LinuxSecurity.com: Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code.
February 20, 2018
Google reveals Edge bug that Microsoft has had trouble fixing
February 20, 2018
LinuxSecurity.com: An update that solves 9 vulnerabilities and has 44 fixes is now available.
February 20, 2018
Dark Web’s worst pedophile sentenced to 32 years in prison
February 19, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the execution of arbitrary code.
February 19, 2018
LinuxSecurity.com: Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at https://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v11.12
February 19, 2018
LinuxSecurity.com: Bind could be made to crash if it received specially crafted network traffic.
February 19, 2018
Hackers made $3M on Jenkins server in one of biggest mining ops ever
February 19, 2018
Google drops new Edge zero-day as Microsoft misses 90-day deadline
February 19, 2018
Critical macOS Sierra disk image flaw leads to data loss
February 19, 2018
Millions bagged in two bank cyber-heists
This hack is said to be reminiscent of a particularly brazen bank cyber-heist from February 2016, in which hackers successfully pilfered $81 million from the account of the central bank of Bangladesh at the Federal Reserve Bank of New York. The post Millions bagged in two bank cyber-heists appeared first on WeLiveSecurity
February 19, 2018
‘Killer text bomb’ crashes iPhones, iPads, Macs, and Apple Watches
February 19, 2018
Broadband network plagued by wheezy old cryptomining gadget
February 19, 2018
US and UK condemn Russia for NotPetya worm attack
February 19, 2018
Hackers sentenced for SQL injections that cost $300 million
February 19, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 19, 2018
Ransomware: Do you pay the ransom? | Salted Hash Ep 19
February 19, 2018
Crims pull another SWIFT-ie, Indian bank stung for nearly US$2m
February 19, 2018
Hacker erase 1 terabyte of data from spyware developers server
February 18, 2018
Austria seeks Interpol’s help to bust Bitcoin scammers who stole $115M
February 17, 2018
security update
February 17, 2018
Monero Mining Malware Infecting Android Smart TVs & Smartphones
February 17, 2018
TrickBot Variant Steals Bitcoin by Hijacking Cryptocurrency Transactions
February 17, 2018
Man admits hacking former employer’s computer system for revenge
February 17, 2018
New EU Privacy Law May Weaken Security
February 17, 2018
Meltdown-Spectre flaws: We’ve found new attack variants, say researchers
February 17, 2018
Hands up who HASN’T sued Intel over Spectre, Meltdown chip flaws
February 17, 2018
security update
February 17, 2018
security update
February 17, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in Quagga, a routing daemon. The Common Vulnerabilities and Exposures project identifies the following issues:
February 16, 2018
LinuxSecurity.com: Krzysztof Sieluzycki discovered that the notifier for removable devices in the KDE Plasma workspace performed insufficient sanitisation of FAT/VFAT volume labels, which could result in the execution of arbitrary shell commands if a removable device with a malformed disk label is
February 16, 2018
LinuxSecurity.com: BIND, a DNS server implementation, was found to be vulnerable to a denial of service flaw was found in the handling of DNSSEC validation. A remote attacker could use this flaw to make named exit unexpectedly with an
February 16, 2018
119,000 FedEx users passports, security ID & driving licenses exposed
February 16, 2018
security update
February 16, 2018
Apple Rushes Fix for Latest ‘Text Bomb’ Bug As Abuse Spreads
February 16, 2018
LinuxSecurity.com: The package irssi before version 1.1.1-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and denial of service.
February 16, 2018
Telegram IM security flaw – what you see is NOT always what you get
February 16, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.
February 16, 2018
LinuxSecurity.com: Talosintelligence discovered a command injection vulnerability in the gplotMakeOutput function of leptonlib. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary
February 16, 2018
New IoT Botnet DoubleDoor Bypass Firewall to Drop Backdoor
February 16, 2018
Hackers who stole $300 million, hacked Citibank & Nasdaq are jailed
February 16, 2018
PM urged to protect data flows post-Brexit ahead of Munich speech
February 16, 2018
Google’s big plans for email will give it even more power
February 16, 2018
US forms dedicated office to help avert cyberattacks at infrastructure
The vulnerability of critical infrastructure, including energy grids, to cyberattacks has been a growing concern worldwide. Many nations have been scrambling to improve their defenses vis-à-vis threats faced by services that are critical to the continuity of our daily lives. The post US forms dedicated office to help avert cyberattacks at infrastructure appeared first on […]
February 16, 2018
UK.gov: Psst. Belgium. Buy these Typhoon fighter jets from us, will you?
February 16, 2018
LinuxSecurity.com: An update that solves 10 vulnerabilities and has three fixes is now available.
February 16, 2018
LinuxSecurity.com: An update that solves 16 vulnerabilities and has 12 fixes is now available.
February 16, 2018
Why Chrome’s ad filter isn’t an adblocker
February 16, 2018
Facebook accused of spamming 2FA phone numbers
February 16, 2018
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
February 16, 2018
The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. Winter Olympics Disrupted by Malware Attack The Winter Olympics are in full swing, and cybercriminals seem to […]
February 16, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
February 16, 2018
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
February 16, 2018
LinuxSecurity.com: New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
February 16, 2018
Russians behind bars in US after nicking $300m+ in credit-card hacks
February 16, 2018
Techno-senator tells Tinder to hook up its app with better security
February 16, 2018
LinuxSecurity.com: Several security issues were fixed in Quagga.
February 16, 2018
Facebook wants you to install a VPN app accused of spying on users
February 15, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in Quagga, a routing daemon. The Common Vulnerabilities and Exposures project identifies the following issues:
February 15, 2018
Intel Expands Bug Bounty Program Post-Spectre and Meltdown
February 15, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 15, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 15, 2018
security update
February 15, 2018
security update
February 15, 2018
That terrifying ‘unfixable’ Microsoft Skype security flaw: THE TRUTH
February 15, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
February 15, 2018
LinuxSecurity.com: – CVE-2018-1055 Remote arbitrary file disclosure vulnerability via WEBSERVICE formula
February 15, 2018
LinuxSecurity.com: Updated AppStream metadata
February 15, 2018
LinuxSecurity.com: This is an update to Mozilla’s CA certificates list version 2.22, which has been published as part of Mozilla NSS 3.35. For additional details, please refer to the NSS 3.35 release notes: https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.35_release_notes
February 15, 2018
Reported Critical Vulnerabilities In Microsoft Software On the Rise
February 15, 2018
Word-based Malware Attack Doesn’t Use Macros
February 15, 2018
Hackers use Google Ads to steal $50 million of Bitcoin
February 15, 2018
Dell EMC squashes pair of VMAX virtual appliance bugs
February 15, 2018
Smashing Security #065: Cryptominomania, Poppy, and your Amazon Alexa
February 15, 2018
Essex black hat behind Cryptex and reFUD gets two years behind bars
February 15, 2018
Concerns about data breaches hitting all-time high
A record-high proportion of organizations worldwide (67%) said that they had been breached at some point, up from 56% in the report’s previous edition. The post Concerns about data breaches hitting all-time high appeared first on WeLiveSecurity
February 15, 2018
Unsecured server exposed thousands of FedEx customer records
February 15, 2018
Hack the Air Force 2.0 uncovers over 100 vulnerabilities
February 15, 2018
Adding Encryption To printk()
February 15, 2018
Managing open-source mobile security and privacy for activists worldwide
February 15, 2018
Joke dating site matches people based on their passwords
February 15, 2018
Coinmining frenzy is making it hard for us to find aliens
February 15, 2018
Android ransomware in 2017: Innovative infiltration and rougher extortion
Ransomware in 2017 saw users and businesses across the globe trying to cope with campaigns such as Petya and WannaCryptor. Not to be outdone, Android ransomware had a year full of innovative infiltration and rougher extortion as highlighted by the latest ESET research whitepaper. The post Android ransomware in 2017: Innovative infiltration and rougher extortion […]
February 15, 2018
UK names and shames Russia as source of NotPetya
February 15, 2018
PCI Council and X9 Committee to combine PIN security standards
February 15, 2018
LinuxSecurity.com: It was discovered that jackson-databind, a Java library used to parse JSON and other data formats, did not properly validate user input before attempting deserialization. This allowed an attacker to perform code execution by providing maliciously crafted input.
February 15, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 15, 2018
security update
February 15, 2018