LinuxSecurity.com: Multiple vulnerabilities have been found in Xen, the worst of which may allow local attackers to escalate privileges.
October 18, 2017
Domino’s Pizza delivers user details to spammers
October 18, 2017
LinuxSecurity.com: Several vulnerabilities have been discovered in the X.Org X server. An attacker who’s able to connect to an X server could cause a denial of service or potentially the execution of arbitrary code.
October 17, 2017
uBlock Origin ad-blocker knocked for blocking hack attack squawking
October 17, 2017
Watch out for Microsoft Word DDE nasties: Now Freddie Mac menaced
October 17, 2017
Oracle Patches 250 Bugs in Quarterly Critical Patch Update
October 17, 2017
LinuxSecurity.com: An update for wpa_supplicant is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 17, 2017
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available.
October 17, 2017
Flaw in Adobe Flash Player Used to Install FinFisher Spyware
October 17, 2017
LinuxSecurity.com: An update for rh-sso7-keycloak is now available for Red Hat Single Sign-On 7.1 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 17, 2017
LinuxSecurity.com: An update for rh-sso7-keycloak is now available for Red Hat Single Sign-On 7.1 for RHEL 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 17, 2017
LinuxSecurity.com: Red Hat Single Sign-On 7.1.3 is now available for download from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 17, 2017
Type: Vulnerability. Adobe Flash Player is prone to a remote code-execution vulnerability; fixes are available.
October 17, 2017
LinuxSecurity.com: More info: https://koji.fedoraproject.org/koji/buildinfo?buildID=982578
October 17, 2017
KRACK Wi-Fi attack – the rules haven’t changed
October 17, 2017
Microsoft bug-tracking database was ‘hacked by Wild Neutron gang’
October 17, 2017
Google Home Mini glitch triggers secret recordings
October 17, 2017
The fix is in for hackable voting machines: use paper
October 17, 2017
Linux vulnerable to privilege escalation
October 17, 2017
LinuxSecurity.com: An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
October 17, 2017
Devsecops: Add security to complete your devops process
October 17, 2017
Securing printed data in the ‘paperless’ office
Just as there are ways to audit, manage and protect electronic documents, there are ways to manage printed documents, too. The post Securing printed data in the ‘paperless’ office appeared first on WeLiveSecurity
October 17, 2017
Flash 0-day in the wild – patch now!
October 17, 2017
Crypto-coin miners caught toiling away in hacked cloud boxes
October 17, 2017
Russia tweaks Telegram with tiny fine for decryption denial
October 17, 2017
LinuxSecurity.com: Fix the for the Key Reinstallation Attacks in FT handshake (CVE-2017-13082) – Fix PTK rekeying to generate a new ANonce – Prevent reinstallation of an already in-use group key and extend protection of GTK/IGTK reinstallation of WNM-Sleep Mode cases (CVE-2017-13078,
October 17, 2017
LinuxSecurity.com: New upstream version
October 17, 2017
LinuxSecurity.com: Fix the for the Key Reinstallation Attacks in FT handshake (CVE-2017-13082) – Fix PTK rekeying to generate a new ANonce – Prevent reinstallation of an already in-use group key and extend protection of GTK/IGTK reinstallation of WNM-Sleep Mode cases (CVE-2017-13078,
October 17, 2017
LinuxSecurity.com: xserver 1.19.5 —- Update to xserver 1.19.4, multiple stability fixes.
October 17, 2017
LinuxSecurity.com: Update to 1.4.15. Fixes CVE-2017-8911
October 17, 2017
LinuxSecurity.com: 6.9.9-19
October 17, 2017
LinuxSecurity.com: 6.9.9-19
October 17, 2017
LinuxSecurity.com: Security fix for CVE-2017-13720 and CVE-2017-13722
October 17, 2017
LinuxSecurity.com: This is security update fixing possible buffer overflow in loadbuf function.
October 17, 2017
LinuxSecurity.com: Update to Open vSwitch 2.8.1 Includes security fix for CVE-2017-14970
October 17, 2017
LinuxSecurity.com: New upstream version
October 17, 2017
Risk Level: Very Low. Type: Trojan.
October 16, 2017
Wi-Fi at risk from KRACK attacks – here’s what to do
October 16, 2017
How the Waltham cyberstalker’s reign of fear was ended
October 16, 2017
Adobe Patches Flash Zero Day Exploited by Black Oasis APT
October 16, 2017
KRACK Attack Devastates Wi-Fi Security
October 16, 2017
National Cybersecurity Awareness Month Twitter Chats
We’ve gathered our own thoughts on the topics chosen each week for this short series of blogs that will be published twice a week. The post National Cybersecurity Awareness Month Twitter Chats appeared first on WeLiveSecurity
October 16, 2017
Chrome smoked by Edge in browser phishing test
October 16, 2017
DoubleLocker Android ransomware explained
The infection mechanism works well – which is crucial for determining how big of a deal a piece of malware is. The post DoubleLocker Android ransomware explained appeared first on WeLiveSecurity
October 16, 2017
WPA2 KRACK attack smacks Wi-Fi security: Fundamental crypto crapto
October 16, 2017
LinuxSecurity.com: Mathy Vanhoef of the imec-DistriNet research group of KU Leuven discovered multiple vulnerabilities in the WPA protocol, used for authentication in wireless networks. Those vulnerabilities applies to both the access point (implemented in hostapd) and the station (implemented in wpa_supplicant).
October 16, 2017
WPA2 security issues pose serious Wi-Fi safety questions
‘KRACK’ or Key Reinstallation AttaCK, as it has been labeled, means third parties could eavesdrop on a network meaning private conversations would no longer be private. The post WPA2 security issues pose serious Wi-Fi safety questions appeared first on WeLiveSecurity
October 16, 2017
Linus Torvalds lauds fuzzing for improving Linux security
October 16, 2017
‘Open sesame’… Subaru key fobs vulnerable, says engineer
October 16, 2017
security update
October 16, 2017
Sounds painful: Audio code bug lets users, apps get root on Linux
October 15, 2017
LinuxSecurity.com: Fix CVE-2017-2887
October 15, 2017
LinuxSecurity.com: A vulnerability found in Shadow may allow remote attackers to cause a Denial of Service condition or produce other unspecified behaviors.
October 15, 2017
LinuxSecurity.com: A null pointer dereference in GnuTLS might allow attackers to cause a Denial of Service condition.
October 15, 2017
LinuxSecurity.com: 3.94 and patch for CVE-2017-15056
October 14, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
October 14, 2017
Hundreds Of websites mining cryptocurrency without user consent
October 14, 2017
LinuxSecurity.com: update to upstream release 0.3.1.7 —- update to upstream release 0.2.9.12 (SECURITY) (#1494860)
October 14, 2017
LinuxSecurity.com: Security fix for buffer overflow due to long input filenames [see Bug 1422550 and 1422545]
October 14, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
October 14, 2017
New Android Ransomware Permanently Changes PIN, Demands Ransom
October 14, 2017
Cyberespionage Group Steps Up Campaigns Against Japanese Firms
October 14, 2017
What is a firewall?
October 14, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in WebkitGTK+, the worst of which may allow remote attackers to execute arbitrary code.
October 13, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Graphite, the worst of which could lead to the remote execution of arbitrary code.
October 13, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Puppet Agent, the worst of which could result in the execution of arbitrary code.
October 13, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in GNU Libtasn1, the worst of which may allow remote attackers to execute arbitrary code.
October 13, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in elfutils, the worst of which may allow remote attackers to cause a Denial of Service condition. [More…]
October 13, 2017
LinuxSecurity.com: Security fix for buffer overflow due to long input filenames [see Bug 1422550 and 1422545]
October 13, 2017
Kiss Goodbye to Privacy: Microsoft Introduces Cortana for Skype
October 13, 2017
Risk Level: Very Low. Type: Trojan.
October 13, 2017
Hyatt Hit By Credit Card Breach, Again
October 13, 2017
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. Rigzone Founder Caught Stealing Data Over the last few months, officials have been piecing together the […]
October 13, 2017
Google Busy Removing More Malicious Chrome Extensions from Web Store
October 13, 2017
Chris Brook Says Farewell to Threatpost
October 13, 2017
Android ransomware DoubleLocker encrypts data and changes PINs
October 13, 2017
Legacy Office Feature Used In Novel Document Attacks
October 13, 2017