facebook over nude photo posted to “shame” site
September 12, 2016
The US gets its first Chief Information Security Officer
September 12, 2016
Scammer unmasked by friend’s poor Facebook privacy
September 12, 2016
Sniffing your storage could lead to sensitive leaks, warn infosec bods
September 12, 2016
Crafty GovRAT malware is growing, targeting U.S. government employees
September 12, 2016
Keep the faith: A vote for voting systems
September 12, 2016
Bank’s data center knocked offline by really loud noise
September 12, 2016
Israeli Pentagon DDoSers explain their work, get busted by FBI
September 12, 2016
Peccant pwners post 670,000 Pokémon punter MD5 passwords
September 12, 2016
SOHOpeless Seagate NAS boxen become malware distributors
September 12, 2016
PCI Council wants upgradeable credit card readers … next year
September 12, 2016
Linode fends off multiple DDOS attacks
September 11, 2016
BDSwiss Trading Hacked; Sensitive Data, Passports, Credit Cards Leaked
September 11, 2016
FBI Arrests Two Alleged Hackers of Crackas With Attitude Group
September 10, 2016
US Emergency Phone System ‘911’ Can Be Hacked Through TDoS Attack
September 10, 2016
Exile Mod Gaming Forum Hacked; 12,000 Accounts Leaked
September 10, 2016
White House appoints first Federal Chief Information Security Officer
September 10, 2016
WordPress urges users to update now to fix critical security holes
September 10, 2016
This USB stick will fry your unsecured computer
September 10, 2016
CallJam malware infects Androids and keeps ringing premium rate numbers
September 10, 2016
Multiple vulnerabilities have been discovered in pdns, an authoritative DNS server. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-5426 / CVE-2016-5427 Florian Heinz and Martin Kluge reported that the PowerDNS Authoritative Server accepts queries with a qname’s length larger than 255 bytes and does not properly handle dot inside labels. A remote, […]
September 10, 2016
Samsung Galaxy Note 7 on Burning Spree; Burns House and Jeep
September 9, 2016
It was discovered that incorrect SASL authentication in the Inspircd IRC server may lead to users impersonating other users. For the stable distribution (jessie), this problem has been fixed in version 2.0.17-1+deb8u2. For the unstable distribution (sid), this problem has been fixed in version 2.0.23-1. We recommend that you upgrade your inspircd packages.
September 9, 2016
Patched Android Libutils Vulnerability Harkens Back to Stagefright
September 9, 2016
Debian: 3662-1: inspircd: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3662-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff September 08, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : inspircd CVE ID : CVE-2016-7142 It was discovered that incorrect SASL authentication in the Inspircd IRC server may lead to users impersonating other users. For […]
September 9, 2016
White House Hires First Federal CISO
September 9, 2016
There’s a lot that happens in the cybersecurity world, with many stories getting lost in the mix. In an effort to keep our readers informed and updated, we present the Webroot Threat Recap, highlighting 5 major security news stories of the week. No Site is Immune to User Information Exposure In yet another example of poor cybersecurity, Brazzers […]
September 9, 2016
Google to slap warnings on non-HTTPS sites
September 9, 2016
A USB device can steal login credentials even if the PC is locked
September 9, 2016
Facebook censors iconic image of Vietnamese girl fleeing napalm attack
September 9, 2016
Xen Project patches serious virtual machine escape flaws
September 9, 2016
Scammers sent to the slammer for romance and secret shopping fraud
September 9, 2016
Fallout Over OPM Breach Report Begins
September 9, 2016
Luabot Malware Turning Linux Based IoT Devices into DDoS Botnet
September 9, 2016