LinuxSecurity.com: – spec cleanup, silent rpmlint – remove upstreamed patches, fixes rhbz #1507577 – update to 1.2.2
April 7, 2018
LinuxSecurity.com: rebase and fixed CVE-2018-1000140
April 7, 2018
LinuxSecurity.com: https://nodejs.org/en/blog/release/v8.11.0/
April 7, 2018
ATMJackpot Malware Stealing Cash From ATMs
April 7, 2018
OPEN SOURCE WON. SO, NOW WHAT?
April 7, 2018
LinuxSecurity.com: Lilith of Cisco Talos discovered several buffer overflow vulnerabilities in the SDL Image library which can be leveraged by attackers to execute arbitrary code via specially crafted image files.
April 7, 2018
LinuxSecurity.com: New patch packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.
April 7, 2018
LinuxSecurity.com: Multiple invalid frees and buffer-overflow vulnerabilities were discovered in sam2p, a utility to convert raster images and other image formats, that may lead to a denial-of-service (application crash) or unspecified other impact.
April 7, 2018
security update
April 6, 2018
Study: White House email domains at risk of being misused for phishing scams
Most of the White House’s email domains have yet to deploy an email authentication protocol known as DMARC that is designed to reduce the risk of attackers impersonating legitimate email addresses for distributing spam or phishing messages. The post Study: White House email domains at risk of being misused for phishing scams appeared first on […]
April 6, 2018
Intel won’t fix Spectre flaws in older chips
April 6, 2018
Washington DC “awash” with fake cell towers
April 6, 2018
Email Fraud is a Top Business Risk for 2018
April 6, 2018
LinuxSecurity.com: Fixes for CVE-2018-1002150.
April 6, 2018
LinuxSecurity.com: Update to the latest upstream release, which fixes CVE-2017-14062.
April 6, 2018
LinuxSecurity.com: Update to 3.6.5
April 6, 2018
LinuxSecurity.com: – spec cleanup, silent rpmlint – remove upstreamed patches, fixes rhbz #1507577 – update to 1.2.2
April 6, 2018
LinuxSecurity.com: This update includes the latest upstream release of the Apache HTTP Server, version 2.4.33. A number of security vulnerabilities are fixed in this release: * *Low*: Possible out of bound read in mod_cache_socache (CVE-2018-1303) * *Low*: Possible out of bound access after failure in reading the HTTP request (CVE-2018-1301) * *Low*: Weak Digest auth […]
April 5, 2018
LinuxSecurity.com: This update includes the latest upstream release of mod_http2, version 1.10.16. This includes a security fix (CVE-2018-1302): When an HTTP/2 stream was destroyed after being handled, mod_http2 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerabilty hard to trigger in usual […]
April 5, 2018
WhatsApp phishing – how it works, and what to do [VIDEO]
April 5, 2018
LinuxSecurity.com: Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) SL6 x86_64 libvorbis-1.2.3-5.el6_9.1.i686.rpm libvorbis-1.2.3-5.el6_9.1.x86_64.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.x86_64.rpm libvorbis-devel-1.2.3-5.el6_9.1.i686.rpm libvorbis-devel-1.2.3-5.el6_9.1.x86_64.rpm i386 libvorbis-1.2.3 [More…]
April 5, 2018
LinuxSecurity.com: An update that solves 6 vulnerabilities and has one errata is now available.
April 5, 2018
security update
April 5, 2018
LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 5, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 5, 2018
LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 5, 2018
LinuxSecurity.com: An update for libvorbis is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 5, 2018
Reading Time: ~3 min.When WannaCry ransomware spread throughout the world last year by exploiting vulnerabilities for which there were patches, we security “pundits” stepped up the call to patch, as we always do. In a post on LinkedIn Greg Thompson, Vice President of Global Operational Risk & Governance at Scotiabank expressed his frustration with the […]
April 5, 2018
You are not alone; The Pirate Bay is down once again
April 5, 2018
Risk Level: Very Low. Type: Trojan.
April 5, 2018
Risk Level: Very Low. Type: Trojan.
April 5, 2018
Saks and Lord & Taylor stores suffer data breach exposing five million bank cards
Cybercriminals are believed to have stolen information for more than five million credit and debit cards that shoppers had used at dozens of Saks Fifth Avenue, Saks Off 5th and Lord & Taylor stores mainly in the United States between May 2017 and March 2018. The post Saks and Lord & Taylor stores suffer data […]
April 5, 2018
Beware ad slingers thinly disguised as security apps
ESET researchers have analyzed a newly discovered set of apps on Google Play, Google’s official Android app store, that pose as security applications. Instead of security, all they provide is unwanted ads and ineffective pseudo-security. The post Beware ad slingers thinly disguised as security apps appeared first on WeLiveSecurity
April 5, 2018
Facebook and Twitter may be forced to identify bots
April 5, 2018
Cloudflare’s 1.1.1.1 promises to make DNS more secure
April 5, 2018
US spanks EU businesses in race to detect p0wned servers
April 5, 2018
Brain monitor had remote code execution and DoS flaw
April 5, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 5, 2018
Risk Level: Very Low. Type: Trojan.
April 5, 2018
Risk Level: Very Low. Type: Trojan.
April 5, 2018
LinuxSecurity.com: The package drupal before version 8.5.1-1 is vulnerable to arbitrary code execution.
April 4, 2018
security update
April 4, 2018
security update
April 4, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 4, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 4, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 4, 2018
Cyber security developments: Keeping safe and up to date
April 4, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
April 4, 2018
White House Lags Far Behind on Email Security Benchmark
April 4, 2018
No, Panera Bread Doesn’t Take Security Seriously
April 4, 2018
Google banishes cryptocurrency mining extensions from Chrome Web Store
The tech giant is taking the measure after a rise in malicious browser extensions that mine digital money by hijacking the processing power of users’ computers. The clampdown follows Google’s recent move to stop serving any and all adverts promoting virtual currencies and initial coin offerings. The post Google banishes cryptocurrency mining extensions from Chrome […]
April 4, 2018
Free Virgin Atlantic tickets? No, it’s a WhatsApp scam
April 4, 2018
Grindr was sharing HIV status of users, but now it’s not
April 4, 2018
The 5 IT security actions to take now based on 2018 Trends
Implementing the five actions described in this article can help reduce your organization’s cyber risk and bolster its security defenses The post The 5 IT security actions to take now based on 2018 Trends appeared first on WeLiveSecurity
April 4, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in glibc, the worst of which could allow remote attackers to execute arbitrary code.
April 4, 2018
LinuxSecurity.com: Multiple vulnerabilities were discovered in libxslt, the worst of which may allow a remote attacker to execute arbitrary code.
April 4, 2018
LinuxSecurity.com: Michal Kedzior found two vulnerabilities in LDAP Account Manager, a web front-end for LDAP directories. CVE-2018-8763
April 4, 2018