LinuxSecurity.com: The package python2-django before version 1.11.18-1 is vulnerable to content spoofing.
January 13, 2019
LinuxSecurity.com: The package python-django before version 2.1.5-1 is vulnerable to content spoofing.
January 13, 2019
security update
January 13, 2019
LinuxSecurity.com: Due to kernel issue there is a way to reuse start_time of a process. This allows to duplicate process authorized by polkit. This update mitigates polkit issue #75 (slowfork): https://gitlab.freedesktop.org/polkit/polkit/issues/75
January 13, 2019
It only takes a Skype Call to Unlock an Android Handset
January 12, 2019
Kaspersky tipped off US about the contractor who stole NSA data
January 12, 2019
9 million users installed 85 adware infected apps from Play Store
January 12, 2019
Aussie govt emergency service hacked to send fake warning alerts
January 12, 2019
WhatsApp Gold Scam is Back with Malware Payload
January 12, 2019
Hacker ‘BestBuy’ sentenced to prison for operating Mirai DDoS botnet
January 12, 2019
Facebook staff discussed cashing in on user data, reports say
January 12, 2019
LinuxSecurity.com: An integer underflow was discovered in the CAF demuxer of the VLC media player. For the stable distribution (stretch), this problem has been fixed in
January 12, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes 13 vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
January 12, 2019
LinuxSecurity.com: Resolves CVE-2018-16869
January 12, 2019
LinuxSecurity.com: Resolves CVE-2018-16869
January 12, 2019
LinuxSecurity.com: New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
January 11, 2019
Anonymous hacker jailed for 10 years over hospital DDoS attacks
January 11, 2019
security update
January 11, 2019
TA505 Crime Gang Debuts Brand-New ServHelper Backdoor
January 11, 2019
Unprotected MongoDB leaks resumes of 202M Chinese job seekers
January 11, 2019
U.S. Government Shutdown Leaves Dozens of .Gov Websites Vulnerable
January 11, 2019
Yet Another Bypass: Is 2FA Broken? Authentication Experts Weigh In
January 11, 2019
Huawei sales director nicked in Poland on suspicion of ‘spying’
January 11, 2019
Reading Time: ~2 min. Malicious Apps Get Millions of Installs Google recently removed 85 apps from the Play Store after they were found to contain predatory adware. With over nine million combined downloads, the apps were mostly fake games or utility apps that began pushing a constant stream of full-screen ads to users until the […]
January 11, 2019
Old tweets reveal hidden secrets
January 11, 2019
2FA codes can be phished by new pentest tool
January 11, 2019
LinuxSecurity.com: The package wireshark-cli before version 2.6.6-1 is vulnerable to multiple issues including information disclosure and denial of service.
January 11, 2019
LinuxSecurity.com: The package systemd before version 240.0-3 is vulnerable to multiple issues including arbitrary file overwrite and information disclosure.
January 11, 2019
What happens when the cops get hit with malware, too?
January 11, 2019
Reddit Locks Down Accounts After Security Incident
January 11, 2019
Trading site data leak sprayed out keys to users’ accounts
January 11, 2019
El Chapo was brought down by a sysadmin
January 11, 2019
LinuxSecurity.com: Terminology before 1.3.1 allows Remote Code Execution because popmedia is mishandled, as demonstrated by an unsafe “cat README.md” command when e}pn is used. A popmedia control sequence can allow the malicious execution of executable file formats registered in the X desktop share MIME types (/usr/share/applications). The control sequence defers
January 11, 2019
LinuxSecurity.com: read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header (CVE-2017-14502).
January 11, 2019
LinuxSecurity.com: fix CVE-2019-3498 python-django: Content spoofing via URL path in
January 11, 2019
LinuxSecurity.com: **Horde_Image 2.5.4** * [mjr] SECURITY: Fix potential RCE in the text method when using the Imagemagick backend. * [mjr] SECURITY: Sanitize image type parameter (PR: 2, Fariskhi Vidyan). * [mjr] Fix issues with escaping single and double quote characters in the text method when using the Imagemagick backend.
January 11, 2019
LinuxSecurity.com: backport anti-phishing fixes
January 11, 2019
At CES, Focus is On ‘Cool Factor’ Not IoT Security
January 10, 2019
You can’t delete Facebook from some Androids and people aren’t happy
January 10, 2019
Facebook violated tough new cybersecurity law, says Vietnam
January 10, 2019
‘Unprecedented’ DNS Hijacking Attacks Linked to Iran
January 10, 2019
Google Search Results Spoofed to Create Fake News
January 10, 2019
Update now! Microsoft and Adobe’s January 2019 Patch Tuesday is here
January 10, 2019
Reddit users locked out of accounts after ‘security concern’
January 10, 2019
Zerodium is paying $2 million for Apple iOS remote jailbreak
January 10, 2019
NSA to release free reverse engineering tool GHIDRA at RSAConference
January 10, 2019
2018’s Top hacks and data breaches
January 10, 2019
Town of Salem data breach: Personal data of 7.6M gamers stolen
January 10, 2019
Face unlock on many Android smartphones falls for a photo
No 3D-printed heads or realistic masks were needed to trick even a handful of high-end handset models into unlocking their screens The post Face unlock on many Android smartphones falls for a photo appeared first on WeLiveSecurity
January 10, 2019
Reading Time: ~4 min. We live in a digital age where internet-connected devices are the norm. Our phones, our televisions, even our light bulbs are tied together in today’s tech ecosystem. For high school and college students, this degree of digital connection is the standard, and when school is in session, tech accessories are a […]
January 10, 2019
Smashing Security #110: What? You can get paid to leave Facebook?
January 10, 2019
LinuxSecurity.com: An authenticated user who can obtain a TGT using an older encryption type (DES, DES3, or RC4) can cause an assertion failure in the KDC by sending an S4U2Self request (CVE-2018-20217). References:
January 10, 2019
LinuxSecurity.com: A bug in the server implementation of RTSP-over-HTTP in live could allow a denial-of-service attack. A bug in the server implementation of RTSP-over-HTTP could allow a buffer overflow, which could result in the execution of arbitrary code
January 10, 2019
LinuxSecurity.com: A vulnerability was found in mbedTLS which allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites (CVE-2018-19608). References:
January 10, 2019
CES IoT security – do you know who your home is talking to?
There’s a digital treasure trove to be had in your home so you should take steps to protect it The post CES IoT security – do you know who your home is talking to? appeared first on WeLiveSecurity
January 10, 2019
LinuxSecurity.com: libgxps 0.3.1 release. – Fix font scaling when converting xps to pdf – Handle errors returned by archive_read_data in GXPSArchive – Ensure gxps_archive_read_entry() fills the GError in case of failure – Make the pdf generated by xpstopdf to be 96 dpi – Fix OUTPUT FILE description in man pages – Clear the GError before […]
January 10, 2019
LinuxSecurity.com: Security fix for CVE-2018-1000532, new non-root permissions and a few smaller fixes. Fix a directory traversal issue introduced with the fix for CVE-2018-1000532, and refuses to run as setuid root or via sudo to avoid any more priviledge escalation issue. —- Security fix for CVE-2018-1000532 and a few smaller fixes
January 10, 2019
LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.
January 10, 2019
LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.
January 10, 2019
LinuxSecurity.com: Several vulnerabilities were discovered in libcaca, a graphics library that outputs text: integer overflows, floating point exceptions or invalid memory reads may lead to a denial-of-service (application crash) if a malformed image file is processed.
January 9, 2019
ICEPick-3PC: A Sophisticated Adware That Collects Data En Masse
January 9, 2019
LinuxSecurity.com: An update that solves three vulnerabilities and has two fixes is now available.
January 9, 2019
LinuxSecurity.com: An update that fixes 13 vulnerabilities is now available.
January 9, 2019
Google Play Boots 85 Malicious Adware Apps
January 9, 2019
security update
January 9, 2019
security update
January 9, 2019
Type: Vulnerability. Microsoft Skype for Android is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Exchange Server is prone to an information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Exchange is prone to a remote memory-corruption vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Outlook is prone to an information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote privilege-escalation vulnerability; fixes are available.
January 9, 2019