Risk Level: Very Low. Type: Trojan.
February 13, 2018
Risk Level: Very Low. Type: Trojan, Worm.
February 13, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
February 13, 2018
How To Keep Your New Online Business Safe
February 13, 2018
Google is bringing AMP to email
February 13, 2018
Would you allow Facebook into your home?
February 13, 2018
UK Government announces tool to detect and block extremist videos
February 13, 2018
Blockchain Hardened devices: Can they restore privacy with security by design?
These developments show that security technology is now keeping up, or outpacing other technological and regulatory developments. Thus, while users’ wants often continue to trump their appreciation of risk, the industry has responded and in many cases gotten ahead of popular demand. The post Blockchain Hardened devices: Can they restore privacy with security by design? […]
February 13, 2018
Did the NSA really use Twitter to send coded messages to a Russian?
February 13, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 13, 2018
Facebook’s privacy settings are illegal, says court
February 13, 2018
Beware the ‘celebrities’ offering you free cryptocoins on Twitter
February 13, 2018
Correctly integrating containers
February 13, 2018
UK Home Sec Amber Rudd unveils extremism blocking tool
February 13, 2018
The strange case of the data breach that stayed online for a month
February 13, 2018
Browsealoud plugin hacked to mine Monero on 4,000 Govt websites
February 13, 2018
LinuxSecurity.com: A request smuggling vulnerability was discovered in pound that may allow attackers to send a specially crafted http request to a web server or reverse proxy while pound may see a different set of requests. This facilitates several possible exploitations, such as partial cache
February 13, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
February 13, 2018
Type: Vulnerability. Microsoft Windows is prone to a local security-bypass vulnerability; fixes are available.
February 13, 2018
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
February 13, 2018
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
February 13, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
February 13, 2018
Type: Vulnerability. Microsoft Windows is prone to a remote denial-of-service vulnerability; fixes are available.
February 13, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
February 13, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
February 13, 2018
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
February 13, 2018
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
February 13, 2018
LinuxSecurity.com: CVE-2017-6419 CVE-2017-11423
February 12, 2018
LinuxSecurity.com: Mikhail Klementev, Ronnie Goodrich and Andrew Krasichkov discovered that missing restrictions in the implementation of the WEBSERVICE function in LibreOffice could result in the disclosure of arbitrary files readable by the user who opens a malformed document.
February 12, 2018
LinuxSecurity.com: The package sthttpd before version 2.27.1-1 is vulnerable to arbitrary code execution.
February 12, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 12, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 12, 2018
LinuxSecurity.com: WavPack could be made to crash if it opened a specially crafted file.
February 12, 2018
In a month where matchmaking is in high demand, we took a look at recent trends around online dating sites using Webroot Brightcloud Threat Intelligence Platform. What did we find? Valentine’s Day sends cybercriminals on the prowl, and not for a soulmate. On average, visits to dating websites increase by 53 percent in the month […]
February 12, 2018
LinuxSecurity.com: Mikhail Klementev, Ronnie Goodrich and Andrew Krasichkov discovered that missing restrictions in the implementation of the WEBSERVICE function in LibreOffice could result in the disclosure of arbitrary files readable by the user who opens a malformed document.
February 12, 2018
Romance Scams Drive Necurs Botnet Activity in Run Up to Valentine’s Day
February 12, 2018
BitGrail cryptocurrency exchange hacked; $160 million in Nano stolen
February 12, 2018
Risk Level: Very Low. Type: Trojan.
February 12, 2018
Until last week, you could pwn KDE Linux desktop with a USB stick
February 12, 2018
See that over Heathrow? It’s not an airliner – it’s a Predator drone
February 12, 2018
Washington State Marijuana Tracking System Hacked to Steal Route Data
February 12, 2018
US and UK government websites hijacked to mine cryptocurrency on visitors’ machines
If undetected by a user’s security solution or content- or ad-blocker, the script ran in the background unbeknown to the user until the webpage was closed. A number of the affected websites, including that of the ICO, were also offline for hours in the aftermath of the attack. The post US and UK government websites […]
February 12, 2018
Google-Nest merger reawakens privacy worries
February 12, 2018
Uh-oh. How just inserting a USB drive can pwn a Linux box
February 12, 2018
Cryakl ransomware antidote released after servers seized
February 12, 2018
You have five months to switch your website to HTTPS
February 12, 2018
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
February 12, 2018
All HTTP websites to soon be marked as ‘not secure’ by Google Chrome
February 12, 2018
LinuxSecurity.com: It was discovered that there was an input validation vulnerability in the librsvg renderer library that could result in data being leaked to remote attackers via a specially-crafted file.
February 12, 2018
LinuxSecurity.com: Chris Navarrete from Fortinet’s FortiGuard Labs discovered that Audacity, a multi-track audio editor, contains a vulnerability such that a .wav file with a crafted FORMATCHUNK structure (many channels) can result in
February 12, 2018
Government websites hijacked by cryptomining plugin
February 12, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in VirtualBox, the worst of which could allow an attacker to take control of VirtualBox.
February 11, 2018
Winter Olympics website downed by cyber attack
February 11, 2018
LinuxSecurity.com: Jonas Klempel discovered that, when parsing the AIA-Extension field of a client certificate, Apache Tomcat Native did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the
February 11, 2018
security update
February 11, 2018
Turns out Equifax breach was way bigger than initially thought
February 11, 2018
Apple’ iBoot Baseband Code for Various iPhone Models Leaked on GitHub
February 11, 2018
security update
February 11, 2018
Have federal nuclear supercomputer? GO CRYPTOMINING!
February 10, 2018
LinuxSecurity.com: It was discovered that the uwsgi_expand_path function in utils.c in Unbit uWSGI, an application container server, has a stack-based buffer overflow via a large directory length that can cause a denial-of-service (application crash) or stack corruption.
February 10, 2018
Cyber Attack Disrupts Winter Olympics Website During Opening Ceremony
February 10, 2018
security update
February 10, 2018
LinuxSecurity.com: Meh Chang discovered a buffer overflow flaw in a utility function used in the SMTP listener of Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or potentially the execution of arbitrary code via a specially crafted
February 10, 2018
LinuxSecurity.com: Meh Chang discovered a buffer overflow flaw in a utility function used in the SMTP listener of Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or potentially the execution of arbitrary code via a specially crafted
February 10, 2018
LinuxSecurity.com: Security fix for CVE-2017-15698
February 10, 2018
LinuxSecurity.com: PostgreSQL could be made to expose sensitive information.
February 10, 2018
LinuxSecurity.com: The package clamav before version 0.99.3-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.
February 10, 2018
LinuxSecurity.com: An update that solves 9 vulnerabilities and has 70 fixes is now available.
February 10, 2018
Why Linux is better than Windows or macOS for security
February 10, 2018
Dark Web’s largest cybercrime group indicted after stealing $530M
February 10, 2018
NSA code backported, crims cuffed, leaky AWS S3 buckets, and more
February 10, 2018
LinuxSecurity.com: Lalith Rallabhandi discovered that OmniAuth, a Ruby library for implementing multi-provider authentication in web applications, mishandled and leaked sensitive information. An attacker with access to the callback environment, such as in the case of a crafted web
February 10, 2018
LinuxSecurity.com: The package plasma-workspace before version 5.12.0-1 is vulnerable to arbitrary command execution.
February 9, 2018
LinuxSecurity.com: The package plasma-workspace before version 5.12.0-1 is vulnerable to arbitrary command execution.
February 9, 2018
LinuxSecurity.com: The package go-pie before version 1.9.4-1 is vulnerable to arbitrary code execution.
February 9, 2018
LinuxSecurity.com: The package go before version 1.9.4-1 is vulnerable to arbitrary code execution.
February 9, 2018
LinuxSecurity.com: An update that solves 9 vulnerabilities and has 44 fixes is now available.
February 9, 2018
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
February 9, 2018
Type: Vulnerability. Microsoft Internet Information Services is prone to a security-bypass vulnerability; fixes are available.
February 9, 2018
Type: Vulnerability. Adobe Flash Player is prone to an unspecified remote code-execution vulnerability; fixes are available.
February 9, 2018
Cisco Confirms Critical Firewall Software Bug Is Under Attack
February 9, 2018
LinuxSecurity.com: Mailman could be made to run arbitrary code.
February 9, 2018
Risk Level: Very Low. Type: Trojan.
February 9, 2018