May 20, 2018
2018: Scariest Year of Evil Things on the Internet
LinuxSecurity.com: Security update for CVE-2017-17723, CVE-2017-17725, CVE-2018-5772
May 19, 2018
LinuxSecurity.com: Security update for CVE-2017-17723, CVE-2017-17725, CVE-2018-5772
May 19, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
May 19, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
May 19, 2018
New Research Seeks to Shorten Attack Dwell Time
May 19, 2018
security update
May 18, 2018
Threatpost News Wrap Podcast for May 18
May 18, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
May 18, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
May 18, 2018
LinuxSecurity.com: An update is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
May 18, 2018
LinuxSecurity.com: Updated collectd packages are now available for Red Hat OpenStack Platform 10.0 Operational Tools for RHEL 7. Red Hat Product Security has rated this update as having a security impact of
May 18, 2018
LinuxSecurity.com: An update for sensu is now available for Red Hat OpenStack Platform 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives adetailed severity rating, is available for each vulnerability from
May 18, 2018
LinuxSecurity.com: Hans Jerry Illikainen discovered a type conversion vulnerability in the MP4 demuxer of the VLC media player, which could result in the execution of arbitrary code if a malformed media file is played.
May 18, 2018
Open source code is ubiquitous and so are many vulnerabilities
One-third of audited codebases that contain Apache Struts suffer from the same vulnerability that facilitated the Equifax hack a year ago The post Open source code is ubiquitous and so are many vulnerabilities appeared first on WeLiveSecurity
May 18, 2018
DHS Unveils National Cybersecurity Risk Strategy
May 18, 2018
Tech Talk: Prepping for GDPR
May 18, 2018
LinuxSecurity.com: The package curl before version 7.60.0-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.
May 18, 2018
LinuxSecurity.com: Several vulnerabilities were discovered in MAD, an MPEG audio decoder library, which could result in denial of service if a malformed audio file is processed.
May 18, 2018
Reading Time: ~2 min.Chili’s Restaurant Reveals Payment Card Breach In the last week, officials have discovered a data breach that affects an unknown number of the chain’s 1,600 restaurants across the country. It is believed that the breach could affect customers who visited the restaurant between March and April of this year, and likely includes […]
May 18, 2018
security update
May 17, 2018
LinuxSecurity.com: The package zathura-pdf-mupdf before version 0.3.3-3 is vulnerable to multiple issues including arbitrary code execution and denial of service.
May 17, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 5 for Red Hat Enterprise Linux 5 and Red Hat JBoss Enterprise Application Platform 5 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact
May 17, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 5 for Red Hat Enterprise Linux 5 and Red Hat JBoss Enterprise Application Platform 5 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact
May 17, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
May 17, 2018
LinuxSecurity.com: The package runc before version 1.0.0rc5+19+g69663f0b-1 is vulnerable to privilege escalation.
May 17, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Data Grid. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 17, 2018
Podcast: The Evolution of Deception Technology
May 17, 2018
Phishing Spy Campaign Targets Top Mideast Officials
May 17, 2018
LinuxSecurity.com: New upstream bugfix release, includes security fix for CVE-2017-18266
May 17, 2018
Suspected member of The Dark Overlord arrested in Serbia
The Dark Overlord, known for a number of breaches and cyber-extortion campaigns in the last two years, is believed to have made US$275,000 from various schemes The post Suspected member of The Dark Overlord arrested in Serbia appeared first on WeLiveSecurity
May 17, 2018
LinuxSecurity.com: New upstream bugfix release, includes security fix for CVE-2017-18266
May 17, 2018
Last call for GDPR
With the deadline fast approaching SMBs are reminded of what is required to become compliant The post Last call for GDPR appeared first on WeLiveSecurity
May 17, 2018
US Government Cybersecurity at a Crossroads
May 17, 2018
Rail Europe data breach lasted almost three months
May 17, 2018
LinuxSecurity.com: New php packages are available for Slackware 14.0, 14.1, and 14.2 to fix security issues.
May 17, 2018
LinuxSecurity.com: New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
May 17, 2018
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
May 17, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has three fixes is now available.
May 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
May 17, 2018
LinuxSecurity.com: OSS-fuzz, assisted by Max Dymond, discovered that cURL, an URL transfer library, could be tricked into reading data beyond the end of a heap based buffer when parsing invalid headers in an RTSP response.
May 16, 2018
LinuxSecurity.com: It was discovered that there was an issue in the curl a command-line tool for downloading (eg.) data over HTTP. curl could have be tricked into reading data beyond the end of a heap
May 16, 2018
security update
May 16, 2018
LinuxSecurity.com: Several security issues were fixed in PHP.
May 16, 2018
EFAIL Opens Up Encrypted Email to Prying Eyes
May 16, 2018
Chili’s Doesn’t Leave Data Breach on the Back Burner
May 16, 2018
Google to require Android device-makers to roll out OS security patches regularly
The move is intended to help address the mobile platform’s perennial problem – that many manufacturers of Android-powered devices are slow to get software updates out the door The post Google to require Android device-makers to roll out OS security patches regularly appeared first on WeLiveSecurity
May 16, 2018
Seven out of ten see criminal hacking as big risk to health, safety, prosperity
Recent survey shows that adults in the US view computer hacking as a major threat to their quality of life The post Seven out of ten see criminal hacking as big risk to health, safety, prosperity appeared first on WeLiveSecurity
May 16, 2018
Mexican Banks Lose Millions in SWIFT-like Attacks
May 16, 2018
Chili’s Suffers Data Breach
May 16, 2018