July 24, 2018
Oracle Re-Patches Decade-Old Solaris Bug
Bluetooth bug could expose devices to snoopers
Patches have already been released or are expected to see the light of day soon The post Bluetooth bug could expose devices to snoopers appeared first on WeLiveSecurity
July 24, 2018
Supplier Error Leaks Decade of Data from Carmakers
July 24, 2018
Campaign’s Election Data Exposed in Virginia
July 24, 2018
LinuxSecurity.com: An update for rhev-hypervisor7 is now available for RHEV 3.X Hypervisor and Agents for Red Hat Enterprise Linux 6 and RHEV 3.X Hypervisor and Agents Extended Lifecycle Support for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact
July 24, 2018
Why your website is officially ‘not secure’ from today
July 24, 2018
LinuxSecurity.com: An update for rh-ror42-rubygem-sprockets is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 24, 2018
LinuxSecurity.com: An update for rh-ror50-rubygem-sprockets is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 24, 2018
LinuxSecurity.com: OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952) SL6 x86_64 java-1.8.0-openjdk-1.8.0.181-3.b13.el6_10.x86_64.rpm java-1.8.0-openjdk-debuginfo-1.8.0.181-3.b13.el6_10.x86_64.rpm java-1.8.0-openjdk-headless-1.8.0.181-3.b13.el6_10.x86_64.rpm java-1.8.0-openjdk-debug-1.8.0.181-3.b13.el6_10.x86_64.rpm java-1.8 [More…]
July 23, 2018
LinuxSecurity.com: Update to 1.2.6 to fix a local authenticated privilege escalation bug (CVE-2018-10900). The issue has been discovered and responsibly disclosed by Denis Andzakovic: https://pulsesecurity.co.nz/advisories/NM-VPNC-Privesc
July 23, 2018
New Spectre-Level Flaw Targets Return Stack Buffer
July 23, 2018
Spectre Will Haunt Us For a Long Time
July 23, 2018
LinuxSecurity.com: A regression that caused boot failures was fixed in the Linux kernel.
July 23, 2018
LinuxSecurity.com: A regression that caused boot failures was fixed in the Linux kernel.
July 23, 2018
Leaky Backup Spills 157 GB of Automaker Secrets
July 23, 2018
ThreatList: Supply-Chain Defenses Need Improvement
July 23, 2018
Major sites still largely lax on prompting users towards safer password choices, study finds
A study assessed whether or not the most popular English-language websites help users strengthen their security by providing them with guidance on creating safer passwords during account sign-up or password-change processes The post Major sites still largely lax on prompting users towards safer password choices, study finds appeared first on WeLiveSecurity
July 23, 2018
Has GDPR Impacted Insider Threats?
July 23, 2018
Attention Airline Passengers, Your Data Is at Risk
July 23, 2018
DOJ to publicly disclose election tampering schemes
July 23, 2018
Don’t ignore application security | Salted Hash Ep 35
July 23, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Passenger, the worst of which could result in the execution of arbitrary code.
July 22, 2018
LinuxSecurity.com: CVE-2018-7033 Fix for issue in accounting_storage/mysql plugin by always escaping strings within the slurmdbd.
July 22, 2018
LinuxSecurity.com: Early versions of opencv have problems while reading data, which might result in either buffer overflows, out-of bounds errors or integer
July 22, 2018
Key takeaways from Singapore healthcare data breach
July 22, 2018
LinuxSecurity.com: The package networkmanager-vpnc before version 1.2.6-1 is vulnerable to privilege escalation.
July 21, 2018
LinuxSecurity.com: The package apache before version 2.4.34-1 is vulnerable to denial of service.
July 21, 2018
LinuxSecurity.com: The package znc before version 1.7.1-1 is vulnerable to multiple issues including privilege escalation and directory traversal.
July 21, 2018
The Fundamental Flaw in Security Awareness Programs
July 21, 2018
LinuxSecurity.com: Fabian Henneke discovered a cross-site scripting vulnerability in the password change form of GOsa, a web-based LDAP administration program.
July 21, 2018
LinuxSecurity.com: Update to 0.26.5 (CVE-2018-10887, CVE-2018-10888)
July 20, 2018
LinuxSecurity.com: This release fixes a directory and symbolic link traversal vulnerability in Archive::Zip::Archive Perl module that allows an attacker to writite into an arbitrary file accesible by a local user.
July 20, 2018
LinuxSecurity.com: An update for openstack-tripleo-heat-templates is now available for Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 20, 2018
Risk Level: Very Low. Type: Trojan.
July 20, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
July 20, 2018
Risk Level: Very Low. Type: Trojan.
July 20, 2018
Risk Level: Very Low. Type: Trojan.
July 20, 2018
Risk Level: Very Low. Type: Trojan.
July 20, 2018
Risk Level: Very Low. Type: Trojan.
July 20, 2018
Risk Level: Very Low. Type: Trojan.
July 20, 2018
Canada tackles malicious online advertising
Federal agency issues Notices of Violation to Datablocks and Sunlight Media for allegedly facilitating the installation of malware through online advertising The post Canada tackles malicious online advertising appeared first on WeLiveSecurity
July 20, 2018
LinuxSecurity.com: The dns-root-data update to 2017072601~deb8u2 broke dnsmasq’s init script, making dnsmasq no longer start when dns-root-data was installed.
July 20, 2018
Hackers hold 80,000 healthcare records to ransom
July 20, 2018
Gov Slow to Address Urgent CNI Security Needs
July 20, 2018
White House Cybersecurity Strategy at a Crossroads
July 20, 2018
Reading Time: ~2 min.Venmo’s Public Data Setting Shows All Researchers recently uncovered just how much data is available through the Venmo API, successfully tracking routines, high-volume transactions from vendors, and even monitoring relationships. Because Venmo’s privacy settings are set to public by default, many users have unknowingly contributed to the immense collection of user data […]
July 20, 2018
LinuxSecurity.com: The linux-base package has been updated to support the package of Linux 4.9 that was recently added to Debian 8. This resolves a dependency that was not satisfiable by the jessie and jessie-security suites.
July 20, 2018
Risk Level: Very Low. Type: Trojan.
July 20, 2018
LinuxSecurity.com: CVE-2015-1239 Fix for denial of service (process crash) via a crafted PDF.
July 19, 2018
ThreatList: Sizing Up The Scourge of Credential-Stuffing
July 19, 2018
security update
July 19, 2018
security update
July 19, 2018