January 25, 2017
Cisco scrambling to fix a remote code execution problem in WebEx
January 25, 2017
RoT: Ransomware of Things
Could the Internet of Things spark the Ransomware of Things? ESET’s Stephen Cobb examines how ransomware and jackware are evolving. The post RoT: Ransomware of Things appeared first on WeLiveSecurity
January 25, 2017
Twitter’s Phantom Menace: a Star Wars botnet
January 25, 2017
Charger Mobile Ransomware Removed from Google Play
January 25, 2017
Yahoo faces SEC probe into its two record-breaking data breaches
The US Securities and Exchange Commission is looking into whether Yahoo could have been quicker to tell investors about two record-breaking data breaches. The post Yahoo faces SEC probe into its two record-breaking data breaches appeared first on WeLiveSecurity
January 25, 2017
Identify and escape: A two-part ransomware plan
January 25, 2017
InfoWorld’s 2017 Technology of the Year Award winners
January 25, 2017
Boffins break Samsung Galaxies with one SMS carrying WAP crap
January 25, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Oracle’s JRE and JDK software suites, the worst of which may allow execution of arbitrary code
January 25, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in X.Org X Server, the worst of which may allow authenticated attackers to read from or send information to arbitrary X11 clients.
January 25, 2017
Firefox bares teeth, attacks sites that collect personal data
January 25, 2017
Western Digital fixes remote execution bug in My Cloud Mirror
January 25, 2017
Human bot hybrid finds LinkedIn email, phone number-filching holes
January 25, 2017
Internet gang claims it caused Lloyds Bank outage via a DDoS attack
January 25, 2017
SpyNote RAT Now Disguised As Netflix App
January 24, 2017
LinuxSecurity.com: Security fix for console video game music emu vulnerability in the fullyoptional audacious-plugins-exotic subpackage: CVE-2016-9957, CVE-2016-9958,CVE-2016-9959, CVE-2016-9960, CVE-2016-9961
January 24, 2017
LinuxSecurity.com: Security fix for CVE-2016-2120, CVE-2016-7068, CVE-2016-7072, CVE-2016-7073,CVE-2016-7074
January 24, 2017
LinuxSecurity.com: Security fix for CVE-2016-6814
January 24, 2017
LinuxSecurity.com: Update to 0.8.0-6.git97f52c1
January 24, 2017
LinuxSecurity.com: Rebase to latest upstream gitrev 20161120
January 24, 2017
LinuxSecurity.com: Update from 3.8.1 to 3.8.2. Also fixes console video game music emuvulnerability in the fully optional audacious-plugins-exotic subpackage:CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961
January 24, 2017
LinuxSecurity.com: Update from 3.8.1 to 3.8.2. Also fixes console video game music emuvulnerability in the fully optional audacious-plugins-exotic subpackage:CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961
January 24, 2017
LinuxSecurity.com: Security fix for CVE-2016-2120, CVE-2016-7068, CVE-2016-7072, CVE-2016-7073,CVE-2016-7074
January 24, 2017
LinuxSecurity.com: This update fixes a security problem with the EDE package.
January 24, 2017
LinuxSecurity.com: Fix validation logic in the base consumer The base consumer is intended to onlyderive its validation switch from the on-disk configuration if the child classdoesn’t override the validate_signatures switch. There was a bug here where thedefault value provided in the base class made it appear as if *all* childconsumers had turned *off* validation, which […]
January 24, 2017
Risk Level: Very Low. Type: Trojan.
January 24, 2017
Risk Level: Very Low. Type: Trojan.
January 24, 2017
AG Nominee Backs Law Enforcement’s Ability to ‘Overcome’ Encryption
January 24, 2017
St. Louis Public Library Recovers from Ransomware Attack
January 24, 2017
UK courts experiencing surge in cyber-crime case load
January 24, 2017
When is a blockchain not a blockchain?
January 24, 2017
Study: 62% of security pros don’t know where their sensitive data is
January 24, 2017
Penguins force-fed root. Cruel flaw found in systemd v228
January 24, 2017
Update your Mac and iPhone – and help stop unwanted pwnage
January 24, 2017
Cisco Patches Critical Flaw in WebEx Chrome Plugin
January 24, 2017
Apple quashes bugs in iOS, MacOS, and Safari
January 24, 2017
The essential guide to anti-malware tools
January 24, 2017
Apps Carrying HummingBad Variant Booted From Google Play
January 24, 2017
As attacks rise, we ask: how secure is your Hadoop installation?
January 24, 2017
World’s most popular email server praised as ‘near-impenetrable’
January 24, 2017
Why Linux Installers Need to Add Security Features
January 24, 2017
Keeping Linux devices secure with rigorous long-term maintenance
January 24, 2017
The evolution of (and solution to) ransomware
Contrary to popular belief, ransomware has been around for decades. The first malware program to lock up people’s files and ask for a ransom was the PC Cyborg Trojan in 1989. It was created by Harvard-trained evolutionary biologist Dr. Joseph Popp, who was working on several AIDS-related projects at the time. Dr. Popp sent a […]
January 24, 2017
LinuxSecurity.com: An update for mysql is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…]
January 24, 2017
LinuxSecurity.com: Multiple vulnerabilities have been discovered in Firejail, the worst of which may allow privilege escalation.
January 24, 2017
HummingBad malware returns in new, more annoying variant
January 24, 2017
LinuxSecurity.com: Multiple vulnerabilities have been discovered in WebP, the worst of which could allow a remote attacker to cause a Denial of Service condition.
January 24, 2017
LinuxSecurity.com: An update for squid is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…]
January 24, 2017
LinuxSecurity.com: An update for squid34 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…]
January 24, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in LibRaw, the worst of which may allow attackers to execute arbitrary code.
January 24, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in ADOdb, all of which could allow remote attackers to execute arbitrary code.
January 24, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in ICU, the worst of which could cause a Denial of Service condition.
January 24, 2017
Furby Rickroll demo: What fresh hell is this?
January 24, 2017
Kid hackers break XSS defences, find hack hole in 2 million websites
January 24, 2017
Microsoft fixes remote desktop app Mac hole
January 24, 2017
VXers gift their mates an Android bank-raiding app’s source code
January 24, 2017
LinuxSecurity.com: New mozilla-firefox packages are available for Slackware 14.1, 14.2, and -current to fix security issues. [More Info…]
January 24, 2017
Apple issues security patches for… just about everything
January 24, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2017
Western Union coughs up $586m for turning a blind eye to fraudsters
January 23, 2017
What links macOS, iOS, Safari, tvOS, watchOS? They all need patching
January 23, 2017
LinuxSecurity.com: The 4.9.5 stable kernel update contains a number of important fixes across thetree.
January 23, 2017
LinuxSecurity.com: ## Version 2.2.4 – 2017-01-18 ### Security – gdImageCreate() doesn’t check foroversized images and as such is prone to DoS vulnerabilities. (CVE-2016-9317)- double-free in gdImageWebPtr() (CVE-2016-6912) – potential unsigned underflowin gd_interpolation.c – DOS vulnerability in gdImageCreateFromGd2Ctx() ###Fixed – Fix #354: Signed Integer Overflow gd_io.c – Fix #340: System frozen -Fix OOB reads of the […]
January 23, 2017
LinuxSecurity.com: The 4.9.5 stable kernel update contains a number of important fixes across thetree.
January 23, 2017
ThePirateBay.org goes down; dark web domain is up and running
January 23, 2017
Apple Patches Critical Kernel Vulnerabilities
January 23, 2017
Secure Email Service Lavabit Relaunches
January 23, 2017
Heartbleed Persists on 200,000 Servers, Devices
January 23, 2017