January 28, 2019
LinuxSecurity.com: Several issues were discovered in qtbase-opensource-src, a cross-platform C++ application framework, which could lead to denial-of-service via application crash. Additionally, this update fixes a problem affecting vlc, where it would start without a GUI.
January 28, 2019
LinuxSecurity.com: Multiple vulnerabilities were discovered in coTURN, a TURN and STUN server for VoIP. CVE-2018-4056
January 28, 2019
security update
January 28, 2019
security update
January 28, 2019
LinuxSecurity.com: Tavis Ormandy discovered a vulnerability in Ghostscript, the GPL PostScript/PDF interpreter, which may result in denial of service or the execution of arbitrary code if a malformed Postscript file is processed (despite the -dSAFER sandbox being enabled).
January 27, 2019
LinuxSecurity.com: The package nasm before version 2.14.02-1 is vulnerable to denial of service.
January 27, 2019
LinuxSecurity.com: The package haproxy before version 1.9.0-1 is vulnerable to denial of service.
January 27, 2019
LinuxSecurity.com: The package apache before version 2.4.38-1 is vulnerable to multiple issues including denial of service and insufficient validation.
January 27, 2019
LinuxSecurity.com: The package powerdns-recursor before version 4.1.9-1 is vulnerable to multiple issues including insufficient validation and access restriction bypass.
January 27, 2019
LinuxSecurity.com: The package matrix-synapse before version 0.34.1.1-1 is vulnerable to private key recovery.
January 27, 2019
LinuxSecurity.com: The package go before version 2:1.11.5-1 is vulnerable to private key recovery.
January 27, 2019
LinuxSecurity.com: The package go before version 2:1.11.5-1 is vulnerable to private key recovery.
January 27, 2019
LinuxSecurity.com: New version 2.6.6. Security fix for CVE-2019-5716, CVE-2019-5717, CVE-2019-5718, CVE-2019-5719
January 26, 2019
security update
January 26, 2019
LinuxSecurity.com: krb5, a MIT Kerberos implementation, had several flaws in LDAP DN checking, which could be used to circumvent a DN containership check by supplying special parameters to some calls.
January 25, 2019
LabKey Vulnerabilities Threaten Medical Research Data
January 25, 2019
Threatpost News Wrap Podcast For Jan. 25
January 25, 2019
SD-WAN admin? Your number came up in Cisco’s latest bug list
January 25, 2019
Razy Malware Attacks Browser Extensions to Steal Cryptocurrency
January 25, 2019
Reading Time: ~2 min. Anatova Ransomware Reaches Global Market A new ransomware family, dubbed Anatova by researchers, has been infecting machines across the globe. During encryption, Anatova appears to focus on small files to speed up overall encryption times, but doesn’t append the encrypted files with a new extension. Unexpectedly, this variant demands DASH crypto […]
January 25, 2019
Fighting Emotet: lessons from the front line
January 25, 2019
#DeleteFacebook? #DeleteTwitter? #FatLotOfGood that will do you
January 25, 2019
Cops catch $15m crypto-crook
January 25, 2019
Facebook debuts scam ads reporting tool
January 25, 2019
LinuxSecurity.com: The PostgreSQL project has release a new minor release of the 9.4 branch. For Debian 8 “Jessie”, this has been uploaded as version
January 25, 2019
LinuxSecurity.com: New Version
January 25, 2019
Fighting Fire with Fire: API Automation Risks
January 24, 2019
LinuxSecurity.com: Ghostscript could be made to crash, access files, or run programs if it opened a specially crafted file.
January 24, 2019
LinuxSecurity.com: Several security issues were fixed in MySQL.
January 24, 2019
LinuxSecurity.com: A vulnerability in the HTML_QuickForm package has been found which potentially allows remote code execution. References: – https://bugs.mageia.org/show_bug.cgi?id=24185
January 24, 2019
LinuxSecurity.com: It was discovered that libcaca incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service (CVE-2018-20544). It was discovered that libcaca incorrectly handled certain images. An
January 24, 2019
LinuxSecurity.com: An issue has been found in PowerDNS Recursor where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua (CVE-2019-3806).
January 24, 2019
Risk Level: Very Low. Type: Trojan.
January 24, 2019
ThreatList: Credential-Sniffing Phishing Attacks Erupted in 2018
January 24, 2019
Passwords at risk for users who fall for Eileen’s cousin’s voicemail
January 24, 2019
Colour us shocked: Google in €50m GDPR fine appeal bombshell
January 24, 2019
Bit-and-Piece DDoS Method Emerges to Torment ISPs
January 24, 2019
DarkHydrus Phishery tool spreading malware using Google Drive
January 24, 2019
Malicious apps deploy Anubis banking trojan using motion detection
January 24, 2019
World’s favourite open-source PDF interpreter needs patching (again)
January 24, 2019
Bomb threat spam may stem from GoDaddy DNS weakness
January 24, 2019
Can you spot the phish? Take Google’s test
Everybody loves quizzes. So why not take this one and hone your phish-spotting prowess? The post Can you spot the phish? Take Google’s test appeared first on WeLiveSecurity
January 24, 2019
Supreme Court won’t consider case against defamatory reviews on Yelp
January 24, 2019
How to stop a hacker home invasion! [VIDEO]
January 24, 2019
Update now! Apple releases first 2019 iOS and macOS patches
January 24, 2019
Nasty security bug found and fixed in Linux apt
January 24, 2019
New ransomware strain is locking up Bitcoin mining rigs in China
January 24, 2019
Hadoop coop thrown for loop by malware snoop n’ scoop troop? Oh poop
January 24, 2019
LinuxSecurity.com: Security fix for CVE-2018-20551, CVE-2018-20481, CVE-2018-20650 and CVE-2018-18897.
January 24, 2019
LinuxSecurity.com: – xattr: strip credentials from any URL that is stored (CVE-2018-20483)
January 24, 2019
LinuxSecurity.com: Security fix for CVE-2019-5010 in Python. Anaconda is joined because an unrelated fix was done there that allowed to remove a workaround in Python.
January 24, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 24, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2019
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
January 23, 2019
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
January 23, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 23, 2019
Redaman Spams Russian Banking Customers with Rotating Tactics
January 23, 2019
Malware in Ad-Based Images Targets Mac Users
January 23, 2019
Monero: Cybercrime’s Top Choice for Mining Malware
January 23, 2019
Risk Level: Very Low. Type: Trojan.
January 23, 2019
Risk Level: Very Low. Type: Trojan.
January 23, 2019
Risk Level: Very Low. Type: Trojan.
January 23, 2019
Risk Level: Very Low. Type: Trojan.
January 23, 2019
Got a Nest security camera? Enable two-step verification now
January 23, 2019
6 Signs of Successful Threat Hunting
January 23, 2019
‘Chaos’ iPhone X Attack Alleges Remote Jailbreak
January 23, 2019
Popular free Android VPN apps on Play Store contain malware
January 23, 2019
U.S. Gov Issues Urgent Warning of DNS Hijacking Attacks
January 23, 2019
100 million online bets exposed by leaky database
January 23, 2019
Reading Time: ~3 min. Fitness trackers and other digital wearables have unlocked a new era of convenience and engagement in consumer health. Beyond general fitness trackers, you can find wearables for a variety of purposes; some help diabetics, some monitor for seizure activity, and some can aid in senior citizens’ health and quality of life. […]
January 23, 2019
Black hats are great for language diversity, says Eugene Kaspersky
January 23, 2019
PewDiePie-spammers and whale-flingers exploit hole in Atlas game
January 23, 2019
Former employee blamed for hack of WordPress plugin maker
The plugin’s users are recommended to change their passwords on WPML’s website following havoc reportedly wrought by a disgruntled ex-employee The post Former employee blamed for hack of WordPress plugin maker appeared first on WeLiveSecurity
January 23, 2019
Microsoft Windows RCE Flaw Gets Temporary Micropatch
January 23, 2019
RogueRobin Malware Uses Google Drive as C2 Channel
January 23, 2019