LinuxSecurity.com: CVE-2017-7651 A crafted CONNECT packet from an unauthenticated client could result in extraordinary memory consumption.
March 31, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in the Dovecot email server. The Common Vulnerabilities and Exposures project identifies the following issues:
March 31, 2018
LinuxSecurity.com: Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in
March 31, 2018
LinuxSecurity.com: It was discovered that constructed ASN.1 types with a recursive definition could exceed the stack, potentially leading to a denial of service.
March 31, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 31, 2018
LinuxSecurity.com: libvncserver version through 0.9.11. does not sanitize msg.cct.length which may result in access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
March 31, 2018
security update
March 30, 2018
security update
March 30, 2018
LinuxSecurity.com: An update that solves 19 vulnerabilities and has 16 fixes is now available.
March 30, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 30, 2018
LinuxSecurity.com: The system could be made to expose sensitive information.
March 30, 2018
LinuxSecurity.com: An update that solves 9 vulnerabilities and has 41 fixes is now available.
March 30, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
March 30, 2018
Drupal releases patch fixing “highly critical” flaw
The update plugs a security hole that exposes a million Drupal websites to attacks The post Drupal releases patch fixing “highly critical” flaw appeared first on WeLiveSecurity
March 30, 2018
The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. City of Atlanta Faces Ransomware Roadblock In the past week, the city of Atlanta has been dealing […]
March 30, 2018
LinuxSecurity.com: An update that fixes three vulnerabilities is now available.
March 30, 2018
LinuxSecurity.com: Alberto Garcia, Francisco Oca and Suleman Ali of Offensive Research discovered that the Xerces-C XML parser mishandles certain kinds of external DTD references, resulting in dereference of a NULL pointer while processing the path to the DTD. The bug allows for a denial of
March 29, 2018
LinuxSecurity.com: Wei Lei and Liu Yang of Nanyang Technological University discovered a stack-based buffer overflow in PHP5 when parsing a malformed HTTP response which can be exploited to cause a denial-of-service.
March 29, 2018
Animal abuse website hacked; thousands of users exposed
March 29, 2018
LinuxSecurity.com: memcached version prior to 1.4.37 contains an Integer Overflow vulnerability that can result in data corruption and deadlocks. This attack is exploitable via network connectivity to the memcached service.
March 29, 2018
LinuxSecurity.com: It was discovered that constructed ASN.1 types with a recursive definition could exceed the stack, potentially leading to a denial of service.
March 29, 2018
security update
March 29, 2018
LinuxSecurity.com: Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or information disclosure.
March 29, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
March 29, 2018
LinuxSecurity.com: An update for openstack-tripleo-common and openstack-tripleo-heat-templates is now available for Red Hat OpenStack Platform 12.0 (Pike). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
March 29, 2018
WannaCryptor said to reappear, hitting Boeing’s computers
The notorious ransomware prompted fears that aircraft production could be impacted The post WannaCryptor said to reappear, hitting Boeing’s computers appeared first on WeLiveSecurity
March 29, 2018
Pingu Cleans Up: Subscription scam on Google Play
The game was uploaded to Google Play and attempted to trick users into unwittingly signing up for a weekly paid subscription The post Pingu Cleans Up: Subscription scam on Google Play appeared first on WeLiveSecurity
March 29, 2018
Hackers hit 911 system, emergency dispatch affected
March 29, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 29, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has two fixes is now available.
March 29, 2018
Firefox add-on limits Facebook’s tracking of you
March 29, 2018
Microsoft’s Windows 7 Meltdown patch created ‘worse’ flaw
March 29, 2018
World Backup Day: Banks having each other’s back
As World Backup Day reminds us, robust backups are integral to healthy information security practices of any organization. This is doubly true for those operating in critical sectors. The post World Backup Day: Banks having each other’s back appeared first on WeLiveSecurity
March 29, 2018
LinuxSecurity.com: Jasper Mattsson found a remote code execution vulnerability in the Drupal content management system. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being completely compromised.
March 29, 2018
security update
March 29, 2018
LinuxSecurity.com: A remote code execution vulnerability has been found in Drupal, a fully-featured content management framework. For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2018-002
March 28, 2018
The brazen theft of cryptocurrency has been an ongoing issue for years now, mostly affecting exchanges and users who fail to store their private keys securely. But what about scams purporting to be giving free cryptocurrency away? It seems a little ridiculous, but there is a serious problem with this new incarnation of the classic […]
March 28, 2018
Cisco Patches Two Critical RCE Bugs in IOS XE Software
March 28, 2018
LinuxSecurity.com: An update that solves 19 vulnerabilities and has 12 fixes is now available.
March 28, 2018
security update
March 28, 2018
security update
March 28, 2018
Running Drupal? You need to patch, patch, patch right now!
March 28, 2018
LinuxSecurity.com: This update includes the changes in tzdata 2018d for the Perl bindings. For the list of changes, see DLA-1323-1. For Debian 7 “Wheezy”, these problems have been fixed in version
March 28, 2018
LinuxSecurity.com: This update includes the changes in tzdata 2018d. Notable changes are: – Palestine started Daylight Saving Time (DST) on March 24, rather than on March 31st.
March 28, 2018
LinuxSecurity.com: An update for sensu is now available for Red Hat OpenStack Platform 12.0 Operational Tools for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
March 28, 2018
LinuxSecurity.com: Various security issues were discovered in Graphicsmagick, a collection of image processing tools. CVE-2017-18219
March 28, 2018
Risk Level: Very Low. Type: Trojan.
March 28, 2018
GoScanSSH Malware Targets Linux Servers
March 28, 2018
Northern Irish Parliament Hit by Brute Force Attack
March 28, 2018
World Backup Day: Saving the day by saving data
World Backup Day, celebrated annually on March 31, is a timely reminder of the importance of taking effective measures that can make all the difference when a data loss incident strikes. It is also a good time to pause and reflect on the rising tide of threats that organizations, notably those operating in critical industries, […]
March 28, 2018
Yet another Apple password leak – how to avoid it
March 28, 2018
Cyberattack disrupted Baltimore emergency responders
March 28, 2018
Push for legal mandate to unlock phones revived by DOJ
March 28, 2018
Cambridge Analytica’s secret coding sauce allegedly leaked
March 28, 2018
FTC goes after Facebook
March 28, 2018
Monero cryptocurrency: Malware’s rising star
Bitcoin gets all the press these days when it comes to cryptocurrency but the gap in market capitalization is narrowing. The post Monero cryptocurrency: Malware’s rising star appeared first on WeLiveSecurity
March 28, 2018
Be wary when scanning QR codes with iOS 11’s camera app
Boobytrapped QR code can trick iOS 11 into taking you to a malicious website The post Be wary when scanning QR codes with iOS 11’s camera app appeared first on WeLiveSecurity
March 28, 2018