Menu

Category Archives: All

Everything

An update that fixes 5 vulnerabilities is now available.

Safari test points to a future with tracker-free ads

An update that fixes one vulnerability is now available.

Batterygate news: Apple to warn users if iOS updates throttle iPhones
Google Ad Exchange in data privacy probe
Maker of US border’s license-plate scanning tech ransacked by hacker, blueprints and files dumped online
WikiLeaks boss Assange acted as a foreign spy, Uncle Sam exclaims in fresh rap sheet
Goodbye Passwords: Hello Identity Management

security update

security update

Why telcos ‘handed over’ people’s GPS coords to a bounty hunter: He just had to ask nicely
Shade Ransomware Expands to U.S. Targets
Calibration Attack Drills Down on iPhone, Pixel Users
World’s most dangerous laptop ‘Persistence of Chaos’ is up for auction
Smashing Security #129: Too Long; Didn’t Listen
British Army cyber ‘n’ psyops unit 77 Brigade can’t even brainwash civvies into helping it meet recruitment targets
SandboxEscaper Drops Three More Windows Exploits, IE Zero-Day
Download official version of Tor browser on Android devices

An update that fixes three vulnerabilities is now available.

Soaring Cryptocurrency Prices Draw Malicious New Onslaught of Apps, Malware

Security fix for CVE-2019-11328

Google stored some passwords in plaintext for 14 years
We’ll hack back at Russians, declare UK ministers in cyber-Blitz blitz
Tor Browser for Android 8.5 offers mobile users privacy boost
Mozilla fixes bugs, improves privacy in latest Firefox release
The city of Baltimore is being held hostage by ransomware
Phisher folk reel in Computacenter security vetting mailbox packed with sensitive staff data
Fake cryptocurrency apps crop up on Google Play as bitcoin price rises

ESET researchers have analyzed fake cryptocurrency wallets emerging on Google Play at the time of bitcoin’s renewed growth The post Fake cryptocurrency apps crop up on Google Play as bitcoin price rises appeared first on WeLiveSecurity

WannaCry-Infested Laptop Starts at $1.13M in Art Auction
Fingerprinting iPhones with the built-in gyroscope
Critical Flaws in Khan Academy Opened Door to Account Takeovers
Patch now! Why the BlueKeep vulnerability is a big deal

What you need to know about the critical security hole that could enable the next WannaCryptor The post Patch now! Why the BlueKeep vulnerability is a big deal appeared first on WeLiveSecurity

Google says it stored some G Suite passwords in plain text for 14 years
US Air Force probes targeted malware attack, blames… er, the US Navy? What?
Windows Zero-Day Drops on Twitter, Developer Promises 4 More

An update that fixes four vulnerabilities is now available.

Google Stored G Suite Passwords in Plaintext Since 2005
Google stored business customers’ passwords in plaintext on its servers… for 14 years
Data on millions of Instagram accounts spills onto the internet
Cache of 49 million Instagram records found online

An update that fixes one vulnerability is now available.

Some Androids don’t call 911 when you tell them to call an ambulance
Don’t break Windows 10 by deleting SID, Microsoft warns
6 keys to MongoDB database security
Most hackers for hire are scammers, research shows
A journey to Zebrocy land

ESET sheds light on commands used by the favorite backdoor of the Sednit group The post A journey to Zebrocy land appeared first on WeLiveSecurity

An update for python27-python and python27-python-jinja2 is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for dotnet is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Bug-hunter reveals another ‘make me admin’ Windows 10 zero-day – and vows: ‘There’s more where that came from’
G Suite’n’sour: Google resets passwords after storing some unhashed creds for months, years

An update that fixes 5 vulnerabilities is now available.

An update that fixes 5 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes two vulnerabilities is now available.

Database with millions of Instagram influencers’ info leaked online

– New upstream version (67.0) – Release notes are available at https://www.mozilla.org/en-US/firefox/67.0/releasenotes/

Updates the nss package to upstream NSS 3.44. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.44_release_notes

Mozilla Tackles Two Critical Flaws with Firefox 67 Release
Intel Fixes Critical, High-Severity Flaws Across Several Products
Data Security in the Cloud: How to Lock Down the Next-Gen Perimeter

An update that fixes 5 vulnerabilities is now available.

An update that fixes four vulnerabilities is now available.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Hackers hacked: Account hijacking forum OGUsers pwned
What the ban on facial recognition tech will – and will not – do

As San Francisco moves to regulate the use of facial recognition systems, we reflect on some of the many ‘faces’ of the fast-growing technology The post What the ban on facial recognition tech will – and will not – do appeared first on WeLiveSecurity

Cisco Starts Patching Firmware Bug; Millions of Devices Still Vulnerable
Cybersecurity training and awareness: helpful resources for educators

Free resources for cybersecurity awareness and training are out there – links to many of them are provided here The post Cybersecurity training and awareness: helpful resources for educators appeared first on WeLiveSecurity

HCL Exposes Customer, Personnel Info in Wide-Ranging Data Leak
Millions of Golfers Land in Privacy Hazard After Cloud Misconfig
Mining cryptocurrency at work lands Australian civil servant in court
Deep Packet Inspection a threat to net neutrality, say campaigners

Reading Time: ~3 min. Technology has unlocked a new type of worker, unlike any we have seen before—the digital nomad. Digital nomads are people who use technologies like WiFi, smart devices, and cloud-based applications to work from wherever they please. For some digital nomads, this means their favorite coffee shop or co-working space. For others, it means an idyllic […]

Amnesty sues maker of Pegasus, the spyware let in by WhatsApp zero day
Rats leave the sinking ship as hackers’ forum gets hacked
iPhone gyroscopes, of all things, can uniquely ID handsets on anything earlier than iOS 12.2

An update that fixes two vulnerabilities is now available.

WordPress plugin sees second serious security bug in six weeks

An update that fixes four vulnerabilities is now available.

An update that fixes 6 vulnerabilities is now available.

Gmail wittingly storing your online purchase data for years

Fixes possible man-in-the-middle security vulnerability – CVE-2019-11065

This update fixes security vulnerability – Checkstyle loads external DTDs by default. Upstream issue: https://github.com/checkstyle/checkstyle/issues/6474 https://github.com/checkstyle/checkstyle/issues/6478 References: https://checkstyle.org/releasenotes.html#Release_8.18

Sharing Threat Intelligence: Time for an Overhaul
Windows 10 Update Bricks PCs, Microsoft Offers Workarounds
Salesforce Woes Linger as Admins Clean Up After Service Outage
Sophos tells users to roll back Microsoft’s Patch Tuesday run if they want PC to boot
Behind the Naming of ZombieLoad and Other Intel Spectre-Like Flaws
Google bans Huawei from accessing Android & its licensed apps
Boeing admits 737 Max sims didn’t accurately reproduce what flying without MCAS was like
Slack Bug Allows Remote File Hijacking, Malware Injection
ZombieLoad: How Intel’s Latest Side Channel Bug Was Discovered and Disclosed
CEO told to hand back 757,000 fraudulently obtained IP addresses
Brave browser concerned that Client Hints could be abused for tracking

Multiple vulnerabilities have been discovered in jruby, Java implementation of the Ruby programming language.

Several security vulnerabilities have been discovered in drupal7, a PHP web site platform. The vulnerabilities affect the embedded versions of the jQuery JavaScript library and the Typo3 Phar Stream Wrapper library.

Facebook bans accounts of fake news firm
TeamViewer was Targeted by Chinese Hackers in 2016