Menu

Monthly Archives: October 2017

Woman films her spying webcam as it talks to her

LinuxSecurity.com: Christian Boxd?rfer discovered a vulnerability in the handling of FreeDesktop.org .desktop files in Nautilus, a file manager for the GNOME desktop environment. An attacker can craft a .desktop file intended to run malicious commands but displayed as a innocuous document file in Nautilus. An

LinuxSecurity.com: Security fix for CVE-2017-6419 and CVE-2017-11423

security update

security update

FreeMilk Phishing Scam Hijacks Active Email Conversations to Deploy Malware

LinuxSecurity.com: CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494 CVE-2017-14495 CVE-2017-14496

Disqus Hacked: 17.5 Million Users Affected
Apple patches bug that showed device password rather than hint
After selling his site for millions, founder hacked it for a second payday
It’s 4PM on Friday, almost time to log off and, oh look, Disqus says it’s been hacked

LinuxSecurity.com: It was discovered that the Tor onion service could leak sensitive information to log files if the “SafeLogging” option is set to “0”. The oldstable distribution (jessie) is not affected.

LinuxSecurity.com: Several vulnerabilities have been discovered in cURL, an URL transfer library. The Common Vulnerabilities and Exposures project identifies the following problems:

Microsoft silently fixes security holes in Windows 10 – dumps Win 7, 8 out in the cold
Watch Stranger Saying ‘Hola Senorita’ After Hacking Woman’ Security Cam

LinuxSecurity.com: Security fix for CVE-2017-12150 CVE-2017-12151 CVE-2017-12163

Pakistani Teen Shocks Scientist By Explaining Electric Honeycomb Phenomena

LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.

LinuxSecurity.com: A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 14.04 LTS Summary: Several security issues were fixed in Ruby. Software Description: – ruby1.9.1: Object-oriented scripting language Details: It was discovered that Ruby incorrectly handled certain inputs. [More…]

LinuxSecurity.com: A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 12.04 ESM Summary: Several security issues were fixed in Dnsmasq. Software Description: – dnsmasq: Small caching DNS proxy and DHCP/TFTP server Details: USN-3430-1 fixed several vulnerabilities in Dnsmasq. This update [More…]

LinuxSecurity.com: A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 17.04 – Ubuntu 16.04 LTS – Ubuntu 14.04 LTS Summary: poppler could be made to crash if opened a specially crafted file. Software Description: – poppler: PDF rendering library Details: It was discovered that Poppler incorrectly handled certain files. [More…]

FBI iPhone hack lost forever, White House mobe compromised, SSH – and plenty more
Security Industry Failing to Establish Trust
Russia, America dig into tug-of-war over Bitcoin laundering suspect
Will Equifax breach spur real reform? Don’t hold your breath
Report Claims Russia Stole NSA Tools Using Kaspersky Software
‘Dark Overlord’ Hackers Leak Student Data After Sending Death Threats
Latest Intelligence for September 2017
September saw Symantec uncover new activity by the Dragonfly group, and the start of several new Locky spam campaigns. Read More
Apple fixes flaw that displayed actual password rather than password hint
Dnsmasq vulnerability puts home routers and IoT devices at risk
Suspected Dark Web drug dealer undone by his own beard
Update your Androids, the October patches are out
Emergency Apple Patch Fixes High Sierra Password Hint Leak
US Top Law Enforcement Calls Strong Encryption a ‘Serious Problem’

The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. Yahoo Breach Expands to All 3 Billion Users In a recent statement, Yahoo announced that its […]

Avast urges devs to secure toolchains after hacked build box led to CCleaner disaster
Another W3C API exposing users to browser snitching
How bad can the new spying legislation be? Exhibit 1: it’s called the USA Liberty Act
Crazy but true – Apple’s “show hint” button reveals your actual password
CloudFlare Boots Off Torrent Site For Using Cryptocurrency Miner
Russian spies used Kaspersky AV to hack NSA contractor, swipe exploit code – new claim

Type: Vulnerability. Adobe Flash Player and AIR are prone to an unspecified integer-overflow vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.

Type: Vulnerability. Adobe Flash Player and AIR are prone to an unspecified memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a remote privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Adobe Flash Player is prone to an unspecified memory-corruption vulnerability; fixes are available.

Net neutrality becomes a battle of the bots
Dumb bug of the week: Apple’s macOS reveals your encrypted drive’s password in the hint box
Google Timeline – bug or feature? [VIDEO]

Risk Level: Very Low. Type: Trojan.

Hackers pounce on 3 vulnerable WordPress plugins
Hackers can identify if you are using sex toys and exploit them
Sonic publicly confirms payment card breach at drive-in locations
Latin American ATM Thieves Turning to Hacking
Smartphones of NATO Soldiers Compromised By Russian Hackers
Spy vs spy vs hacker vs… who is THAT? Everyone’s hacking each other
Smashing Security podcast #046: Good beard bad beard
How a missing smiley foiled a $70,000 email fraud
Cybersecurity in Asia Pacific

As the Asia Pacific region continues to grow, and adoption of digital technologies – by consumers and businesses – continues, the region is starting to appreciate how attractive it has become to cybercriminals. The post Cybersecurity in Asia Pacific appeared first on WeLiveSecurity

UK cybercops reacted to 590 ‘significant attacks’ over past year – report
Chrome turns the screw ever tighter in Google’s encryption crusade
Bulletproof hosts stay online by operating out of disputed backwaters
Inside the CCleaner Backdoor Attack
India’s national internet registry breached, but says heist was trivial
Chinese Bitcoin exchange denies hacking rumors after theft of $2.5M
Attackers Redefining Objectives, Approaches
RAM, bam, awww … man! Boffins defeat Rowhammer protections

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Open your doors to white hats before black hats blow them off, US deputy AG urges big biz

security update

security update

Chips in iPhone 7s, Androids, smart TVs vulnerable to rogue Wi-Fi
Israeli Firm Offering WiFi Interception Service to Law Enforcement Agencies
Experts Have Sobering Message on Human Rights, Privacy for Security Pros
All 3 Billion Yahoo Users Were Hacked in 2013 Data Breach
Russian suspected of $4bn Bitcoin laundering op to be extradited to US
Costin Raiu and Juan Andres Guerrero-Saade on APT Fourth-Party Collection
DNSSEC master key change delayed after ISPs struggle
Facebook will use facial recognition to unlock your account
Users encounter threats through email twice as often as other infection vectors
The latest ISTR special report, Email Threats 2017, casts a light on a threat landscape where attackers are actively spreading malicious threats, BEC [...]
Cloudflare CTO Goes Inside the Cloudbleed Bug
Email fraudsters foiled by a smiley
It’s time that companies became more cyber-resilient

Cybersecurity is everyone’s responsibility and organisations need to train staff to ensure they have a more empowered and security savvy workforce. The post It’s time that companies became more cyber-resilient appeared first on WeLiveSecurity

2013 Yahoo Breach Affected All 3 Billion Accounts
Oracle wants you to drop a log into its cloud, so it can talk security
Sole Equifax security worker at fault for failed patch, says former CEO
Russian bot-herder and election-fiddling suspect closer to US trial
3 billion Yahoo accounts affected by 2013 breach
The biggest hack in history is actually three times bigger than we feared
Nothing matters any more… Now hapless Equifax bags $7.5m IT contract with US taxmen
Oath-my-God: THREE! BILLION! Yahoo! accounts! hacked! in! 2013! – not! ‘just!’ 1bn!
Patch your WordPress plugins: Scum are right now hijacking blogs
Five Critical Android Bugs Get Patched in October Update

security update

Equifax Says 145.5M Affected by Breach, Ex-CEO Testifies
Chinese Bitcoin Trading Exchange Blames User For Losing $3M

“I use a Mac, so I don’t need to worry about malware, phishing, or viruses.” Many Mac users turn a blind eye to cybersecurity threats, often noting that most scams and attacks occur on PCs. However, within the last few years, there has been a noted uptick in spyware (a type of software that gathers information […]

Google Warns of DoS and RCE Bugs in Dnsmasq
Google makes encryption mandatory for sites on 45 Top-Level Domains