February 27, 2019
‘Highly critical’ bug exposes unpatched Drupal sites to attacks
Worse, attackers have already been spotted targeting the flaw to deliver cryptocurrency miners and other payloads The post ‘Highly critical’ bug exposes unpatched Drupal sites to attacks appeared first on WeLiveSecurity
February 27, 2019
Bronze Union APT Updates Remote Access Trojans in Fresh Wave of Attacks
February 27, 2019
LinuxSecurity.com: An update that solves 5 vulnerabilities and has 7 fixes is now available.
February 27, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 27, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 27, 2019
LinuxSecurity.com: An update that solves one vulnerability and has 7 fixes is now available.
February 27, 2019
LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.
February 27, 2019
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
February 27, 2019
Nvidia patches eight security flaws in graphics products
February 27, 2019
Researchers break e-signatures in 22 common PDF viewers
February 27, 2019
Police bust their own radio shop manager for dodgy software updates
February 27, 2019
Millions of utilities customers’ passwords stored in plain text
February 27, 2019
How to spot if your password was stolen in a security breach
Following the revelation that a list containing millions of stolen usernames and passwords had appeared online, we tell you a few different ways to find out if your credentials were stolen in that—or any other—security breach The post How to spot if your password was stolen in a security breach appeared first on WeLiveSecurity
February 27, 2019
LinuxSecurity.com: New openssl packages are available for Slackware 14.2 to fix a security issue.
February 27, 2019
LinuxSecurity.com: Security fix for CVE-2018-16741,CVE-2018-16744,CVE-2018-16745
February 27, 2019
‘Cloudborne’ IaaS Attack Allows Persistent Backdoors in the Cloud
February 26, 2019
LinuxSecurity.com: The package logstash before version 6.6.1-1 is vulnerable to information disclosure.
February 26, 2019
LinuxSecurity.com: The package elasticsearch before version 6.6.1-1 is vulnerable to privilege escalation.
February 26, 2019
LinuxSecurity.com: An update for polkit is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 26, 2019
6 Pieces of Tech Every Office Needs
February 26, 2019
High-Severity SHAREit App Flaws Open Files for the Taking
February 26, 2019
LinuxSecurity.com: GNOME Keyring could be made to expose sensitive information.
February 26, 2019
LinuxSecurity.com: USN-3866-2 introduced a regression in Ghostscript.
February 26, 2019
LinuxSecurity.com: LDB could be made to crash if it received specially crafted network traffic.
February 26, 2019
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
February 26, 2019
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
February 26, 2019
Critical WinRAR Flaw Found Actively Being Exploited
February 26, 2019
Google aims for password-free app and site logins on Android
With FIDO2 certification for Android, Google is setting the stage for password-less app and website sign-ins on a billion devices The post Google aims for password-free app and site logins on Android appeared first on WeLiveSecurity
February 26, 2019
LinuxSecurity.com: ultiple vulnerabilities have been discovered in liblivemedia, the LIVE555 RTSP server library: CVE-2019-6256
February 26, 2019
ICANN demands DNSSEC combats DNS hijacking
February 26, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 26, 2019
LinuxSecurity.com: An update that fixes 7 vulnerabilities is now available.
February 26, 2019
LinuxSecurity.com: The package kibana before version 6.6.1-1 is vulnerable to multiple issues including arbitrary code execution and information disclosure.
February 26, 2019
The Dark Sides of Modern Cars: Hacking and Data Collection
February 26, 2019
Facebook apps secretly sending sensitive data back to the mothership
February 26, 2019
Android nudges passwords closer to the cliff edge with FIDO2 support
February 26, 2019
Threatpost Data: Password Managers Are Worth the Risk, Readers Say
February 25, 2019
Check your VPN DNS test tool legitimacy: Is it “good” or deceptive
February 25, 2019
LinuxSecurity.com: An update that solves one vulnerability and has three fixes is now available.
February 25, 2019
LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.
February 25, 2019
Risk Level: Very Low. Type: Trojan.
February 25, 2019
ToRPEDO Privacy Attack on 4G/5G Networks Affects All U.S. Carriers
February 25, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 25, 2019
Escalating DNS attacks have domain name steward worried
The keeper of the internet’s ‘phone book’ is urging a speedy adoption of security-enhancing DNS specifications The post Escalating DNS attacks have domain name steward worried appeared first on WeLiveSecurity
February 25, 2019
LinuxSecurity.com: Several security issues were fixed in Bind.
February 25, 2019
Google Ditches Passwords in Latest Android Devices
February 25, 2019
Your $350 Nike self-lacing sneakers aren’t as smart as you hoped
February 25, 2019
Missile warning sent from hijacked Tampa mayor’s Twitter account
February 25, 2019
Facebook tricked kids into in-game purchases, say privacy advocates
February 25, 2019
Adobe patches the same critical Reader flaw twice in one week
February 25, 2019
LinuxSecurity.com: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 25, 2019
LinuxSecurity.com: A newer version of waagent is needed for several features of the Azure platform. For Debian 8 “Jessie”, this problem has been fixed in version
February 25, 2019
LinuxSecurity.com: The package msmtp before version 1.8.3-1 is vulnerable to certificate verification bypass.
February 25, 2019
LinuxSecurity.com: The package python-mysql-connector before version 8.0.15-1 is vulnerable to authentication bypass.
February 25, 2019
Nike’s $350 “Back to the Future” trainers crash, have feet of brick
February 23, 2019
Understanding VPN through open systems interconnection model
February 23, 2019
Major Android ad fraud scam campaign drains battery & eats data
February 23, 2019
Setting up a Django application on RHEL 8 Beta
February 23, 2019
Phishing Scam Cloaks Malware With Fake Google reCAPTCHA
February 22, 2019
Reddit Gold: Alice and Bob, Caught in a Web of Lies
February 22, 2019
Video: HackerOne CEO on the Evolving Bug Bounty Landscape
February 22, 2019
Data Breaches of the Week: Tales of PoS Malware, Latrine Status
February 22, 2019
Threatpost News Wrap Podcast For Feb. 22
February 22, 2019
Reading Time: ~2 min. Email Phishers Find New Filter Bypass Since email filters have gained popularity over the last decade, scammers have been forced to adapt their attacks. To bypass a normal URL filter that would check for malicious links, these scammers have found a way to alter the “document relationship” file (xml.rels) and continue […]
February 22, 2019
Android banking malware distributed with fake Google reCAPTCHA
February 22, 2019
Taking Care of Your Personal Online Security (For Paranoids)
February 22, 2019
Infosec in spaaace! NCC and Surrey Uni to pore over satellite security
February 22, 2019
Facebook lets Android users block location tracking
February 22, 2019
Cyber-extortionists take aim at lucrative targets
A new report shines some light on multiple aspects of the growing threat of cyber-extortion The post Cyber-extortionists take aim at lucrative targets appeared first on WeLiveSecurity
February 22, 2019
Advertisers flee YouTube after video comments get even more disgusting
February 22, 2019
Microsoft fixes web server DDoS bug
February 22, 2019
Flash “security bypass” list hidden in Microsoft Edge browser
February 22, 2019
Threatpost Poll: Are Password Managers Too Risky?
February 22, 2019
Bluetooth “gas station” warning on Facebook – truth or hoax? [VIDEO]
February 22, 2019
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
February 21, 2019
Type: Vulnerability. Microsoft .NET Framework and Visual Studio are prone to an security vulnerability; fixes are available.
February 21, 2019
Type: Vulnerability. Microsoft Windows is prone to a local security-bypass vulnerability; fixes are available.
February 21, 2019
Type: Vulnerability. Microsoft Windows is prone to a local security-bypass vulnerability; fixes are available.
February 21, 2019
Type: Vulnerability. Microsoft Windows is prone to a local security-bypass vulnerability; fixes are available.
February 21, 2019
ThreatList: Porn-Focused Malware Triples, Dark Web Loves It
February 21, 2019
Adobe Re-Patches Critical Acrobat Reader Flaw
February 21, 2019
Black-hat sextortionists required: Competitive salary and dental plan
February 21, 2019
Highly Critical Drupal RCE Flaw Affects Millions of Websites
February 21, 2019