March 8, 2018
Smashing Security #068: Malware from outer space!
March 8, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in the ISC DHCP client, relay and server. The Common Vulnerabilities and Exposures project identifies the following issues:
March 7, 2018
LinuxSecurity.com: Kernel: KVM: MMU potential stack buffer overrun during page walks (CVE-2017-12188, Important) * Kernel: KVM: debug exception via syscall emulation (CVE-2017-7518, Moderate) SL7 x86_64 kernel-3.10.0-693.21.1.el7.x86_64.rpm kernel-debug-3.10.0-693.21.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-693.21.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-693.21.1.el7.x86_64.rpm ke [More…]
March 7, 2018
LinuxSecurity.com: libreoffice: Remote arbitrary file disclosure vulnerability via WEBSERVICE formula (CVE-2018-6871) SL7 x86_64 libreoffice-base-5.0.6.2-15.el7_4.x86_64.rpm libreoffice-calc-5.0.6.2-15.el7_4.x86_64.rpm libreoffice-core-5.0.6.2-15.el7_4.x86_64.rpm libreoffice-debuginfo-5.0.6.2-15.el7_4.x86_64.rpm libreoffice-draw-5.0.6.2-15.el7_4.x86_64.rpm libreoffice-emailmerge-5.0.6. [More…]
March 7, 2018
LinuxSecurity.com: php: Buffer over-read from unitialized data in gdImageCreateFromGifCtx function (CVE-2017-7890) SL7 x86_64 php-5.4.16-43.el7_4.1.x86_64.rpm php-bcmath-5.4.16-43.el7_4.1.x86_64.rpm php-cli-5.4.16-43.el7_4.1.x86_64.rpm php-common-5.4.16-43.el7_4.1.x86_64.rpm php-dba-5.4.16-43.el7_4.1.x86_64.rpm php-debuginfo-5.4.16-43.el7_4.1.x86_64.rpm php-devel-5.4.16-43.el7_4.1. [More…]
March 7, 2018
LinuxSecurity.com: 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c (CVE-2018-1054) * 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (CVE-2017-15135) Bug Fix(es): * Previously, if an administrator configured an index for an attribute with a specific matching rule in the “nsMatchingRule” parameter, [More…]
March 7, 2018
Facebook Onavo Protect doesn’t protect against Facebook
March 7, 2018
LinuxSecurity.com: A vulnerability in Go might allow remote attackers to execute arbitrary commands during source code build.
March 7, 2018
LinuxSecurity.com: A vulnerability was discovered in util-linux, which could potentially lead to the execution of arbitrary code.
March 7, 2018
First thing’s first—I’d like to introduce myself. I’m senior security analyst Randy Abrams, and I’m delighted to be part of the Webroot team and our online community. Prior to joining the team, I was a research director responsible for analyzing and reporting the test results of antimalware products. I also helped create test methodologies and […]
March 7, 2018
Securing RPM signing keys
March 7, 2018
Trends 2018: The ransomware revolution
While Denial of Service attacks amplified by the use of networks of bot-compromised PCs were becoming a notable problem by the turn of the century, DDoS extortion threats have accelerated in parallel (if less dramatically) with the rise in ransomware in the past few years. The post Trends 2018: The ransomware revolution appeared first on […]
March 7, 2018
Safer browsing coming soon to MacOS Chrome users
March 7, 2018
Second company claims it can unlock iPhone X
March 7, 2018
LinuxSecurity.com: An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 7, 2018
LinuxSecurity.com: Different flaws have been found in leptonlib, an image processing library.
March 7, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 7, 2018
LinuxSecurity.com: An update for libreoffice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
March 6, 2018
LinuxSecurity.com: An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 6, 2018
LinuxSecurity.com: An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 6, 2018
LinuxSecurity.com: An update for php is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
March 6, 2018
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 6, 2018
LinuxSecurity.com: The package python2-django before version 1.11.11-1 is vulnerable to denial of service.
March 6, 2018
POS Malware Found at 160 Applebee’s Restaurant Locations
March 6, 2018
LinuxSecurity.com: The package python2-django before version 1.11.11-1 is vulnerable to denial of service.
March 6, 2018
LinuxSecurity.com: The package python-django before version 1.11.11-1 is vulnerable to denial of service.
March 6, 2018
LinuxSecurity.com: Updated kernel packages that fix six bugs are now available for Red Hat Enterprise Linux 7.3 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 6, 2018
Hacker returns $17 million worth of stolen Ethereum
March 6, 2018
“Big Bitcoin Heist” sees 600 Icelandic servers stolen
March 6, 2018
Cryptojacking: the result of the “cryptocurrency rush”
Tools for mining cryptocurrencies also fall into this category, as in many cases the websites cannot warn users since they have been compromised themselves, hence even the administrators may not be aware that they are contributing to mining for the benefit of an attacker. The post Cryptojacking: the result of the “cryptocurrency rush” appeared first […]
March 6, 2018
LinuxSecurity.com: PostgreSQL could be made to execute arbitrary code.
March 6, 2018
Multicloud’s hidden trade-off: Greater security risk
March 6, 2018
LinuxSecurity.com: Twisted could be made to run programs if it received specially crafted network traffic.
March 6, 2018
LinuxSecurity.com: Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, informations leaks or privilege escalation.
March 6, 2018
Pennsylvania AG sues Uber over 2016 data fail
March 5, 2018
LinuxSecurity.com: An update that solves 10 vulnerabilities and has two fixes is now available.
March 5, 2018
What to Do When Msvcp140.dll Goes Missing in Windows
March 5, 2018
Global police test their cyber-chops in simulated IoT attack
More than three dozen cybercrime and digital forensics experts from 23 countries have investigated a simulated attack on a bank that had been carried out through an IoT device. The post Global police test their cyber-chops in simulated IoT attack appeared first on WeLiveSecurity
March 5, 2018
World’s largest DDoS attack thwarted in minutes
March 5, 2018
A Sneak Peek at the New NIST Cybersecurity Framework
March 5, 2018
LinuxSecurity.com: The package mkinitcpio-busybox before version 1.28.1-1 is vulnerable to arbitrary code execution.
March 5, 2018
LinuxSecurity.com: The package busybox before version 1.28.1-1 is vulnerable to arbitrary code execution.
March 5, 2018
LinuxSecurity.com: It was discovered that there was a potential XML External Entity (XXE) attack in libjgraphx-java, a diagramming library for Java applications. For Debian 7 “Wheezy”, this issue has been fixed in libjgraphx-java version
March 4, 2018
security update
March 4, 2018
security update
March 4, 2018
security update
March 3, 2018
security update
March 3, 2018
security update
March 3, 2018
LinuxSecurity.com: Fix: Multiple vulnerabilities in RubyGems https://www.ruby- lang.org/en/news/2018/02/17/multiple-vulnerabilities-in-rubygems/
March 3, 2018
DDoS Attacks Now Launched with Monero Ransom Notes
March 3, 2018
5 Linux Tools to Help Recover Data from Corrupted Drives
March 3, 2018
LinuxSecurity.com: The security update announced as DSA-4120-1 caused regressions on the powerpc kernel architecture (random programs segfault, data corruption). Updated packages are now available to correct this issue.
March 3, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 3, 2018
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
March 3, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 3, 2018