January 31, 2017
Trump stresses cybersecurity but postpones executive order
January 31, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in PCSC-Lite, the worst of which could lead to privilege escalation.
January 31, 2017
Flaws Found in Popular Printer Models
January 31, 2017
Password-stealing security hole discovered in many Netgear routers
January 31, 2017
LinuxSecurity.com: flatpak 0.8.2 release, fixing a security issue that could lead to sandboxescaping. For details, see https://github.com/flatpak/flatpak/releases/tag/0.8.2
January 31, 2017
LinuxSecurity.com: The 4.9.6 stable kernel update contains a number of important fixes across thetree.
January 31, 2017
LinuxSecurity.com: This is an security update fixing CVE-2017-5193, CVE-2017-5194, CVE-2017-5195,CVE-2017-5196, CVE-2017-5356.
January 31, 2017
LinuxSecurity.com: A heap-buffer overflow vulnerability was discovered in pycrypto leading toarbitrary code execution. All users of pycrypto’s AES module that allow the modeof operation to be specified by an attacker, check for ECB explicitly and createthe objects without specifying an IV are vulnerable to this issue. This isCVE-2013-7459.
January 31, 2017
LinuxSecurity.com: The 4.9.6 stable kernel update contains a number of important fixes across thetree.
January 31, 2017
LinuxSecurity.com: This is an security update fixing CVE-2017-5193, CVE-2017-5194, CVE-2017-5195,CVE-2017-5196, CVE-2017-5356.
January 31, 2017
Ugly Password Gaffe Plagues Cryptkeeper Encryption App
January 31, 2017
Facebook steps up security by allowing physical keys for log-in
January 31, 2017
Trump to sign cybersecurity order calling for government-wide review
January 31, 2017
Austrian hotel experiences ‘ransomware of things attack’
Only one month into the new year, it appears that we may well have our first example jackware in 2017 with a ransomware of things attack on an Austrian hotel. The post Austrian hotel experiences ‘ransomware of things attack’ appeared first on WeLiveSecurity
January 31, 2017
Security professionals shortage in UK ‘increasing competition among companies for talent’
IT security professionals are at the forefront of the demand from companies across the UK, many of whom have placed greater demand on tech skills. The post Security professionals shortage in UK ‘increasing competition among companies for talent’ appeared first on WeLiveSecurity
January 31, 2017
Security execs voice concern over Trump travel ban
January 31, 2017
Nicolas Brulez on Malware Reverse Engineering Tips and Tricks
January 31, 2017
‘I’m not a robot’ verification test beaten by … a robot
January 31, 2017
Privacy worries are on the rise, new U.S. poll shows
January 31, 2017
Cybersecurity: 5 basic lessons for everyone
A new way of looking at cybersecurity, no longer viewing it as a goal in itself, but instead something that is directly connected to business needs. The post Cybersecurity: 5 basic lessons for everyone appeared first on WeLiveSecurity
January 31, 2017
Facebook, GitHub teams up to make password resets more secure
January 31, 2017
NATO Members Targeted by Unique Macro Malware
January 31, 2017
MongoDB ransom attacks continue to plague administrators
January 31, 2017
Better security through obscurity? Think again
When attackers look for vulnerabilities, they target popular software. Why bother chasing flaws in applications that few people use? That’s why one of my best friends runs a third-party application instead of Adobe Acrobat Reader to open and read PDF documents. Another friend runs the Maxthon browser to stay out of the way of exploits […]
January 31, 2017
Ransomware: Key insights from infosec experts
Ransomware is not going anywhere. Here, we’ve rounded up vital tips and advice from three ESET experts: Lysa Myers, Stephen Cobb and David Harley. The post Ransomware: Key insights from infosec experts appeared first on WeLiveSecurity
January 31, 2017
Want to bring down that pesky drone? Try the power of sound
January 31, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in HarfBuzz, the worst of which could allow remote attackers to cause a Denial of Service condition.
January 31, 2017
Google’s Chrome is about to get rather in-your-face about HTTPS
January 31, 2017
VMware’s enterprise mobility management tool can p0wn itself
January 31, 2017
OpenSSL pushes trio of DoS-busting patches
January 31, 2017
Apple kills activation lock check, possible dirty stolen device hack
January 31, 2017
Infosec industry to drive machine learning spend surge says analyst
January 31, 2017
LinuxSecurity.com: An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6. Red Hat Product Security has rated this update as having a security impact [More…]
January 31, 2017
LinuxSecurity.com: An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7. Red Hat Product Security has rated this update as having a security impact [More…]
January 31, 2017
LinuxSecurity.com: An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7. Red Hat Product Security has rated this update as having a security impact [More…]
January 31, 2017
LinuxSecurity.com: An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7. Red Hat Product Security has rated this update as having a security impact [More…]
January 31, 2017
With net neutrality pretty much dead in the US, your privacy is next
January 31, 2017
security update
January 31, 2017
LinuxSecurity.com: Security Report Summary
January 30, 2017
Fake Netflix, WhatsApp, Facebook Android Apps Contain SpyNote RAT
January 30, 2017
Facebook Tackles Account Recovery with Delegated Recovery Protocol
January 30, 2017
security update
January 30, 2017
Telemarketing Firm Leaks 400,000 Recorded Calls
January 30, 2017
Ransomware avalanche at Alpine hotel puts room keycards on ice
January 30, 2017
LinuxSecurity.com: Update to 6.2.4
January 30, 2017
LinuxSecurity.com: Update to Firefox 51.0.1. —- – new upstream version (51.0.1)
January 30, 2017
LinuxSecurity.com: Security fix for CVE-2016-10164
January 30, 2017
LinuxSecurity.com: This is a security update for these CVEs: *[CVE-2016-9601](https://bugzilla.redhat.com/show_bug.cgi?id=1410021) – *Heap-buffer overflow in jbig2_image_new function* This update also solves possiblelicensing issues with ghostscritpt’s source code.
January 30, 2017
LinuxSecurity.com: Update to 7.0.4
January 30, 2017
LinuxSecurity.com: Security Report Summary
January 30, 2017
LinuxSecurity.com: A null pointer dereference in libpng might allow remote attackers to execute arbitrary code.
January 30, 2017
LinuxSecurity.com: Multiple vulnerabilities have been discovered in SQUASHFS, the worst of which may allow execution of arbitrary code
January 30, 2017
LinuxSecurity.com: An integer overflow in libXpm might allow remote attackers to execute arbitrary code or cause a Denial of Service Condition.
January 30, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in FFmpeg, the worst of which may allow remote attackers to cause a Denial of Service condition.
January 30, 2017
LinuxSecurity.com: A vulnerability in Firewalld allows firewall configurations to be modified by unauthenticated users.
January 30, 2017
Ransomware disrupts Washington DC’s CCTV system
January 30, 2017
Many Android VPN Apps Breaking Privacy Promises
January 30, 2017
Sex club for women exposes members’ private photographs
January 30, 2017
How a single SMS can break your Samsung Galaxy Android phone
January 30, 2017
Hackers Infect Hotel Door Lock System with Ransomware
January 30, 2017
Barclays warns customers of the risks of business email compromise
January 30, 2017
Questions to ask your recovery vendor before you buy
January 30, 2017
How most hackers get into systems
January 30, 2017
Managing risk by understanding attack surfaces
January 30, 2017
Trump’s immigration move sparks fears for Privacy Shield protections
January 30, 2017
Some examples of vulnerable code and how to find them
“When looking for vulnerabilities in open-source code, it is advisable to check portions of code that is prone to errors”: Useful tips from one of ESET’s malware analysts, Matías Porolli, on how to spot vulnerable code. The post Some examples of vulnerable code and how to find them appeared first on WeLiveSecurity
January 30, 2017
Man logs into Facebook account of the woman using his stolen laptop
January 30, 2017
Google moves into the Certificate Authority business
January 30, 2017
Big Blue’s BigInsights has big-ish bugs
January 30, 2017
Ransomware killed 70% of Washington DC CCTV ahead of inauguration
January 30, 2017
WordPress slips out three quick patches
January 29, 2017
Cisco TelePresence control software had remote-exploitable bug
January 29, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Perl, the worst of which could allow remote attackers to execute arbitrary code.
January 29, 2017
security update
January 29, 2017
security update
January 28, 2017
38% of Android VPN Apps on Google Play Store Plagued with Malware
January 28, 2017