July 6, 2018
Keeping False Positives in Check
July 6, 2018
Attackers could use heat traces left on keyboard to steal passwords
The attack, called “Thermanator”, could use your body heat against you in order to steal your credentials or any other short string of text that you have typed on a computer keyboard The post Attackers could use heat traces left on keyboard to steal passwords appeared first on WeLiveSecurity
July 6, 2018
Linux experts are crap at passwords!
July 6, 2018
LinuxSecurity.com: It was discovered that the Soup HTTP library performed insuffient validation of cookie requests which could result in an out-of-bounds memory read.
July 6, 2018
Are cybercrooks watching you copy and paste? [VIDEO]
July 6, 2018
Fortnum & Mason: 23,000 Affected by Data Hack
July 6, 2018
LinuxSecurity.com: Several vulnerabilities were found in phpMyAdmin, the web-based MySQL administration interface, including SQL injection attacks, denial of service, arbitrary code execution, cross-site scripting, server-side request forgery, authentication bypass, and file system traversal.
July 6, 2018
Newsmaker Interview: VDOO CEO Talks Top IoT Threats
July 6, 2018
Reading Time: ~2 min.Canadian college breach targets thousands Last Friday, Algonquin College officials announced that an earlier data breachpotentially affected thousands of current and former students, as well as employees. While it is still unclear exactly what systems were affected, the officials have been working to contact all potential victims and inform them of the […]
July 6, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
July 6, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
July 6, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
July 6, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
July 6, 2018
LinuxSecurity.com: An update that fixes three vulnerabilities is now available.
July 6, 2018
LinuxSecurity.com: It was discovered that the Soup HTTP library performed insuffient validation of cookie requests which could result in an out-of-bounds memory read.
July 5, 2018
LinuxSecurity.com: The system could be made to expose sensitive information.
July 5, 2018
LinuxSecurity.com: Some security vulnerabilities were found in Mercurial which allow authenticated users to trigger arbitrary code execution and unauthorized data access in certain server configuration. Malformed patches and repositories can also lead to crashes and arbitrary code
July 5, 2018
LinuxSecurity.com: New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues.
July 5, 2018
LinuxSecurity.com: Archive Zip module could be made to expose sensitive information if it received a specially crafted input.
July 5, 2018
LinuxSecurity.com: Archive Zip module could be made to expose sensitive information if it received a specially crafted input.
July 5, 2018
Risk Level: Very Low. Type: Trojan.
July 5, 2018
Five tips for pentesters in iOS
Recommendations for pentesters looking for security flaws in iOS applications made by developers The post Five tips for pentesters in iOS appeared first on WeLiveSecurity
July 5, 2018
Tor-linked nonprofit raided by police
July 5, 2018
Gentoo hack caused by three rookie mistakes
July 5, 2018
Thunderbird gets its EFAIL patch
July 5, 2018
Chrome, Firefox pull invasive browser extension
July 5, 2018
Top 7 Most Popular and Best Cyber Forensics Tools
July 4, 2018
security update
July 4, 2018
security update
July 4, 2018
LinuxSecurity.com: Several security issues were fixed in the kernel.
July 4, 2018
LinuxSecurity.com: Several security issues were fixed in Exiv2.
July 4, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
July 4, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
July 4, 2018
Welcome to a New Look for Threatpost
July 4, 2018
ThreatList: Top Summer DDoS Trends
July 4, 2018
LinuxSecurity.com: The package git-annex before version 6.20180626-1 is vulnerable to multiple issues including arbitrary filesystem access and information disclosure.
July 4, 2018
LinuxSecurity.com: The package gitlab before version 11.0.1-1 is vulnerable to multiple issues including cross-site scripting and insufficient validation.
July 4, 2018
Elderly scam victims are too embarrassed to speak up
July 4, 2018
Going on vacation? Five things to do before you leave
You’ve set up an out-of-office auto-responder and packed your stuff, but have you done all of your “homework” before you rush out the front door for that well-deserved time off? The post Going on vacation? Five things to do before you leave appeared first on WeLiveSecurity
July 4, 2018
Facebook accidentally unblocks people
July 4, 2018
Someone else is reading your Gmails
July 4, 2018
NHS Developer Error Leads to Data Leak
July 4, 2018
Ransomware: Not dead, just getting a lot sneakier
July 4, 2018
Huawei enterprise comms kit has a TLS crypto bug
July 4, 2018
LinuxSecurity.com: Fabian Henneke discovered a cross-site scripting vulnerability in the password change form of GOsa, a web-based LDAP administration program. For the stable distribution (stretch), this problem has been fixed in
July 3, 2018
LinuxSecurity.com: Several vulnerabilites have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of service or the execution of arbitrary code if a malformed file is parsed.
July 3, 2018
LinuxSecurity.com: libsoup could be made to crash if it received a specially crafted input.
July 3, 2018
LinuxSecurity.com: Two vulnerabilities affecting the cups printing server were found which can lead to arbitrary IPP command execution and denial of service.
July 3, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2001
July 3, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:1997
July 3, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:1979
July 3, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:1965
July 3, 2018
Typeform data breach exposes users of many websites
July 3, 2018
Britain’s tax authority reports takedown of record 20,000 fake sites
Her Majesty’s Revenue & Customs (HMRC) is “consistently the most abused government brand”, according to the National Cyber Security Centre (NCSC) The post Britain’s tax authority reports takedown of record 20,000 fake sites appeared first on WeLiveSecurity
July 3, 2018
HMRC: 29% Increase in Malicious Site Deactivations
July 3, 2018