July 26, 2017
Vulnerable Radiation Monitoring Devices Won’t Be Patched
security update
July 26, 2017
security update
July 26, 2017
security update
July 26, 2017
Stop blaming users for security misses
July 26, 2017
LinuxSecurity.com: This release fixes a use-after-free in replaceChild() call.
July 26, 2017
LinuxSecurity.com: * CVE-2017-7718: cirrus: OOB read access issue (bz #1443443) * CVE-2016-9603: cirrus: heap buffer overflow via vnc connection (bz #1432040) * CVE-2017-7377: 9pfs: fix file descriptor leak (bz #1437872) * CVE-2017-7980: cirrus: OOB r/w access issues in bitblt (bz #1444372) * CVE-2017-8112: vmw_pvscsi: infinite loop in pvscsi_log2 (bz #1445622) * CVE-2017-8309: audio: host memory […]
July 26, 2017
LinuxSecurity.com: Multiple vulnerabilities were found in in qemu, a fast processor emulator: CVE-2017-9310
July 26, 2017
LinuxSecurity.com: Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in sandbox bypass, use of insecure cryptography, side channel attacks, information disclosure, the execution of arbitrary code, denial of service or
July 26, 2017
LinuxSecurity.com: Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. Debian follows the extended support releases (ESR) of Thunderbird.
July 26, 2017
LinuxSecurity.com: Fix CVE-2017-11368 (remote triggerable assertion failure in krb5kdc)
July 26, 2017
LinuxSecurity.com: This release fixes a use-after-free in replaceChild() call.
July 26, 2017
'Jump boxes' and SAWs improve security, if you set them up right
A jump box is a secure computer that all admins first connect to before launching any administrative task or use as an origination point to connect to other servers or untrusted environments. Over the last few years, with malicious hackers and malware infesting nearly every enterprise network at will, security admins have been looking for […]
July 26, 2017
Post Quantum Cryptography
July 26, 2017
Windows SMB Zero Day to Be Disclosed During DEF CON
July 26, 2017
Adobe to Completely Disable Flash Player by 2020
July 26, 2017
Is it safe to store corporate information on Google Drive (or similar services)?
When it comes to protecting corporate information, some doubt whether or not the cloud is the best option. We look at all the security services available. The post Is it safe to store corporate information on Google Drive (or similar services)? appeared first on WeLiveSecurity
July 26, 2017
Linux file manager flaw leaves security “Bad Taste”
July 26, 2017
WikiLeaks drops another cache of ‘Vault7’ stolen tools
July 26, 2017
Chips with everything – are you ready to be bio-hacked?
July 26, 2017
Black Hat 2017: Hacking the physical world
Cameron Camp, in attendance at this year’s Black Hat in Las Vegas, takes a closer look at attacks against physical infrastructure. The post Black Hat 2017: Hacking the physical world appeared first on WeLiveSecurity
July 26, 2017
Relax: Microsoft is NOT Killing Paint App
July 25, 2017
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 25, 2017
Academia’s Role in Security Skills Gap Examined
July 25, 2017
Swedish PM admits that huge data leak is ‘a disaster’
July 25, 2017
FBI’s Surveillance Van Sold on eBay for US $18,700
July 25, 2017
LinuxSecurity.com: This update includes the latest stable release of _Apache Subversion_, version **1.9.6**. ### User-visible changes: #### Client-side bugfixes: * cp/mv: improve error message when target is an unversioned dir * merge: reduce memory usage with large amounts of mergeinfo ([issue 4667](https://issues.apache.org/jira/browse/SVN-4667)) #### Server-side
July 25, 2017
Social engineering and ransomware
Social engineering may play a vital part in persuading a victim to open a malicious executable or website, says ESET’s David Harley on social engineering and ransomware. The post Social engineering and ransomware appeared first on WeLiveSecurity
July 25, 2017
Black Hat USA 2017 Preview
July 25, 2017
Malware found lurking behind every app at alternative Android store
ESET researchers have discovered an Android app store distributing malware on a mass scale. The post Malware found lurking behind every app at alternative Android store appeared first on WeLiveSecurity
July 25, 2017
£20 million cybersecurity programme to train teenagers set to launch in UK
A new £20 million cybersecurity programme to train teenagers will be launched in the UK this autumn, as part of the government’s plans to address the skills gap. The post £20 million cybersecurity programme to train teenagers set to launch in UK appeared first on WeLiveSecurity
July 25, 2017
LinuxSecurity.com: Fix CVE-2017-11368 (remote triggerable assertion failure in krb5kdc)
July 24, 2017
LinuxSecurity.com: librsvg 2.40.18 release, fixing CVE-2017-11464 (division-by-zero in the Gaussian blur code). For details, see https://mail.gnome.org/archives/ftp-release- list/2017-July/msg00078.html
July 24, 2017
security update
July 24, 2017
Casino Becomes Victim of Data Hack—courtesy Fish Tank
July 24, 2017
Type: Vulnerability. Adobe Flash Player is prone to multiple remote code-execution vulnerabilities; fixes are available.
July 24, 2017
Hacker Admits to Mirai Attack Against Deutsche Telekom
July 24, 2017
A US Firm Will Install Microchips in Employees
July 24, 2017
LinuxSecurity.com: Heimdal could allow unintended access to network services.
July 24, 2017
88% feel vulnerable to data threats
Thales Group has announced the results of its 2017 data threat report, showing that the number of global data breaches has increased from 2016. The post 88% feel vulnerable to data threats appeared first on WeLiveSecurity
July 24, 2017
Going to Black Hat? Bring your (marketing) wallet
This year at Black Hat, it will be incumbent upon newer vendors to make sensational claims to gain market share from established vendor, says Cameron Camp. The post Going to Black Hat? Bring your (marketing) wallet appeared first on WeLiveSecurity
July 24, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
July 24, 2017
Risk Level: Very Low. Type: Trojan.
July 24, 2017
LinuxSecurity.com: A heap-based buffer underflow flaw was discovered in catdoc, a text extractor for MS-Office files, which may lead to denial of service (application crash) or have unspecified other impact, if a specially crafted file is processed.
July 23, 2017
security update
July 22, 2017
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 22, 2017
LinuxSecurity.com: It was discovered that Atril, the MATE document viewer, made insecure use of tar when opening tar comic book archives (CBT). Opening a malicious CBT archive could result in the execution of arbitrary code. This update disables the CBT format entirely.
July 22, 2017
Tor Public Bug Bounty Program: Earn Up To $4000
July 22, 2017
Watch a Homemade Robot Crack a Safe in Just 15 Minutes
July 22, 2017
security update
July 21, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.
July 21, 2017
LinuxSecurity.com: New seamonkey packages are available for Slackware 14.2 and -current to fix security issues.
July 21, 2017
LinuxSecurity.com: Update to upstream version 1.3.1.
July 21, 2017
LinuxSecurity.com: New upstream release: 2.4.5
July 21, 2017
LinuxSecurity.com: An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is now available. now available.
July 21, 2017
LinuxSecurity.com: An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes is now available. is now available.
July 21, 2017
Trickbot Malware Now Targets US Banks
July 21, 2017
Motivation Mystery Behind WannaCry, ExPetr
July 21, 2017