LinuxSecurity.com: The package systemd before version 240.0-3 is vulnerable to multiple issues including arbitrary file overwrite and information disclosure.
January 11, 2019
What happens when the cops get hit with malware, too?
January 11, 2019
Reddit Locks Down Accounts After Security Incident
January 11, 2019
Trading site data leak sprayed out keys to users’ accounts
January 11, 2019
El Chapo was brought down by a sysadmin
January 11, 2019
LinuxSecurity.com: read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header (CVE-2017-14502).
January 11, 2019
LinuxSecurity.com: Terminology before 1.3.1 allows Remote Code Execution because popmedia is mishandled, as demonstrated by an unsafe “cat README.md” command when e}pn is used. A popmedia control sequence can allow the malicious execution of executable file formats registered in the X desktop share MIME types (/usr/share/applications). The control sequence defers
January 11, 2019
LinuxSecurity.com: fix CVE-2019-3498 python-django: Content spoofing via URL path in
January 11, 2019
LinuxSecurity.com: backport anti-phishing fixes
January 11, 2019
LinuxSecurity.com: **Horde_Image 2.5.4** * [mjr] SECURITY: Fix potential RCE in the text method when using the Imagemagick backend. * [mjr] SECURITY: Sanitize image type parameter (PR: 2, Fariskhi Vidyan). * [mjr] Fix issues with escaping single and double quote characters in the text method when using the Imagemagick backend.
January 11, 2019
At CES, Focus is On ‘Cool Factor’ Not IoT Security
January 10, 2019
You can’t delete Facebook from some Androids and people aren’t happy
January 10, 2019
Facebook violated tough new cybersecurity law, says Vietnam
January 10, 2019
‘Unprecedented’ DNS Hijacking Attacks Linked to Iran
January 10, 2019
Google Search Results Spoofed to Create Fake News
January 10, 2019
Update now! Microsoft and Adobe’s January 2019 Patch Tuesday is here
January 10, 2019
Reddit users locked out of accounts after ‘security concern’
January 10, 2019
Zerodium is paying $2 million for Apple iOS remote jailbreak
January 10, 2019
NSA to release free reverse engineering tool GHIDRA at RSAConference
January 10, 2019
2018’s Top hacks and data breaches
January 10, 2019
Town of Salem data breach: Personal data of 7.6M gamers stolen
January 10, 2019
Face unlock on many Android smartphones falls for a photo
No 3D-printed heads or realistic masks were needed to trick even a handful of high-end handset models into unlocking their screens The post Face unlock on many Android smartphones falls for a photo appeared first on WeLiveSecurity
January 10, 2019
Reading Time: ~4 min. We live in a digital age where internet-connected devices are the norm. Our phones, our televisions, even our light bulbs are tied together in today’s tech ecosystem. For high school and college students, this degree of digital connection is the standard, and when school is in session, tech accessories are a […]
January 10, 2019
Smashing Security #110: What? You can get paid to leave Facebook?
January 10, 2019
LinuxSecurity.com: A vulnerability was found in mbedTLS which allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites (CVE-2018-19608). References:
January 10, 2019
LinuxSecurity.com: A bug in the server implementation of RTSP-over-HTTP in live could allow a denial-of-service attack. A bug in the server implementation of RTSP-over-HTTP could allow a buffer overflow, which could result in the execution of arbitrary code
January 10, 2019
LinuxSecurity.com: An authenticated user who can obtain a TGT using an older encryption type (DES, DES3, or RC4) can cause an assertion failure in the KDC by sending an S4U2Self request (CVE-2018-20217). References:
January 10, 2019
CES IoT security – do you know who your home is talking to?
There’s a digital treasure trove to be had in your home so you should take steps to protect it The post CES IoT security – do you know who your home is talking to? appeared first on WeLiveSecurity
January 10, 2019
LinuxSecurity.com: Security fix for CVE-2018-1000532, new non-root permissions and a few smaller fixes. Fix a directory traversal issue introduced with the fix for CVE-2018-1000532, and refuses to run as setuid root or via sudo to avoid any more priviledge escalation issue. —- Security fix for CVE-2018-1000532 and a few smaller fixes
January 10, 2019
LinuxSecurity.com: libgxps 0.3.1 release. – Fix font scaling when converting xps to pdf – Handle errors returned by archive_read_data in GXPSArchive – Ensure gxps_archive_read_entry() fills the GError in case of failure – Make the pdf generated by xpstopdf to be 96 dpi – Fix OUTPUT FILE description in man pages – Clear the GError before […]
January 10, 2019
LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.
January 10, 2019
LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.
January 10, 2019
LinuxSecurity.com: Several vulnerabilities were discovered in libcaca, a graphics library that outputs text: integer overflows, floating point exceptions or invalid memory reads may lead to a denial-of-service (application crash) if a malformed image file is processed.
January 9, 2019
ICEPick-3PC: A Sophisticated Adware That Collects Data En Masse
January 9, 2019
LinuxSecurity.com: An update that solves three vulnerabilities and has two fixes is now available.
January 9, 2019
LinuxSecurity.com: An update that fixes 13 vulnerabilities is now available.
January 9, 2019
Google Play Boots 85 Malicious Adware Apps
January 9, 2019
security update
January 9, 2019
security update
January 9, 2019
Type: Vulnerability. Microsoft Skype for Android is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Exchange Server is prone to an information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Exchange is prone to a remote memory-corruption vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Outlook is prone to an information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Visual Studio is prone to an information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft ASP.NET is prone to a denial-of-service vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Office SharePoint is prone to a cross-site scripting vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Office SharePoint is prone to a cross-site scripting vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft ASP.NET Core is prone to a remote denial-of-service vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft ASP.NET Core is prone to an information disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Word is prone to an information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Office is prone to an information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Office SharePoint is prone to a cross-site scripting vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows Subsystem for Linux is prone to a local information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Visual Studio is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019