LinuxSecurity.com: Update to the latest stable version. See https://ikiwiki.info/news/ for the listof changes. Security fix for CVE-2016-10026, CVE-2016-9646, CVE-2017-0356.
January 28, 2017
LinuxSecurity.com: Fix validation logic in the base consumer The base consumer is intended to onlyderive its validation switch from the on-disk configuration if the child classdoesn’t override the validate_signatures switch. There was a bug here where thedefault value provided in the base class made it appear as if *all* childconsumers had turned *off* validation, which […]
January 28, 2017
LinuxSecurity.com: Update to the latest stable version. See https://ikiwiki.info/news/ for the listof changes. Security fix for CVE-2016-10026, CVE-2016-9646, CVE-2017-0356.
January 28, 2017
LinuxSecurity.com: New mozilla-thunderbird packages are available for Slackware 14.1, 14.2, and -current to fix security issues. [More Info…]
January 28, 2017
LinuxSecurity.com: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…]
January 28, 2017
LinuxSecurity.com: An update for puppet-swift is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact [More…]
January 28, 2017
LinuxSecurity.com: Security Report Summary
January 28, 2017
Facebook Launches “Security Key” Feature to Protect User Accounts
January 28, 2017
Cisco Warns of Critical Flaw in Teleconferencing Gear
January 28, 2017
VPN on Android means ‘Voyeuristic Peeper Network’ in many cases
January 28, 2017
security update
January 27, 2017
Wow, look out, hackers: Trump to order 60-day cybersecurity probe
January 27, 2017
WordPress 4.7.2 Update Fixes XSS, SQL Injection Bugs
January 27, 2017
OpenSSL issues new patches as Heartbleed still lurks
January 27, 2017
Dridex Returns With Windows UAC Bypass Method
January 27, 2017
Major Dark Web Marketplace Hacked Recently, a hacker using the alias cypher0007 reached out to AtlasBay, a large dark web market, with information on two significant vulnerabilities that allowed him to access over 200,000 private messages, names, and addresses. Along with retrieving a good amount of buyer and seller information, the hacker also revealed that […]
January 27, 2017
Raise your glasses! Wine is 2.0!
January 27, 2017
Threatpost News Wrap, January 27, 2017
January 27, 2017
Google to Operate its Own Root CA
January 27, 2017
Texas cops lose evidence going back eight years in ransomware attack
January 27, 2017
Trump’s attorney-general choice wants to ‘overcome encryption’
January 27, 2017
Google launches root certificate authority
January 27, 2017
US and Russia engaged in legal tug of war over LinkedIn hack suspect
January 27, 2017
Pay for experts to rise as cybercrime ‘to cost $6tn a year by 2021’
January 27, 2017
That Hearbleed problem may be more pervasive than you think
January 27, 2017
Securing MySQL DBMS
January 27, 2017
Breach Notification Website LeakedSource Allegedly Raided, Shut Down
January 27, 2017
Smashing Security podcast #005: ‘Upskirt insecurity’
January 27, 2017
218,000 private unencrypted AlphaBay dark web messages exposed
January 27, 2017
Celebgate hacker who stole nude photos gets nine months in jail
January 27, 2017
An introduction to private browsing
Privacy and security fears are driving many people to look into the possibilities of private browsing. We investigate what it is and how you stay anonymous online The post An introduction to private browsing appeared first on WeLiveSecurity
January 27, 2017
Sednit: How this notorious cyberespionage group operates
Take a closer look at the cyberespionage group Sednit, which has targeted over 1000 high-profile individuals and organizations with phishing attacks and zero-day exploits. The post Sednit: How this notorious cyberespionage group operates appeared first on WeLiveSecurity
January 27, 2017
No, disabling your anti-virus software does not make security sense
January 27, 2017
Trump administration is giving us a good lesson on Twitter security
January 27, 2017
Data Privacy Day: know the risks of Amazon Alexa and Google Home
January 27, 2017
Facebook taps FIDO U2F for stronger login security
January 27, 2017
Worrying about data privacy isn’t enough: Here’s how to own your online presence
ESET’s Ondrej Kubovič: “Worrying about privacy isn’t enough” – here’s how to control your data privacy and online presence. The post Worrying about data privacy isn’t enough: Here’s how to own your online presence appeared first on WeLiveSecurity
January 27, 2017
PayPal users targeted in sophisticated new phishing campaign
Recent phishing scams targeted both Gmail and Yahoo, and now attackers have their sights set on PayPal with some very convincing bait. The post PayPal users targeted in sophisticated new phishing campaign appeared first on WeLiveSecurity
January 27, 2017
LeakedSource website goes dark amid claims of police raid
January 27, 2017
Bookish hacker finds holes in Amazon, Apple, Google epub services
January 27, 2017
Uber pays hacker US$9,000 for partner firm’s bug
January 27, 2017
Americans fear their data isn’t safe, yet do little to defend it
January 27, 2017
The security of President Trump’s Android smartphone
January 27, 2017
Malicious “Charger Ransomware” App Discovered on Google Play Store
January 26, 2017
security update
January 26, 2017
More mobe malware creeps into Google Play – this time, ransomware
January 26, 2017
Your Facebook account is now more secure than your bank’s (probably)
January 26, 2017
Facebook Touts ‘Safer’ Security Key Login
January 26, 2017
Machine behaviors that threaten enterprise security
January 26, 2017
Bill Calls for Study of Cybersecurity Standards for Cars
January 26, 2017
LinuxSecurity.com: An update for ansible is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact [More…]
January 26, 2017
LinuxSecurity.com: Security Report Summary
January 26, 2017
LinuxSecurity.com: – new upstream (51.0)
January 26, 2017
LinuxSecurity.com: * CVE-2016-6836: vmxnet: Information leakage in vmxnet3_complete_packet (bz#1366370) * CVE-2016-7909: pcnet: Infinite loop in pcnet_rdra_addr (bz #1381196)* CVE-2016-7994: virtio-gpu: memory leak in resource_create_2d (bz #1382667) *CVE-2016-8577: 9pfs: host memory leakage in v9fs_read (bz #1383286) *CVE-2016-8578: 9pfs: potential NULL dereferencein 9pfs routines (bz #1383292) *CVE-2016-8668: OOB buffer access in rocker switch emulation (bz #1384898) *CVE-2016-8669: […]
January 26, 2017
LinuxSecurity.com: Update to ansible 2.2.1. Fixes several CVEs as well as a number of otherbugfixes. See: https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.mdfor full changes.
January 26, 2017
LinuxSecurity.com: Update to ansible 2.2.1. Fixes several CVEs as well as a number of otherbugfixes. See: https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.mdfor full changes.
January 26, 2017
Clock’s ticking for MD5-signed JAR files, says Oracle
January 26, 2017
Firefox flags Web of Trust add-on as suspicious, blocks by default
January 26, 2017
Voyeur adult website hacked; 180k members data leaked
January 26, 2017
Uber.com Backup Bug Nets Researcher $9K
January 26, 2017
How one man could have deleted any public Facebook video
January 26, 2017
Google to Block .js Attachments in Gmail
January 26, 2017
High-Severity Chrome Vulnerabilities Earn Researcher $32K in Rewards
January 26, 2017
Desperately seeking cybersecurity skills
Cybercrime is victimizing US companies and consumers, but a gap in cybersecurity skills presents a problem for the federal government. ESET’s Stephen Cobb investigates. The post Desperately seeking cybersecurity skills appeared first on WeLiveSecurity
January 26, 2017
In a bad mood? You might not be allowed to log on
January 26, 2017
10 questions to ask IDaaS vendors before you buy
January 26, 2017
Half of Ransomware Victims Pay Criminals’ Demands to Recover Data
January 26, 2017
Google pressure on devs to fix security issues bears fruit
January 26, 2017
Self-protection is key to Linux kernel security
January 26, 2017
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact [More…]
January 26, 2017
‘Celebgate’ nudes thief gets just nine months of porridge
January 26, 2017
Cisco WebEx code execution hole – what you need to know
January 26, 2017
Default Credentials Found in Schneider Electric Wonderware Historian
January 25, 2017
Firefox 51 Begins Warning Users of Insecure HTTP Connections
January 25, 2017
Linux nasty kicks weak, hacked gadgets when they’re already down
January 25, 2017
Penguins force-fed root: Cruel security flaw found in systemd v228
January 25, 2017
Kaspersky cybercrime investigator cuffed in Russian treason probe
January 25, 2017
To address the need for application security in the digital transformation era, F5 is releasing a new host of products and services. “The digital transformation has really changed security as a whole,” says Preston Hogue, Director of Security Marketing and Competitive Intelligence. What he means is that everything—EVERYTHING—is moving to the cloud. Think about the […]
January 25, 2017
Lloyds Banking Group hit with distributed denial of service attack
Lloyds Banking Group fell victim to an attempted cyberattack earlier this month, which saw cybercriminals attempt to crash the online banking service over a two day period. The post Lloyds Banking Group hit with distributed denial of service attack appeared first on WeLiveSecurity
January 25, 2017
China clamps down tighter on web use with new VPN ban
January 25, 2017