Risk Level: Very Low. Type: Trojan.
February 9, 2018
New Tech Support Scam Freezes Chrome, Firefox & Brave Browser
February 9, 2018
Apple’s iOS source code leak – what you need to know
February 9, 2018
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 9, 2018
Chinese police get facial recognition glasses
February 9, 2018
Robot’s revenge – the CAPTCHA that stops humans
February 9, 2018
LinuxSecurity.com: Security fix for CVE-2017-15698
February 9, 2018
How will WPA3 improve WiFi security?
This is aimed at improving security at the time of the handshake, which is when the key is being exchanged. As a result, WPA3 is poised to provide robust security even if short or weak passwords are used, i.e. those that don’t contain a combination of letters, numbers and symbols. The post How will WPA3 […]
February 9, 2018
LinuxSecurity.com: simplesamlphp, an authentication and federation application has been found vulnerable to Cross Site Scripting (XSS), signature validation byepass and using insecure connection charset.
February 9, 2018
LinuxSecurity.com: The mailman package has a Cross-site scripting (XSS) vulnerability in the web UI before 2.1.26 which allows remote attackers to inject arbitrary web script or HTML via a user-options URL
February 9, 2018
The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. New Variant of Scarab Ransomware With a few interesting changes to the original Scarab ransomware, Scarabey is […]
February 9, 2018
VMware sticks finger in Meltdown/Spectre dike for virtual appliances
February 9, 2018
LinuxSecurity.com: A regression was detected in the previously issued fix for CVE-2018-6360. The patch released with DSA 4105-1 broke the feature of invoking mpv with raw YouTube ids. This update fixes this functionality issue. For reference, the relevant part of the original advisory text follows.
February 9, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has 17 fixes is now available.
February 9, 2018
security update
February 9, 2018
Risk Level: Very Low. Type: Trojan.
February 9, 2018
Risk Level: Very Low. Type: Trojan.
February 9, 2018
Apple Downplays Impact of iBoot Source Code Leak
February 8, 2018
security update
February 8, 2018
security update
February 8, 2018
Now that’s taking the p… Sewage plant ‘hacked’ to craft crypto-coins
February 8, 2018
LinuxSecurity.com: An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
February 8, 2018
LinuxSecurity.com: An update that solves 9 vulnerabilities and has 68 fixes is now available.
February 8, 2018
LinuxSecurity.com: Several security issues were fixed in Django.
February 8, 2018
LinuxSecurity.com: Security fixes for CVE-2017-17485 and CVE-2018-5968.
February 8, 2018
From July, Chrome will name and shame insecure HTTP websites
February 8, 2018
Uber data breach aided by lack of multi-factor authentication
February 8, 2018
Global cybercrime behemoth busted, 36 people indicted
According to US authorities, the enterprise aimed at becoming the premier destination for the buying and selling of stolen payment card data and forged identification documents. It is believed that the losses that the Infraud Organization had intended to cause were north of $2.2 billion. The post Global cybercrime behemoth busted, 36 people indicted appeared […]
February 8, 2018
Deepfake porn videos banned by Reddit, Twitter, Pornhub
February 8, 2018
Facebook HOAX! New algorithm will NOT only show you 26 friends
February 8, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 8, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.
February 8, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.
February 8, 2018
12 Common Threat Intelligence Use Cases
February 8, 2018
Swisscom data breach exposes 800,000 customers
February 8, 2018
CyberThreat18: 2 days of bughunting, techie chat and code lockdown
February 8, 2018
WordPress users – do an update now, and do it by hand!
February 8, 2018
Smashing Security #064: So just a ‘teeny tiny’ security issue then?
February 8, 2018
Google Expands Play Marketplace Bug Bounty Program
February 7, 2018
LinuxSecurity.com: It was discovered that the webhook validation of Anymail, a Django email backends for multiple ESPs, is prone to a timing attack. A remote attacker can take advantage of this flaw to obtain a WEBHOOK_AUTHORIZATION secret and post arbitrary email tracking events.
February 7, 2018
security update
February 7, 2018
LinuxSecurity.com: A vulnerabilities has been found in the PostgreSQL database system: CVE-2018-1053
February 7, 2018
Type: Vulnerability. Adobe Flash Player is prone to an remote code-execution vulnerability; fixes are available.
February 7, 2018
LinuxSecurity.com: Two vulnerabilities were discovered in Libtasn1, a library to manage ASN.1 structures, allowing a remote attacker to cause a denial of service against an application using the Libtasn1 library.
February 7, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has 17 fixes is now available.
February 7, 2018
LinuxSecurity.com: Security fix for CVE-2017-17969 (from Debian)
February 7, 2018
LinuxSecurity.com: Security fix for CVE-2018-6381
February 7, 2018
LinuxSecurity.com: This update includes a rebase from 8.0.47 to 8.0.49.
February 7, 2018
LinuxSecurity.com: This is a security fix release that fixes a sandbox escape in the flatpak dbus proxy. This issue was found by Gabriel Campana of The Google Security Team. Major changes in 0.10.3 * Fix dbus proxy vulnerability in authentication phase * Make permission handling ignore unknown permissions for forwards compatibility * Removed incorrect error […]
February 7, 2018
Risk Level: Very Low. Type: Trojan.
February 7, 2018
UK-led police operation quashes Luminosity Link RAT
The investigation showed that the tool, which required little technical knowledge to deploy, had over 8,600 users in 78 countries. Victims are believed to be in the thousands. The post UK-led police operation quashes Luminosity Link RAT appeared first on WeLiveSecurity
February 7, 2018
Reddit users, beware its evil twin
February 7, 2018
YouTube Kids hasn’t cleaned up its act
February 7, 2018
LinuxSecurity.com: Security fixes for CVE-2017-17485 and CVE-2018-5968.
February 7, 2018
Alleged Kelihos botmaster and spam king extradited to US
February 7, 2018
Abusing X.509 Digital Certificates for Covert Data Exchange
February 7, 2018
Australian cops to enter kindergartens to teach kids not to cyber
February 7, 2018
Malware Exploiting Spectre, Meltdown Flaws Emerges
February 7, 2018
Beware the looming Google Chrome HTTPS certificate apocalypse!
February 7, 2018
Uber quits GitHub for in-house code after 2016 data breach
February 7, 2018
LinuxSecurity.com: New kernel packages are available for Slackware 14.2 to mitigate the speculative side channel attack known as Spectre variant 2.
February 7, 2018
Web analytics outfit Mixpanel slurped surfers’ passwords
February 7, 2018
LinuxSecurity.com: It was discovered that mpv, a media player, was vulnerable to remote code execution attacks. An attacker could craft a malicious web page that, when used as an argument in mpv, could execute arbitrary code in the host of the mpv user.
February 7, 2018
Who doesn’t like a good mobile game? Especially a free one! They allow you to blow off steam while fine-tuning your skills, competing with others or maybe even winning bragging rights among friends. Free games can be fun to play, yet there are some common-sense guidelines to make sure these apps don’t surprise you with […]
February 7, 2018
Risk Level: Very Low. Type: Trojan.
February 7, 2018
Risk Level: Very Low.
February 7, 2018
Adobe: Two critical Flash security bugs fixed for the price of one
February 6, 2018
Safer Internet Day 2018 [VIDEO]
February 6, 2018
All Ledger hardware wallets vulnerable to man in the middle attack
February 6, 2018
Uber and Waymo clash in court over driverless technology
February 6, 2018
Firefox 59’s privacy mode plugs leaky referrers
February 6, 2018
MacUpdate Hacked to Distribute Mac Cryptocurrency Miner
February 6, 2018
One year later, the UK’s Active Cyber Defence is seeing good results
February 6, 2018
Keeping kids safe online – trying to practice what I preach
February 6, 2018
FBI warns of email scams claiming to be from Bureau
Another template attempts to scare, rather than thrill, the recipients. Upon learning that “your IP address and other identifying information were used to commit multiple online crimes”, the mark is urged to contact the sender by phone immediately. The post FBI warns of email scams claiming to be from Bureau appeared first on WeLiveSecurity
February 6, 2018
Spectre and Meltdown | Salted Hash Ep 17
February 6, 2018
How I Got Paid $0 From the Uber Security Bug Bounty
February 6, 2018