Menu

Monthly Archives: September 2018

Almost Every Major Free VPN Service is a Glorified Data Farm
Finally, a fix for the encrypted web’s Achilles’ heel
Twitter patches bug that may have spilled users’ private messages

The flaw affected one of the platform’s APIs between May 2017 and September 10 of this year, when it was patched “within hours” The post Twitter patches bug that may have spilled users’ private messages appeared first on WeLiveSecurity

Security Technologies: FORTIFY_SOURCE
Can’t read my, can’t read my… broker face: Premium Credit back online a week after cyber attack
Defending your company from cyberattack

ESET CTO Juraj Malcho outlines some of the ways in which organizations can reduce their cybersecurity risk The post Defending your company from cyberattack appeared first on WeLiveSecurity

Microsoft is killing passwords one announcement at a time
Domain flub leaves 30 million customers high and dry
The Sony hacker indictment: 5 lessons for IT security
Vulnerable open source component adoption skyrockets in the enterprise
French cybersecurity agency open sources security hardened CLIP OS
Google actually listens to users, hands back cookies and rethinks Chrome auto sign-in
Facebook scolds police for using fake accounts to snoop on citizens
Millions of Twitter DMs may have been exposed by year-long bug
Canadian security boss ain’t afraid of no Huawei, sees no reason for ban
Malware steals passwords from SHEIN, 6.4 million customers impacted

LinuxSecurity.com: Red Hat OpenShift Container Platform release 3.6.173.0.130 is now available with updates to packages that fix one security issue and several bugs. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: Multiple vulnerabilities were found in the CPython interpreter which can cause denial of service, information gain, and arbitrary code execution.

NSA dev in the clink for 5.5 years after letting Kaspersky, allegedly Russia slurp US exploits

LinuxSecurity.com: Multiple vulnerabilities were found in the CPython interpreter which can cause denial of service, information gain, and arbitrary code execution.

While the UN laughed at Trump, hackers chortled at the UN’s lousy web application security

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 7.3 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 7.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support, Red Hat Enterprise Linux 7.2 Telco Extended Update Support, and Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions.

Have I been pwned, Firefox? OK, let’s ask its Have I Been Pwned tool

security update

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Once Popular Online Ad Format Opens Top Tier Sites to XSS Attacks
Malware on SHEIN Servers Compromises Data of 6.4M Customers
Cookie clutter: Chrome saves Google cookies from cookie jar purges

LinuxSecurity.com: An update for nss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

LinuxSecurity.com: An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

LinuxSecurity.com: An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update for mod_perl is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update that fixes two vulnerabilities is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

Reading Time: ~3 min.While ransomware, last year’s dominant threat, has taken a backseat to cryptomining attacks in 2018, it has by no means disappeared. Instead, ransomware has become a more targeted business model for cybercriminals, with unsecured remote desktop protocol (RDP) connections becoming the favorite port of entry for ransomware campaigns. RDP connections first gained […]

How to thwart rogue employees: Tune in this month to our live insider threat webcast
MI5: Gosh, awkward, but we looked down the sofa again and turns out we *do* have intel on NGO
Open-source software supply chain vulns have doubled in 12 months
Mac Mojave Zero-Day Allows Malicious Apps to Access Sensitive Info
Aggregate this: NewsNow has spilt a bunch of ‘encrypted’ passwords

LinuxSecurity.com: The package zsh before version 5.6-1 is vulnerable to insufficient validation.

How to improve hiring practices in cybersecurity

Should schools and businesses do more to combat the shortfall of cybersecurity professionals by changing the hiring process for those interested in having a career in the industry? The post How to improve hiring practices in cybersecurity appeared first on WeLiveSecurity

Users fret over Chrome auto-login change
Freelance workers targeted in new malware campaign
Linux or Windows: 25 Things You Must Know While Choosing The Best Platform
AdGuard adblocker resets passwords after credential-stuffing attack
Braking bad: Mitsubishi recalls 68k SUVs over buggy software
Woman hijacked CCTV cameras days before Trump inauguration
WWII Bombe operator Ruth Bourne: I’d never heard of Enigma until long after the war
14 years prison for man who helped hackers evade detection by anti-virus software
Wendy’s faces class action over collecting staff fingerprints
NewsNow suffers security breach – passwords should be considered compromised
Bug? Feature? Power users baffled as BitLocker update switch-off continues

Risk Level: Very Low. Type: Trojan, Virus, Worm.

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Microsoft ‘kills’ passwords, throws up threat manager, APIs Graph Security
Cybercriminals Target Kodi Media Player for Malware Distribution

security update

security update

security update

security update

LinuxSecurity.com: mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess (CVE-2011-2767) SL6 x86_64 mod_perl-2.0.4-12.el6_10.x86_64.rpm mod_perl-debuginfo-2.0.4-12.el6_10.x86_64.rpm mod_perl-debuginfo-2.0.4-12.el6_10.i686.rpm mod_perl-devel-2.0.4-12.el6_10.i686.rpm mod_perl-devel-2.0.4-12.el6_10.x86_64.rpm i386 mod_perl-2.0.4-12.el6_10. [More…]

LinuxSecurity.com: An update that fixes two vulnerabilities is now available.

LinuxSecurity.com: Several vulnerabilities were discovered in openafs, an implementation of the distributed filesystem AFS. The Common Vulnerabilities and Exposures project identifies the following problems:

Adwind RAT Scurries By AV Software With New DDE Variant
Google’s Forced Sign-in to Chrome Raises Privacy Red Flags
Malware hits Freelancers at Fiverr and Freelancer.com
Baddies just need one email account with clout to unleash phishing hell
Assessing the Human Element in Cyber Risk Analysis
Thousands of stolen frequent flyer miles of top airlines sold on Dark Web
Tricky DoS Attack Crashes Mozilla Firefox

LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.

LinuxSecurity.com: An update that solves one vulnerability and has two fixes is now available.

LinuxSecurity.com: An update that fixes two vulnerabilities is now available.

LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that solves 6 vulnerabilities and has one errata is now available.

The Occasional Orator Part 2

Public speaking and presenting at conferences can be daunting for the majority of people but by including some subtle tricks, the speaker can deliver a stronger message The post The Occasional Orator Part 2 appeared first on WeLiveSecurity

White House Issues National Cyber Strategy
Independence Blue Cross Breach Exposed 17K Records
Data Manipulation: How Security Pros Can Respond to an Emerging Threat
Bankrupt NCIX customer data resold on Craigslist
Facebook faces sanctions if it drags its feet on data transparency
App developers are STILL allowed to read your Gmails
Police accidentally tweet bookmarks that reveal surveilled groups
Some credential-stuffing botnets don’t care about being noticed any more
iTunes is assigning you a ‘trust score’ based on emails and phone calls
Take this short survey to assess your organization’s threat intelligence maturity
Best Free Online Movie Streaming Sites for 2018

LinuxSecurity.com: Joran Herve discovered that the Okular document viewer was susceptible to directory traversal via malformed .okular files (annotated document archives), which could result in the creation of arbitrary files.

Podcast: Two Billion IoT Devices Still Vulnerable to BlueBorne Bug

LinuxSecurity.com: Two security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code and local information disclosure.

LinuxSecurity.com: Joran Herve discovered that the Okular document viewer was susceptible to directory traversal via malformed .okular files (annotated document archives), which could result in the creation of arbitrary files.