September 7, 2018
Dark web sites could be exposed by routine slip-up
How a data request turned into a data breach
September 7, 2018
ThreatList: Attacks on Industrial Control Systems on the Rise
September 7, 2018
M-M-M-MONSTER KILL: Cisco’s bug-wranglers swat 29 in single week
September 7, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
September 7, 2018
Bug bounty alert: Musk lets pro hackers torpedo Tesla firmware risk free
September 6, 2018
U.S. Ties Lazarus to North Korea and Major Hacking Conspiracy
September 6, 2018
LinuxSecurity.com: Firefox could be made to crash or run programs as your login if it opened a malicious website.
September 6, 2018
LinuxSecurity.com: Several vulnerabilities were found in qemu, a fast processor emulator: CVE-2015-8666
September 6, 2018
security update
September 6, 2018
security update
September 6, 2018
FBI fingers the Norks it wants to pinch for Sony hack, WannaCry attacks
September 6, 2018
LinuxSecurity.com: Several security issues were fixed in libtirpc.
September 6, 2018
LinuxSecurity.com: Several security issues were fixed in libtirpc.
September 6, 2018
Risk Level: Very Low. Type: Trojan.
September 6, 2018
Active Spy Campaign Exploits Unpatched Windows Zero-Day
September 6, 2018
Open Source Summit: Innovation, Allies, and Open Development
September 6, 2018
Mozilla Patches Critical Code Execution Bug in Firefox 62
September 6, 2018
Could home appliances knock down power grids?
Far-fetched though it may sound, the answer is yes, according to researchers, who show that electrical grids and smart home appliances could make for a dangerous mix The post Could home appliances knock down power grids? appeared first on WeLiveSecurity
September 6, 2018
Mobile spyware maker mSpy leaks millions of records – AGAIN
September 6, 2018
Social Security numbers exposed on US government transparency site
September 6, 2018
HTTPS crypto-shame: TV Licensing website pulled offline
September 6, 2018
High-Severity Flaws in Cisco Secure Internet Gateway Service Patched
September 6, 2018
Thousands of MikroTik routers are snooping on user traffic
September 6, 2018
Thousands of unsecured 3D printers discovered online
September 6, 2018
Ungagged Google warns users about FBI accessing their accounts
September 6, 2018
LinuxSecurity.com: It was discovered that there was an integer overflow vulnerability in the “Little CMS 2” colour management library. A specially-crafted input file could lead to a heap-based buffer overflow.
September 6, 2018
LinuxSecurity.com: New mozilla-thunderbird packages are available for Slackware 14.2 to fix security issues.
September 6, 2018
LinuxSecurity.com: New ghostscript packages are available for Slackware 14.2 and -current to fix security issues.
September 6, 2018
LinuxSecurity.com: New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues.
September 6, 2018
LinuxSecurity.com: New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
September 6, 2018
Reading Time: ~4 min.If you saw a file called eicar.com on your computer, you might think it was malware. But, you would be wrong. Readers, if you haven’t yet met the EICAR test file, allow me to introduce you to it. If you have used the EICAR test file, let’s get a bit cozier with […]
September 5, 2018
LinuxSecurity.com: Zhaoyang Wu discovered that cURL, an URL transfer library, contains a buffer overflow in the NTLM authentication code triggered by passwords that exceed 2GB in length on 32bit systems.
September 5, 2018
OilRig Sends an OopsIE to Mideast Government Targets
September 5, 2018
security update
September 5, 2018
LinuxSecurity.com: Michael Kaczmarczik discovered a vulnerability in the web interface template editing function of Sympa, a mailing list manager. Owner and listmasters could use this flaw to create or modify arbitrary files in the server with privileges of sympa user or owner view list config files
September 5, 2018
LinuxSecurity.com: The git-annex package was found to have multiple vulnerabilities when operating on untrusted data that could lead to arbitrary command execution and encrypted data exfiltration.
September 5, 2018
Google Rolls Out 40 Fixes with Chrome 69
September 5, 2018
LinuxSecurity.com: The daemon in GDM does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code
September 5, 2018
LinuxSecurity.com: An update that fixes three vulnerabilities is now available.
September 5, 2018
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 5, 2018
LinuxSecurity.com: An update for rhvm-appliance is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 5, 2018
LinuxSecurity.com: An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 5, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
September 5, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
September 5, 2018
Active Campaign Exploits Critical Apache Struts 2 Flaw in the Wild
September 5, 2018
MEGA secure upload service gets its Chrome extension hacked
September 5, 2018
The Vulnerability Disclosure Process: Still Broken
September 5, 2018
Ran Levi interviews Graham Cluley on the Malicious Life podcast
September 5, 2018
IDG Contributor Network: Replication isn’t data protection. Here’s why
September 5, 2018
MEGA Chrome extension hacked with cryptocurrency malware
September 5, 2018
Linus Torvalds: Changes in hardware change Linux development
September 5, 2018
Don’t Fall for Webcam Blackmail: Here’s How to Protect Yourself
September 5, 2018
PowerPool malware exploits ALPC LPE zero-day vulnerability
Malware from newly uncovered group PowerPool exploits zero-day vulnerability in the wild, only two days after its disclosure The post PowerPool malware exploits ALPC LPE zero-day vulnerability appeared first on WeLiveSecurity
September 5, 2018
Everything DM gets direct message slap: Marketing biz cops £60k ICO fine
September 5, 2018
Silence! Cybercrime’s Pinky and the Brain have nicked $800k off banks
September 5, 2018
Serious Fraud Office trialling AI for data-heavy cases
September 5, 2018
Knock, knock: Digital key flaw unlocks door control systems
September 5, 2018
Department of Labour denies server compromise in recent cyberattack
September 5, 2018
This malware disguises itself as bank security to raid your account
September 5, 2018
ICO Breach Reports Jump 75% as Human Error Dominates
September 5, 2018
Tiny Island Atoll’s Domain Used in Widespread Ad Fraud
September 5, 2018
Can ‘sonar’ sniff out your Android’s lock code?
September 5, 2018
Google releases free AI tool to stamp out child sexual abuse material
September 5, 2018
Brit teen pleads guilty to Minecraft-linked bomb and airline hoaxes
September 5, 2018
Cybercrooks home in on infosec’s weakest link – you poor gullible people
September 5, 2018
Uncle Sam wants tech toolkit to snoop social media stock scammers
September 5, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 5, 2018
LinuxSecurity.com: Quang Nguyen discovered an integer overflow in the Little CMS 2 colour management library, which could in denial of service and potentially the execution of arbitrary code if a malformed IT8 calibration file is processed.
September 4, 2018
Mikrotik routers pwned en masse, send network data to mysterious box
September 4, 2018
Multiple Remote Code-Execution Flaws Patched in Opsview Monitor
September 4, 2018
Thousands of MikroTik Routers Hijacked for Eavesdropping
September 4, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
September 4, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
September 4, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has four fixes is now available.
September 4, 2018
LinuxSecurity.com: An update is now available for CloudForms Management Engine 5.9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
September 4, 2018
ThreatList: 60% of BEC Attacks Fly Under the Radar
September 4, 2018
Credit card gobbling malware found piggybacking on ecommerce sites
September 4, 2018