January 17, 2019
As the Government Shutdown Drags on, Security Risks Intensify
January 17, 2019
Oracle Java Card updated for IoT applications
January 17, 2019
LinuxSecurity.com: This is the final notification for the retirement of Red Hat Enterprise Linux 6.7 Extended Update Support (EUS). This notification applies only to those customers subscribed to the Extended Update Support (EUS) channel for Red Hat Enterprise Linux 6.7.
January 17, 2019
South Korea says mystery hackers cracked advanced weapons servers
January 17, 2019
Risk Level: Very Low. Type: Trojan.
January 17, 2019
Threatpost Survey Says: 2FA is Just Fine, But Go Ahead and Kill SMS
January 16, 2019
Millions of Oklahoma Gov Files Exposed by Wide-Open Server
January 16, 2019
LinuxSecurity.com: Several security issues were fixed in libcaca.
January 16, 2019
Lowjax city: Researchers crack open notorious Fancy Bear rootkit
January 16, 2019
U.S. Issues Multiple Charges For 2016 SEC Hack
January 16, 2019
Fortnite Hacked Via Insecure Single Sign-On
January 16, 2019
Magecart Returns with Advertising Library Tactic
January 16, 2019
Car and almost $1m on offer for Tesla Model 3 hacks
The electric car maker is raising the ante in automotive security, putting one of its swanky models as a target at a hacking contest The post Car and almost $1m on offer for Tesla Model 3 hacks appeared first on WeLiveSecurity
January 16, 2019
VOIPO Database Exposes Millions of Texts, Call Logs
January 16, 2019
Are you sure those WhatsApp messages are meant for you?
January 16, 2019
Intel patches another security flaw in SGX technology
January 16, 2019
Firms fined $1M for SingHealth data security breach
January 16, 2019
UK Banks Finally Issue New Cards After Ticketmaster Breach
January 16, 2019
LinuxSecurity.com: This update fixes CVE-2018-20685 (the first “variant”) and backports several fixes to unbreak ECDSA authentication from PKCS#11, certificate authentication and so on.
January 16, 2019
LinuxSecurity.com: **Horde_Form 2.0.19** * [mjr] SECURITY: Prevent RCE vulnerability due to potential directory traversal in Image uploads (An independent security researcher has reported this vulnerability to SecuriTeam Secure Disclosure program).
January 16, 2019
LinuxSecurity.com: **Horde_Form 2.0.19** * [mjr] SECURITY: Prevent RCE vulnerability due to potential directory traversal in Image uploads (An independent security researcher has reported this vulnerability to SecuriTeam Secure Disclosure program).
January 16, 2019
LinuxSecurity.com: Patch for CVE-2016-10091
January 16, 2019
LinuxSecurity.com: Keegan Ryan discovered that NSS incorrectly handled ECDSA key generation. A local attacker could possibly use this issue to perform a cache-timing attack and recover private ECDSA keys (CVE-2018-0495). References:
January 15, 2019
LinuxSecurity.com: A heap use-after-free vulnerability in the server code of the file transfer extension, which can result in remote code execution. This attack appears to be exploitable via network connectivity (CVE-2018-6307).
January 15, 2019
LinuxSecurity.com: It was observed that URL’s which gets downloaded via “–log=” attribute stores sensitive information. This update fixes that. References: – https://bugs.mageia.org/show_bug.cgi?id=24112
January 15, 2019
IDenticard Zero-Days Allow Corporate Building Access, Location Recon
January 15, 2019
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 15, 2019
security update
January 15, 2019
security update
January 15, 2019
LinuxSecurity.com: Several issues in wireshark, a tool that captures and analyzes packets off the wire, have been found by different people. These are basically issues with length checks or invalid memory access in
January 15, 2019
LinuxSecurity.com: libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution (CVE-2018-15127) SL7 x86_64 libvncserver-0.9.9-13.el7_6.i686.rpm libvncserver-0.9.9-13.el7_6.x86_64.rpm libvncserver-debuginfo-0.9.9-13.el7_6.i686.rpm libvncserver-debuginfo-0.9.9-13.el7_6.x86_64.rpm libvncserver-devel-0.9.9-13.el7_6.i686.rpm [More…]
January 15, 2019
ThreatList: $1.7M is the Average Cost of a Cyber-Attack
January 15, 2019
LinuxSecurity.com: Several security issues were fixed in libcaca.
January 15, 2019
Yes, you can remotely hack … building site cranes. Wait, what?
January 15, 2019
Man whose DDoS attacks took down entire country’s Internet jailed
January 15, 2019
8 million users installed 9 adware apps from Play Store
January 15, 2019
What makes a cybercriminal?
Forget balaclavas or hoodies, these cybercriminals are hiding in plain sight The post What makes a cybercriminal? appeared first on WeLiveSecurity
January 15, 2019
Reading Time: ~2 min. For many MSPs, integrating their security solution with their remote monitoring and management (RMM) and professional service automation (PSA) platforms is essential for doing business. Together, these platforms help lower the cost of keeping up with each client, ensuring profitable margins for a healthy, growing business. For true providers of IT […]
January 15, 2019
Windows 7 users get fix for latest updating woe
January 15, 2019
Blockchain burglar returns some of $1m crypto-swag
January 15, 2019
Facebook to start fact-checking fake news in the UK
January 15, 2019
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2019:0049
January 15, 2019
Is fake-news sharing driven by age, not politics?
January 15, 2019
LinuxSecurity.com: An update for libvncserver is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 15, 2019
LinuxSecurity.com: The v4.19.14 stable update contains important fixes across the tree.
January 15, 2019
A city in Texas is using paper after suffering ransomware attack
January 15, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 15, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 15, 2019
Risk Level: Very Low. Type: Trojan.
January 15, 2019
Risk Level: Very Low. Type: Trojan.
January 15, 2019
security update
January 14, 2019
Threatpost Poll: Can We Fix 2FA?
January 14, 2019
Hack Allows Escape of Play-with-Docker Containers
January 14, 2019
Risk Level: Very Low. Type: Trojan.
January 14, 2019
Risk Level: Very Low. Type: Trojan.
January 14, 2019
Risk Level: Very Low. Type: Trojan.
January 14, 2019
British TV viewers targeted by email fraudsters
January 14, 2019
Ryuk Hauls in $3.7M in ‘Earnings,’ Adds TrickBot to the Attack Mix
January 14, 2019
Mozilla Kills Default Support for Adobe Flash in Firefox 69
January 14, 2019
RBS reissues punters with new bank cards after Ticketmaster breach
January 14, 2019
Goddamn the Pusher man: Nominet kicks out domain name hijack bid
January 14, 2019
Shutdown hits government websites as certificates begin to expire
January 14, 2019
Poland may consider Huawei ban amid ‘spy’ arrests – reports
January 14, 2019
Data Exposed in OXO, Amazon and MongoDB Leaks
January 14, 2019
Nissan EV app password reset prompts user panic
January 14, 2019
LinuxSecurity.com: An update for systemd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 14, 2019
CES: Smart cities and the challenge of securing the neighborhood
In our final report from CES we take a look at smart city initiatives The post CES: Smart cities and the challenge of securing the neighborhood appeared first on WeLiveSecurity
January 14, 2019
Podcast: Emotet Grows With Fast-Evolving Tactics
January 14, 2019
10 years for Boston Children’s Hospital attacker
January 14, 2019
New Linux Systemd security holes uncovered
January 14, 2019
Governments need to embrace AI for the good of the people
January 14, 2019
USB-C Authentication sounds great, so why are people worried?
January 14, 2019
Facebook exec gets SWATted
January 14, 2019
Brit hacker hired by Liberian telco to nobble rival now behind bars
January 14, 2019
LinuxSecurity.com: New zsh packages are available for Slackware 14.0, 14.1, and 14.2 to fix security issues.
January 14, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 14, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 14, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 14, 2019
LinuxSecurity.com: An update that solves one vulnerability and has 6 fixes is now available.
January 14, 2019
Risk Level: Very Low. Type: Trojan.
January 14, 2019
LinuxSecurity.com: The Qualys Research Labs discovered multiple vulnerabilities in systemd-journald. Two memory corruption flaws, via attacker-controlled alloca()s (CVE-2018-16864, CVE-2018-16865) and an out-of-bounds read flaw leading to an information leak (CVE-2018-16866), could allow an attacker to
January 13, 2019