November 19, 2018
Has that website been pwned? Firefox Monitor will tell you
Did a copy-paste error reveal the US’s secret case against Assange?
November 19, 2018
Using Airport and Hotel Wi-Fi Is Much Safer Than It Used to Be
November 19, 2018
Prepare for the battle against cybercrime at SANS London 2019
November 19, 2018
Washington Post offers invalid cookie consent under EU rules – ICO
November 19, 2018
A little phishing knowledge may be a dangerous thing
November 19, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
November 19, 2018
Congress Passes Bill to Create New Federal Cybersecurity Agency
November 18, 2018
New HealthEquity Data Breach Exposes PII/PHI of Almost 21,000 Customers
November 18, 2018
Instagram bug inadvertently exposed some user’s passwords
November 18, 2018
LinuxSecurity.com: An out-of-bounds bounds memory access issue was discovered in chromium’s v8 javascript library by cloudfuzzer. This update also fixes two problems introduced by the previous security
November 18, 2018
security update
November 18, 2018
LinuxSecurity.com: nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption (CVE-2018-16843). nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the
November 17, 2018
LinuxSecurity.com: Due to incorrect input handling, Squid is vulnerable to a Cross-Site Scripting vulnerability when generating HTTPS response messages about TLS errors (CVE-2018-19131). Due to a memory leak in SNMP query rejection code, Squid is vulnerable
November 17, 2018
LinuxSecurity.com: Luis Merino, Markus Vervier and Eric Sesterhenn discovered that missing input sanitising in the Hylafax fax software could potentially result in the execution of arbitrary code via a malformed fax message (CVE-2018-17141).
November 17, 2018
LinuxSecurity.com: Hanno B?ck discovered that libmspack incorrectly handled certain CHM files. An attacker could possibly use this issue to cause a denial of service (CVE-2018-14679, CVE-2018-14680). Jakub Wilk discovered that libmspack incorrectly handled certain KWAJ
November 17, 2018
LinuxSecurity.com: This update fixes various security vulnerabilities affecting the SDL2_image library, listed below. The fixes are provided in SDL2_image 2.0.4, which depends on SDL2 2.0.8 or later. As such, the SDL2 and SDL2_mixer libraries are also updated to their current stable releases, providing various bug fixes and features.
November 17, 2018
LinuxSecurity.com: The ProcessGpsInfo function may have allowed a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAG_GPS_ALT handling (CVE-2018-16554).
November 17, 2018
LinuxSecurity.com: The package patch before version 2.7.6-7 is vulnerable to multiple issues including arbitrary command execution and denial of service.
November 17, 2018
Type: Vulnerability. Microsoft Internet Explorer is prone to a memory corruption vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Team Foundation Server is prone to a cross-site scripting vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Azure App Service is prone to a cross-site scripting vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Project is prone to a remote code-execution vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Windows is prone to a local security-bypass vulnerability; fixes are available.
November 17, 2018
Under attack! Should your company ever ‘hack back’?
November 17, 2018
Mylobot Botnet Now Exfiltrates Data Using Second Stage Khalesi Trojan
November 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
November 17, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has 7 fixes is now available.
November 17, 2018
LinuxSecurity.com: An update that fixes 11 vulnerabilities is now available.
November 17, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has three fixes is now available.
November 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
November 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
November 17, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.
November 17, 2018
LinuxSecurity.com: An update that solves one vulnerability and has 8 fixes is now available.
November 17, 2018
Emoji Attack Can Kill Skype for Business Chat
November 16, 2018
Gmail Glitch Offers Stealthy Trick for Phishing Attacks
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to local security-bypass vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Outlook is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Active Directory Federation Services is prone to a cross-site scripting vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to an information-disclosure vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local security-bypass vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Powershell is prone to a security bypass vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows PowerShell is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Excel is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows DirectX is prone to a information-disclosure vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Edge is prone to an information disclosure vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Edge is prone to a security vulnerability that may allow attackers to conduct spoofing attacks; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Outlook is prone to an information-disclosure vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Edge is prone to a remote privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Outlook is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Outlook is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Outlook is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Team Foundation Server is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
LinuxSecurity.com: Several security issues were fixed in the kernel.
November 16, 2018
LinuxSecurity.com: Several security issues were fixed in Python.
November 16, 2018
Critical WordPress Flaw Grants Admin Access to Any Registered Site User
November 16, 2018
Lock-Screen Bypass Bug Quietly Patched in Handsets
November 16, 2018
Reading Time: ~2 min.Infowars Online Site Compromised by MageCart Attack Earlier this week, a security researcher found payment card-stealing scripts running on the Infowars online site. The scripts managed to stay active for nearly 24 hours. At least 1,600 users of the site may have been affected during this period, though many were returning customers […]
November 16, 2018
How to rob an ATM? Let me count the ways…
November 16, 2018
Judge asks if Alexa is witness to a double murder
November 16, 2018
Hacking MiSafes’ smartwatches for kids is child’s play
November 16, 2018
AI-generated ‘skeleton keys’ fool fingerprint scanners
November 16, 2018
Cloud security: The essential checklist
November 16, 2018
Where to implant my employee microchip? I have the ideal location
November 16, 2018
MIT to Oz: Crypto-busting laws risk banning security tests
November 16, 2018
LinuxSecurity.com: Several security issues were fixed in OpenJDK 7.
November 16, 2018
LinuxSecurity.com: A flaw was found in gdal up to version 2.3.0. A Heap-buffer-overflow in GTiffOddBitsBand::IReadBlock. A flaw was found in gdal. A Heap-buffer-overflow in NITFRasterBand::Unpack.
November 15, 2018