Menu

Monthly Archives: May 2018

Trio indicted after police SWAT prank call leads to cops killing bloke
FBI seizes VPNFilter botnet domain that infected 500,000 routers

LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

What Will GDPR’s Impact Be On U.S. Consumer Privacy?
FBI agents take aim at VPNFilter botnet, point finger at Russia, yell ‘national security threat’
Intel’s ‘Virtual Fences’ Spectre Fix Won’t Protect Against Variant 4
Teen monitoring app exposes plaintext Apple ID passwords of its users
2 million stolen identities used to make fake net neutrality comments
Researchers Say More Spectre-Related CPU Flaws On Horizon
Six Vulnerabilities Found in Dell EMC’s Disaster Recovery System, One Critical
Comcast Patches Router Bug That Leaked Some Wi-Fi Passwords
Office 365 will automatically block Flash and Silverlight
FBI admits to inflating number of crime-related devices it can’t crack
VPNFilter router malware – what to do? [VIDEO]
GDPR: One rule to rule them all – legally

It’s almost here but what are the legal ramifications of the incoming legislation for businesses The post GDPR: One rule to rule them all – legally appeared first on WeLiveSecurity

VPNFilter botnet has hacked 500,000 routers. Reboot and patch now!
Data of millions of Japanese sold on underground hacking forums
Losses from BEC scams rising fast and furious

In 2017, the victims of BEC fraud were stung for $676 million, almost double the loss totals reported in the previous year The post Losses from BEC scams rising fast and furious appeared first on WeLiveSecurity

Oracle plans to dump risky Java serialization
London’s Met Police: We won’t use facial recognition at Notting Hill Carnival
Mexico: Cybercriminals steal at least 400 million pesos through unauthorized transfers

While the exact amount of stolen money and source of the cybercriminals are not known, the authorities have confirmed that no clients were affected. The post Mexico: Cybercriminals steal at least 400 million pesos through unauthorized transfers appeared first on WeLiveSecurity

Smashing Security #079: Mugshots, mobile mania, and back end gurus

security update

Advanced VPNFilter malware menacing routers worldwide
Ransomware Most Commonly Used Malicious Software: How to Protect Your Business
Mobile Fraud Soars as Social Sites Help Scammers
Brit Attorney General: Nation state cyber attack is an act of war
Malicious PHP Script Infects 2,400 Websites in the Past Week
TeenSafe Tracking App Exposes Thousands of Private Records
Roaming Mantis Swarms Globally, Spawning iOS Phishing, Cryptomining
VPNFilter – is a malware timebomb lurking on your router?
WeLiveSecurity in running for European Security Blogger Awards. Vote now!

We’re not in it for prizes (or cakes), but there’s no denying that we’re thrilled to be a finalist for the European Security Blogger Awards – and in five categories at that! The post WeLiveSecurity in running for European Security Blogger Awards. Vote now! appeared first on WeLiveSecurity

Surprise! Student receives $36,000 Google bug bounty for RCE flaw
Google in court over ‘clandestine tracking’ of 4.4m iPhone users
800,000 DrayTek routers at risk of DNS hijacking attack – update your firmware!
Amazon Rekognition a possible threat to the civil rights of citizens

Use of software by law enforcement as a surveillance tool is a real concern for groups The post Amazon Rekognition a possible threat to the civil rights of citizens appeared first on WeLiveSecurity

£120,000 fine for university after details of 20,000 staff and students exposed in data breach
Big bimmer bummer: Bavaria’s BMW buggies battered by bad bugs

security update

ISP TalkTalk’s Wi-Fi passwords Walk Walk thanks to Awks Awks router security hole
Server? What server? Site forgotten for 12 years attracts hacks, fines
TeenSafe phone monitoring app leaks teens’ iCloud logins in plaintext
Donald Trump’s smartphone security: an inconvenient truth
Intel Responds to Spectre-Like Flaw In CPUs

LinuxSecurity.com: Matthias Gerstner discovered that PackageKit, a DBus abstraction layer for simple software management tasks, contains an authentication bypass flaw allowing users without privileges to install local packages.

Turla Mosquito: A shift towards more generic tools

ESET researchers have observed a significant change in the campaign of the infamous espionage group The post Turla Mosquito: A shift towards more generic tools appeared first on WeLiveSecurity

Brit water firms, power plants with crap cyber security will pay up to £17m, peers told
14 free online courses about computer security

Get a better understanding of cybersecurity with this list of free online courses that you can take to become more cyber-aware The post 14 free online courses about computer security appeared first on WeLiveSecurity

DrayTek router user? Patch now to keep the crooks out…
Salted Hash – SC 01: What an Apple phishing attack looks like
Malware campaign expands to add cryptocurrency mining and iOS phishing attacks
Mugshots.com’s alleged owners arrested for extortion
You’ve got to be kitten: Vet recruiter told to pay £1k after pinching info from ex-employer
How deception technologies use camouflage to attract attackers | Salted Hash Ep 26
Guilty! Anti-anti-virus crook convicted, could spend decades in jail
Summoners of web tsunamis have moved to layer 7, says Cloudflare

LinuxSecurity.com: Several security issues were addressed in the Linux kernel.

LinuxSecurity.com: Several security issues were addressed in the Linux kernel.

LinuxSecurity.com: Several security issues were addressed in the Linux kernel.

LinuxSecurity.com: Several security issues were addressed in the Linux kernel.

LinuxSecurity.com: Several security issues were addressed in the Linux kernel.

LinuxSecurity.com: Several security issues were addressed in the Linux kernel.

LinuxSecurity.com: The system could be made to expose sensitive information.

Victoria’s educational apps-for-students let creeps contact kids

LinuxSecurity.com: Side channel execution mitigations were added to QEMU.

security update

LinuxSecurity.com: An update for qemu-kvm is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Microsoft, Google: We’ve found a fourth data-leaking Meltdown-Spectre CPU hole
Multilingual malware hits Android devices for phishing & cryptomining

LinuxSecurity.com: Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in privilege escalation.

Facebook conspiracy theories after Android app tries to “get root”
Penetration tester pokes six holes in Dell EMC’s RecoverPoint products
High-end router flinger DrayTek admits to zero day in bunch of Vigor kit
See me speak at the Sunny Side Up Security breakfast event in London next month
Wicked Botnet Uses Passel of Exploits to Target IoT
Greenwich uni fined £120k: Hole in computing school site leaked 20k people’s data
Best Security Podcast: “Smashing Security” up for top award
Cybersecurity training still neglected by many employers

While training employees will not guarantee complete cyber safety for companies, it could go a long way to making workers more cyber-aware The post Cybersecurity training still neglected by many employers appeared first on WeLiveSecurity

Real-time cellphone location data leaked for all major US carriers
Chrome drops ‘secure’ label for HTTPS websites
Syrian Electronic Army Members Indicted for Conspiracy

LinuxSecurity.com: An update that fixes 13 vulnerabilities is now available.

LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.

LinuxSecurity.com: An update that fixes 13 vulnerabilities is now available.

You are not alone; The Pirate Bay is down around the world

LinuxSecurity.com: The package libcurl-gnutls before version 7.60.0-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.

LinuxSecurity.com: The package libcurl-compat before version 7.60.0-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.

LinuxSecurity.com: The package lib32-libcurl-gnutls before version 7.60.0-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.

LinuxSecurity.com: The package lib32-libcurl-compat before version 7.60.0-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.

LinuxSecurity.com: The package lib32-curl before version 7.60.0-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.

Someone hacked California’s live congressional debate to run gay porn

Advance notification for upcoming end-of-life for Debian 8

security update

LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:1414

Hurdles Remain After Senate Votes To Restore Net Neutrality
Latin American ‘Biñeros’ Bond Over Fraudulent Purchase Scheme
WiFi hacker- 10 best Android & Desktop WiFi hacking apps free download
Tech Talk: As GDPR looms, companies rush to comply