January 7, 2019
Zerodium Raises Zero-Day Payout Ceiling to $2M
January 7, 2019
ThreatList: Container Security Lags Amidst DevOps Enthusiasm
January 7, 2019
LinuxSecurity.com: A NULL pointer dereference flaw was found in the way dcraw processed images. An attacker could potentially use this flaw to crash dcraw by tricking it into processing crafted images (CVE-2018-5801). References:
January 7, 2019
LinuxSecurity.com: A flaw was found in libao. The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 can cause a denial of service(memory corruption) via a crafted mp3 file (CVE-2017-11548). References:
January 7, 2019
LinuxSecurity.com: NULL pointer dereference in the function aubio_source_avcodec_readframe which may lead to DoS when playing a crafted audio file (CVE-2017-17554). A crash in aubio_pitch_set_unit (CVE-2018-14522).
January 7, 2019
Risk Level: Very Low.
January 7, 2019
Earn $2,000,000 by remotely jailbreaking an iPhone
January 7, 2019
unCAPTCHA AI Cracks Google reCAPTCHAs with 90% Accuracy
January 7, 2019
EU offers bug bounties on popular open source software
The program with a prize pool of almost US$1 million aims to leverage the ‘power of the crowd’ in order to prevent another Heartbleed The post EU offers bug bounties on popular open source software appeared first on WeLiveSecurity
January 7, 2019
Skype Glitch Allowed Android Authentication Bypass
January 7, 2019
Reading Time: ~3 min. SMBs are overconfident about their cybersecurity posture. A survey of SMBs conducted by 451 Research found that in the preceding 24 months, 71% of respondents experienced a breach or attack that resulted in operational disruption, reputational damage, significant financial losses or regulatory penalties. At the same time, 49% of the SMBs […]
January 7, 2019
No Android passcode? No problem! Skype unlocked it for you
January 7, 2019
LinuxSecurity.com: This is the final notification for the retirement of Red Hat Enterprise Linux 6.6 Telco Update Service (TUS). This notification applies only to those customers subscribed to the Telco Update Service (TUS) channel for Red Hat Enterprise Linux 6.6.
January 7, 2019
Podcast: Beware These Top Security Threats in 2019
January 7, 2019
Hacker doxes hundreds of German politicians
January 7, 2019
Major US newspapers crippled by Ryuk ransomware attack
January 7, 2019
Marriott Sheds New Light on Massive Breach
January 7, 2019
Update now! Adobe Acrobat and Reader have critical flaws
January 7, 2019
Monday review – the hot stories of the new year
January 7, 2019
LinuxSecurity.com: It was discovered that there was a content-spoofing vulnerability in the default 404 pages in the Django web development framework. For more information, please see:
January 6, 2019
Dark Overlord hackers publish first batch of “secret” 9/11 files
January 6, 2019
Irish tram system website hacked; held for 1 BTC ransom
January 6, 2019
How to Turn Your IT Skills into a Business
January 6, 2019
Abine Blur Password Manager exposed data of 2.4M users
January 6, 2019
EU launches Bug Bounty program for 14 free open-source products
January 6, 2019
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2019:0022
January 6, 2019
Town of Salem Data Breach Exposes 7.6 Million Gamers’ Accounts
January 6, 2019
LinuxSecurity.com: This release (4.3.1) contains bug fixes only: – Fix checkspell detected typos (#531) – Heap overflow packet2tree and get_l2len (#530) This is Tcpreplay suite 4.3.0 This release contains several bug fixes and enhancements: – Fix maxOS TOS checksum failure (#524) – TCP sequence edits seeding (#514) – Fix issues identifed by Codacy (#493) – […]
January 6, 2019
LinuxSecurity.com: This release (4.3.1) contains bug fixes only: – Fix checkspell detected typos (#531) – Heap overflow packet2tree and get_l2len (#530) This is Tcpreplay suite 4.3.0 This release contains several bug fixes and enhancements: – Fix maxOS TOS checksum failure (#524) – TCP sequence edits seeding (#514) – Fix issues identifed by Codacy (#493) – […]
January 6, 2019
LinuxSecurity.com: Since version 1.19 Wget stores the URL and in certain cases the ‘Referer’ URL within extended attributes (xattrs) of the file system – by default. This includes username + password and other credentials or private data *if* those have been used within the URLs. Anyone with read access to
January 5, 2019
The Advantages of a More Secure and Safer Blockchain
January 5, 2019
LinuxSecurity.com: Several vulnerabilities were discovered in libextractor which may lead to denial of service or memory disclosure if a malformed OLE file is processed (CVE-2018-20430, CVE-2018-20431). References:
January 5, 2019
LinuxSecurity.com: Use-after-free vulnerability in Decoder.cpp in libpgf before 6.15.32 (CVE-2015-6673). References: – https://bugs.mageia.org/show_bug.cgi?id=24101
January 5, 2019
LinuxSecurity.com: Potential object injection vulnerability (CVE-2018-19296). References: – https://bugs.mageia.org/show_bug.cgi?id=24055 – https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/DAZQPUD7WZXMJ2KIQY5P2I2UI545YPYO/
January 5, 2019
LinuxSecurity.com: Eyal Itkin discovered FreeRDP incorrectly handled certain stream encodings. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2018-8784, CVE-2018-8785).
January 5, 2019
LinuxSecurity.com: A vulnerability was in found in PowerDNS Recursor. The issue is a memory leak occurring while parsing some malformed records, due to the fact that some memory is allocated parsing a record and is not always properly released if the record is not valid. It allows a malicious auth server to cause a denial […]
January 5, 2019
LinuxSecurity.com: A vulnerability was in found in PowerDNS Authoritative Server. The issue is a memory leak occurring while parsing some malformed records, due to the fact that some memory is allocated parsing a record and is not always properly released if the record is not valid. It allows an authorized user to cause a denial […]
January 5, 2019
LinuxSecurity.com: A flaw was found in units. units_cur doesn’t sanitize downloaded data. This allows a maliciously intended server to execute arbitrary code remotely on the client (rhbz#1598913). References:
January 5, 2019
LinuxSecurity.com: Florian Stuelpner discovered that Samba is vulnerable to infinite query recursion caused by CNAME loops, resulting in denial of service (CVE-2018-14629). Alex MacCuish discovered that a user with a valid certificate or smart
January 5, 2019
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
January 5, 2019
Weather Channel App in a Deluge of Legal Trouble for Data Misuse
January 4, 2019
Facebook hoaxes – harmless fun or security risk? [VIDEO]
January 4, 2019
Personal data of German political elite dumped online
The vast trove of data was released online and disseminated via Twitter over the span of four weeks – without anybody really noticing The post Personal data of German political elite dumped online appeared first on WeLiveSecurity
January 4, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 4, 2019
LinuxSecurity.com: An update that solves 6 vulnerabilities and has three fixes is now available.
January 4, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 4, 2019
LinuxSecurity.com: An update that solves 13 vulnerabilities and has three fixes is now available.
January 4, 2019
LinuxSecurity.com: An update that solves 11 vulnerabilities and has one errata is now available.
January 4, 2019
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
January 4, 2019
LinuxSecurity.com: An update that fixes three vulnerabilities is now available.
January 4, 2019
LinuxSecurity.com: An update that solves 9 vulnerabilities and has four fixes is now available.
January 4, 2019
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
January 4, 2019
LinuxSecurity.com: An update that solves four vulnerabilities and has 17 fixes is now available.
January 4, 2019
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
January 4, 2019
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
January 4, 2019
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 4, 2019
Marriott Revises Breach Scope to 383M Records
January 4, 2019
Phishing Tactic Hides Tracks with Custom Fonts
January 4, 2019
Town of Salem hack exposes details of 7.6 million gamers
January 4, 2019
Reading Time: ~2 min. American Newspapers Shutdown After Ransomware Attack Nearly all news publications owned by Tribune Publishing suffered disruptions in printing or distribution after the publisher was hit by a ransomware attack. Many of the papers across the country were delivered incomplete or hours or days late. Even some papers that had been sold […]
January 4, 2019
Don’t fall victim to the Chromecast hackers – here’s what to do
January 4, 2019
Vein authentication beaten by wax hand and photograph
January 4, 2019
Adobe Fixes Two Critical Acrobat and Reader Flaws
January 4, 2019
EU to offer nearly $1m in bug bounties for open-source software
January 4, 2019
LinuxSecurity.com: An update that fixes 8 vulnerabilities is now available.
January 3, 2019
LinuxSecurity.com: An update for rh-perl524-perl is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 3, 2019
LinuxSecurity.com: An update for rh-perl526-perl and rh-perl526-perl-Module-CoreList is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 3, 2019
Dual Data Leaks of Blur, Town of Salem Impact Millions
January 3, 2019
MobSTSPY Info-Stealing Trojan Goes Global Via Google Play
January 3, 2019
What is threat cumulativity and what does it mean for digital security?
A reflection on how acknowledging the cumulative nature of cyber-threats and understanding its implications can benefit our digital security The post What is threat cumulativity and what does it mean for digital security? appeared first on WeLiveSecurity
January 3, 2019
Hackers Hijack Smart TVs to Promote PewDiePie
January 3, 2019
US newspapers battle ransomware
January 3, 2019
Dark Overlord hackers release alleged 9/11 lawsuit documents
January 3, 2019
Vietnam’s New Cyber Law Threatens Free Speech
January 3, 2019
Hackers Target North Korean Defectors
January 3, 2019