Menu

Monthly Archives: January 2017

Dodgy Dutch developer built backdoors into thousands of sites

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: Multiple vulnerabilities have been found in file, the worst of which could allow remote attackers to execute arbitrary code.

LinuxSecurity.com: A buffer overflow in MiniUPnPc might allow remote attackers to cause a Denial of Service condition.

911 app is a joke, says security researcher Randy Westergren
Dovecot mailserver graded ‘nearly impenetrable’
Top tips (not including anti-virus) for protecting your Android from malware

Risk Level: Very Low. Type: Trojan.

LinuxSecurity.com: A buffer overflow in xdelta might allow remote attackers to execute arbitrary code.

LinuxSecurity.com: A buffer overflow in VLC might allow remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code.

Researchers Expose Fake Android Apps Stealing Instagram Passwords

Type: Vulnerability. Microsoft Identity Model Extensions is prone to a privilege-escalation vulnerability; fixes are available.

News in brief: Snowden supporters petition Obama; iOS Onion browser now free; bank bans WhatsApp
I love podcasts so much, I took a deep breath and made one…
Ukraine power outages ‘the work of cyberattackers’, warn experts
White House Approves New Rules for Sharing of Raw Intelligence Data
Spora ransomware goes freemium with four different payment options
Botnet of things: Samsung SmartCams vulnerable to hackers
Invest in encryption and get it right

The heavy ICO fine against Royal & Sun Alliance Insurance PLC has highlighted a shortcoming with encryption. The post Invest in encryption and get it right appeared first on WeLiveSecurity

WhatsApp ‘backdoor’ turns out to be known design feature
Facebook’s new public Wi-Fi locator is raising privacy concerns
Trump picks hackable Rudy Giuliani as cybersecurity advisor
Free IoT Vulnerability Scanner Hunts Enterprise Threats
The CSO guide to top security conferences
IHOP’s Twitter account hacked; retweets a tweet against Hillary clinton
Wandera has uncovered severe mobile data exposures that affect a high proportion of enterprises. Try it now for free.
Obama administration signs off on wider data-sharing for NSA
French spies warn politicians of hack risk as election draws near
Google Cloud Platform finally offers key management service
Windows 10 Anniversary Update crushed exploits without need of patches
Google reveals its servers all contain custom security silicon
Brilliant phishing attack probes sent mail, sends fake attachments
Just give up: 123456 is still the world’s most popular password

Risk Level: Very Low. Type: Trojan.

Netflix Users Targeted with yet another sophisticated Phishing Scam
Meet Spora, a ransomware that infects users in good faith – Literally

security update

security update

security update

Student Arrested for Selling Keylogger that Infected thousands of devices
WhatsApp vulnerability could allow Facebook and others to read messages
Facebook users hit with “You are in this video?” malware scam
Just in Time for Trump, the NSA Loosens Its Privacy Rules
First came mass MongoDB ransacking: Now copycat ransoms hit Elasticsearch
Guccifer 2.0, alleged Russian cyberspy, returns to deride U.S.
Suspected NSA tool hackers dump more cyberweapons in farewell
How to set up your Android phone for ultimate privacy
Promising compsci student sold key-logger, infects 16,000 machines, pleads guilty, faces jail
US Marines seek more than a few good men (3,000 men and women, actually) for cyber-war

security update

Playpen child sex abuse archive admin gets 20 years in the Big House

security update

Researchers Warn Against “free internet without Wi-Fi” WhatsApp Scam
Adobe’s Latest Security Patch Installs Chrome Extension to Collect Data
WhatsApp Says ‘Backdoor’ Claim Bogus
Adobe Acrobat Reader DC security update installs Chrome spyware
News in brief: new browser launched; social network closes down; cyberattack on health provider
Google’s Key Transparency Simplifies Public Key Lookups
UK’s largest hospital trust battles Friday 13th malware outbreak

LinuxSecurity.com: A vulnerability in runC could lead to privilege escalation.

LinuxSecurity.com: Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in execution of arbitrary code or privilege escalation.

LinuxSecurity.com: Security Report Summary

Tor users at risk of being unmasked by ultrasound tracking
Google floats prototype Key Transparency in bid to tackle secure swap woes
Cautious welcome to Facebook’s moves to fight fake news
Pirates, pirates, whatchu gonna do? Advertisers cop a visit from PIPCU
Windows 10 anniversary update: Security and privacy, hope and change?

With analysts predicting a big shift to Windows 10 in the enterprise in 2017, a new ESET white paper looks at security and privacy changes in Windows 10 Anniversary Update, the build that Microsoft expects its business customers to run on the majority of their desktop computers. The post Windows 10 anniversary update: Security and […]

After MongoDB, ransomware groups hit exposed Elasticsearch clusters
How far can we go – and should we go – with robots?
Oh, for F…acebook: Critics bash WhatsApp encryption ‘backdoor’
WhatsApp bug: Messages ‘can be intercepted and read’

A WhatsApp ‘security issue’ has been identified, meaning third parties may be able to both intercept and read encrypted messages, according to new research. The post WhatsApp bug: Messages ‘can be intercepted and read’ appeared first on WeLiveSecurity

Threatpost News Wrap, January 13, 2017
Don’t follow the example of Donald Trump’s choice for cybersecurity czar
Podcast on ransomware’s threat to the healthcare industry
Forensic analysis techniques for digital imaging

ESET’s Miguel Ángel Mendoza looks at a range of forensic analysis techniques that are used to examine digital images. The post Forensic analysis techniques for digital imaging appeared first on WeLiveSecurity

Suspected NSA tool hackers dump more cyberweapons
GoDaddy revokes nearly 9,000 SSL certificates issued without proper validation
Trump’s CIA nominee grilled on his advocacy of surveillance database
Microsoft sued over forcing employees to watch child porn for online safety
UK launches major cybersecurity inquiry

The UK parliament has launched an inquiry into its cybersecurity defense measures, describing cyberthreats as a “major security challenge”. The post UK launches major cybersecurity inquiry appeared first on WeLiveSecurity

5 data breach predictions for 2017
PC security stepped up with new ‘Windows Goodbye’ screen lock

LinuxSecurity.com: Multiple vulnerabilities have been found in Mozilla SeaMonkey, the worst of which could lead to the remote execution of arbitrary code.

EU policy makers consider FRAND licensing of machine-generated data
WordPress plugs eight holes in latest release

LinuxSecurity.com: Security Report Summary

MongoDB hackers now sacking ElasticSearch

LinuxSecurity.com: An update for java-1.6.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: Update to 0.24.6

LinuxSecurity.com: New upstream release

Trump’s cyber-guru Giuliani runs ancient ‘easily hackable website’
ISC squishes BIND packet-of-death bugs

security update

Shadow Brokers quit operation; giving away free Windows hacking tools
Donald Trump will take cybersecurity advice from, um, Rudy Giuliani
Smashing Security #003: ‘Alexa! Get me an axe!’

LinuxSecurity.com: Fix [CVE-2016-9962] Insecure opening of file-descriptor allows privilege FixBZ#1412148 – containerd: container did not start before the specified timeout—- use container-selinux >= 2:2.0-2

Israeli Phone Hacking Firm Cellebrite Hacked; 900 GB data stolen
Security Sessions: Will security budgets go up in 2017?