LinuxSecurity.com: Among others, Andre Heinicke from gpg4win.org found several issues of nsis, a tool for creating quick and user friendly installers for Microsoft Windows operating systems.
November 30, 2018
LinuxSecurity.com: Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service or the execution of arbitrary code if malformed image files are processed.
November 30, 2018
LinuxSecurity.com: Several local side channel attacks and a denial of service via large Diffie-Hellman parameters were discovered in OpenSSL, a Secure Sockets Layer toolkit.
November 30, 2018
It’s nearly 2019, and your network can get pwned through an oscilloscope
November 30, 2018
Podcast: Breaking Down the Magecart Threat (Part Two)
November 30, 2018
security update
November 30, 2018
Marriott Starwood data breach: 5 defensive steps travelers should take now
Defensive steps for Marriott Starwood guests worried their personal information may have been compromised by the massive data breach The post Marriott Starwood data breach: 5 defensive steps travelers should take now appeared first on WeLiveSecurity
November 30, 2018
Magecart fiends punch card-skimming code in Sotheby’s Home website
November 30, 2018
Marriott’s massive data breach – here’s what you need to know
November 30, 2018
Cyberattacks on financial sector worries Americans most
A recent survey carried out by ESET has revealed that Americans are worried most about cyberattacks on the financial sector, listing it above attacks against hospitals, voting systems, or energy supply companies The post Cyberattacks on financial sector worries Americans most appeared first on WeLiveSecurity
November 30, 2018
Newsmaker Interview: Katie Moussouris on Improving Bug Bounty Programs
November 30, 2018
2014 Marriott Data Breach Exposed, 500M Guests Impacted
November 30, 2018
Reading Time: ~2 min.USPS Website Leaves Personal Data Available to Anyone Within the last week, The U.S. Postal Service (USPS) has been working to resolve a vulnerability that allowed any authenticated user to view and modify the personal information for any of the other 60 million users. Fortunately, USPS was quick to fix the vulnerability […]
November 30, 2018
Busted! DOJ exposes huge ad-fraud operation, eight charged
November 30, 2018
Prisoners allegedly posed as underage girls in $560K sextortion scam
November 30, 2018
57m Americans’ details leaked online by another misconfigured server
November 30, 2018
Encryption is the best way to protect payment card transaction data
November 30, 2018
Driver loses his car to hackers. TWICE.
November 30, 2018
LinuxSecurity.com: A SQL injection in PostgreSQL may allow attackers to execute arbitrary SQL statements.
November 30, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in libsndfile, the worst of which might allow remote attackers to cause a Denial of Service condition. [More…]
November 30, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
November 30, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
November 30, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
November 30, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
November 30, 2018
LinuxSecurity.com: An update that fixes three vulnerabilities is now available.
November 30, 2018
LinuxSecurity.com: An update that fixes three vulnerabilities is now available.
November 30, 2018
LinuxSecurity.com: An update that solves one vulnerability and has two fixes is now available.
November 30, 2018
LinuxSecurity.com: Multiple security vulnerabilities were found in libarchive, a multi-format archive and compression library. Heap-based buffer over-reads, NULL pointer dereferences and out-of-bounds reads allow remote attackers to cause a denial-of-service (application crash) via
November 29, 2018
LinuxSecurity.com: An update for ruby is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
November 29, 2018
LinuxSecurity.com: Multiple vulnerabilities were discovered in the implementation of the Perl programming language. The Common Vulnerabilities and Exposures project identifies the following problems:
November 29, 2018
Critical Zoom Flaw Lets Hackers Hijack Conference Meetings
November 29, 2018
LinuxSecurity.com: Several security vulnerabilities were discovered in Ghostscript, an interpreter for the PostScript language, which could result in denial of service, the creation of files or the execution of arbitrary code if a malformed Postscript file is processed (despite the dSAFER sandbox being
November 29, 2018
LinuxSecurity.com: The package samba before version 4.9.3-1 is vulnerable to multiple issues including denial of service and access restriction bypass.
November 29, 2018
LinuxSecurity.com: The package powerdns-recursor before version 4.1.8-1 is vulnerable to denial of service.
November 29, 2018
Cisco Patches Critical Bug in License Management Tool
November 29, 2018
Hackers Breach Dunkin’ Donuts Accounts in Credential Stuffing Attack
November 29, 2018
US charges Iranian hackers for SamSam ransomware attacks
November 29, 2018
GCHQ opens kimono for infosec world to ogle its vuln disclosure process
November 29, 2018
US indicts two over SamSam ransomware attacks
The hacking and extortion scheme took place over a 34-month period with the SamSam ransomware affecting over 200 organizations in the US and Canada The post US indicts two over SamSam ransomware attacks appeared first on WeLiveSecurity
November 29, 2018
Massage app exposes users
November 29, 2018
Smashing Security #106: Google Maps, Fed phishing, and Grinch bots
November 29, 2018
Distributing Malware By Becoming an Admin on an Open-Source Project
November 29, 2018
Facial recognition traffic camera mistakes bus for famous woman
November 29, 2018
LinuxSecurity.com: An update for rh-ruby25-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 29, 2018
LinuxSecurity.com: An update for rh-ruby24-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 29, 2018
Microsoft’s Office 365 MFA security crashes for second time
November 29, 2018
LinuxSecurity.com: An update for rh-ruby23-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 29, 2018
Dell Warns of Attempted Breach on Network
November 29, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in RPM, the worst of which could allow a remote attacker to escalate privileges.
November 29, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in OpenSSL, the worst of which may lead to a Denial of Service condition.
November 29, 2018
Microsoft Warns of Two Apps That Expose Private Keys
November 28, 2018
LinuxSecurity.com: Buffer overflows in URL auth code if there is a “mount” definition that enables URL authentication. A malicious client could send long HTTP headers, leading to a buffer overflow and potential remote code execution (CVE-2018-18820).
November 28, 2018
LinuxSecurity.com: The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.1 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. (CVE-2017-5950)
November 28, 2018
security update
November 28, 2018
security update
November 28, 2018
ThreatList: Cryptominers Dominate Malware Growth in 2018
November 28, 2018
Iranian hackers charged in the US for SamSam ransomware attacks
November 28, 2018
FBI Sinkholes $38M Global Ad Fraud Operation
November 28, 2018
School district fails to reclaim $120,000 wired by bank to scammer
November 28, 2018
The Nature of Mass Exploitation Campaigns
November 28, 2018
JavaScript library used for sneak attack on Copay Bitcoin wallet
November 28, 2018
Social media scraping app Predictim banned by Facebook and Twitter
November 28, 2018
Facebook bug resurrects ghostly messages from the past
November 28, 2018
‘Grinch bots’ are ruining holiday shopping. Lawmakers hit back
November 28, 2018
EU Voters Worried About Election Hacking and Disinformation
November 28, 2018
LinuxSecurity.com: USN-3804-1 introduced a regression in OpenJDK.
November 28, 2018
LinuxSecurity.com: Several security issues were fixed in Git.
November 28, 2018
Pegasus Spyware Targets Investigative Journalists in Mexico
November 27, 2018
LinuxSecurity.com: Several vulnerabilities were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which may result in denial of service or the execution of arbitrary code if a malformed Postscript file is processed (despite the -dSAFER sandbox being enabled).
November 27, 2018
Reading Time: ~4 min.At Webroot, we stay ahead of cybersecurity trends in order to keep our customers up-to-date and secure. As the end of the year approaches, our team of experts has gathered their top cybersecurity predictions for 2019. What threats and changes should you brace for? General Data Protection Regulation Penalties “A large US-based […]
November 27, 2018
3ve – Major online ad fraud operation disrupted
International law enforcement swoops on fake ad viewing outfit The post 3ve – Major online ad fraud operation disrupted appeared first on WeLiveSecurity
November 27, 2018
LinuxSecurity.com: Several security issues were fixed in Samba.
November 27, 2018
Cisco Re-Issues Patch For High-Severity WebEx Flaw
November 27, 2018
Cheetah Mobile Blames SDKs for Rampant Ad Fraud in Its Android Apps
November 27, 2018
LinuxSecurity.com: USN-3816-1 caused a regression in systemd-tmpfiles.
November 27, 2018