March 4, 2019
Is a Facebookcoin in the works?
Anomaly in pen-test tool made malware servers visible
March 4, 2019
RSAC 2019: An Antidote for Tech Gone Wrong
March 4, 2019
Visitor Kiosk Access Systems Riddled with Bugs
March 4, 2019
LinuxSecurity.com: The package lib32-openssl-1.0 before version 1.0.2.r-1 is vulnerable to information disclosure.
March 4, 2019
LinuxSecurity.com: The package file before version 5.36-1 is vulnerable to multiple issues including information disclosure and denial of service.
March 4, 2019
LinuxSecurity.com: The package pcre before version 8.43-1 is vulnerable to denial of service.
March 4, 2019
LinuxSecurity.com: The package gdm before version 3.30.3-1 is vulnerable to access restriction bypass.
March 4, 2019
LinuxSecurity.com: The package openssl-1.0 before version 1.0.2.r-1 is vulnerable to information disclosure.
March 4, 2019
LinuxSecurity.com: This is the final notification for the retirement of Red Hat Enterprise Linux 6.4 Advanced Mission Critical (AMC). This notification applies only to those customers subscribed to the Advanced Mission Critical (AMC) channel for Red Hat Enterprise Linux 6.4.
March 4, 2019
LinuxSecurity.com: New python packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
March 3, 2019
LinuxSecurity.com: The package chromium before version 72.0.3626.121-1 is vulnerable to arbitrary code execution.
March 3, 2019
How the Dark Web Data Bazaar Fuels Enterprise Attacks
March 3, 2019
LinuxSecurity.com: Update to 4.01. Fixes lots of security bugs (and non-security bugs).
March 3, 2019
LinuxSecurity.com: It was found that a security update (DSA-4387-1) of OpenSSH, an implementation of the SSH protocol suite, was incomplete. This update did not completely fix CVE-2019-6111, an arbitrary file overwrite vulnerability in the scp client implementing the SCP protocol.
March 2, 2019
iPhone hacking tool Cellebrite being sold on eBay
March 2, 2019
LinuxSecurity.com: FreeRDP fix for CVE-2018-1000852, Remmina bugfix update and rebuilds for updated FreeRDP.
March 2, 2019
LinuxSecurity.com: FreeRDP fix for CVE-2018-1000852, Remmina bugfix update and rebuilds for updated FreeRDP.
March 2, 2019
LinuxSecurity.com: FreeRDP fix for CVE-2018-1000852, Remmina bugfix update and rebuilds for updated FreeRDP.
March 2, 2019
LinuxSecurity.com: FreeRDP fix for CVE-2018-1000852, Remmina bugfix update and rebuilds for updated FreeRDP.
March 2, 2019
LinuxSecurity.com: gdm 3.30.3 release. – Screen lock bypass fix (when timed login is enabled) (CVE-2019-3825) – Translation updates
March 2, 2019
LinuxSecurity.com: Restrict default configuration to localhost.
March 2, 2019
LinuxSecurity.com: fix for CVE-2018-5704 (RHBZ 1534844)
March 2, 2019
LinuxSecurity.com: Restrict default configuration to localhost.
March 2, 2019
LinuxSecurity.com: This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files.
March 2, 2019
LinuxSecurity.com: fix for CVE-2018-5704 (RHBZ 1534844)
March 2, 2019
LinuxSecurity.com: An update that solves one vulnerability and has three fixes is now available.
March 2, 2019
security update
March 1, 2019
security update
March 1, 2019
security update
March 1, 2019
security update
March 1, 2019
Type: Vulnerability. WinRAR is prone to multiple security vulnerabilities; fixes are available.
March 1, 2019
Podcast: RSA Conference 2019 Preview
March 1, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 1, 2019
LinuxSecurity.com: An update that solves one vulnerability and has 5 fixes is now available.
March 1, 2019
LinuxSecurity.com: An update that solves 5 vulnerabilities and has 33 fixes is now available.
March 1, 2019
LinuxSecurity.com: A vulnerability was discovered in uw-imap, the University of Washington IMAP Toolkit, that might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a
March 1, 2019
Data-tracking Chrome flaw triggered by viewing PDFs
March 1, 2019
A year in review: 2018 Product Security Risk Report
March 1, 2019
Reading Time: ~2 min. Fake Apex Legends App Spreads Malware As the popularity of the latest free-to-play battle royale pushes ever higher, malicious Apex Legends apps have been spotted in the Google Play store with upwards of 100,000 downloads. The fake apps typically offer free in-game currency, or free downloads for an already free game, while […]
March 1, 2019
LinuxSecurity.com: Garming Sam reported an out-of-bounds read in the ldb_wildcard_compare() function of ldb, a LDAP-like embedded database, resulting in denial of service.
March 1, 2019
LinuxSecurity.com: Several vulnerabilities were discovered in WordPress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) and PHP injections attacks, delete files, leak potentially sensitive data, create posts of unauthorized types, or
March 1, 2019
security update
March 1, 2019
Reading Time: ~6 min. This is the third of a three-part report on the state of three malware categories: miners, ransomware and information stealers. Ransomware is any malware that holds your data ransom. These days it usually involves encrypting a victim’s data before asking for cash (typically cryptocurrency) to decrypt it. Ransomware ruled the malware world since […]
February 28, 2019
LinuxSecurity.com: An update that contains security fixes can now be installed.
February 28, 2019
LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available.
February 28, 2019
Reading Time: ~5 min. The landscape of digital security is rapidly shifting, and even the largest tech giants are scrambling to keep up with new data regulations and cybersecurity threats. Small to medium-sized businesses (SMBs) are often left out of these important conversations, leaving themselves — and their users — vulnerable. In an effort to […]
February 28, 2019
Coinhive to Mine Its Last Monero in March
February 28, 2019
A video about cybersecurity threats that doesn’t feature any computers
February 28, 2019
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
February 28, 2019
Coinhive cryptocurrency miner to call it a day next week
The service became notorious for its use by ne’er-do-wells looking to make a quick buck by hijacking the processing power of victim machines to generate virtual money The post Coinhive cryptocurrency miner to call it a day next week appeared first on WeLiveSecurity
February 28, 2019
LinuxSecurity.com: Several security issues were fixed in GD.
February 28, 2019
Cisco Fixes Critical Flaw in Wireless VPN, Firewall Routers
February 28, 2019
Thunderclap: Apple Macs at risk from malicious Thunderbolt peripherals
February 28, 2019
US House and Senate debate new data privacy law
February 28, 2019
LinuxSecurity.com: ultiple vulnerabilities have been discovered in SoX (Sound eXchange), a sound processing program: CVE-2017-15370
February 28, 2019
US pushed Russian troll factory offline during US midterm elections
February 28, 2019
Businesses warned of malware spread via LinkedIn job offers
February 28, 2019
LinuxSecurity.com: An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 28, 2019
LinuxSecurity.com: Several vulnerabilities were found in QEMU, a fast processor emulator: CVE-2018-12617
February 28, 2019
LinuxSecurity.com: An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 28, 2019
Smashing Security #117: SWATs on a plane
February 28, 2019
LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 28, 2019
LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 28, 2019
LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 28, 2019
LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 28, 2019
Risk Level: Very Low. Type: Trojan.
February 28, 2019
LinuxSecurity.com: An update that solves two vulnerabilities and has four fixes is now available.
February 27, 2019
Card-Skimming Scripts Hide Behind Google Analytics, Angular
February 27, 2019
Ring Doorbell Flaw Opens Door to Spying
February 27, 2019
Cisco Patches High-Severity Webex Vulnerability For Third Time
February 27, 2019
Thunderclap Flaws Shatter Peripheral Security
February 27, 2019
LinuxSecurity.com: An information leak issue was discovered in phpMyAdmin. An attacker can read any file on the server that the web server’s user can access. This is related to the mysql.allow_local_infile PHP
February 27, 2019
LinuxSecurity.com: A regression was introduced in the previous chromium security update. The browser would always crash when launched in headless mode. This update fixes this problem.
February 27, 2019