August 2, 2018
Phishing Campaign Steals Money From Industrial Companies
Cisco drops a cool $2.3 billion on SaaSy outfit Duo Security
August 2, 2018
Podcast: Breaking Down the COSCO Ransomware Attack
August 2, 2018
Reddit’s serious “security incident” – what you need to know
August 2, 2018
Reading Time: ~6 min.Cybercriminals are constantly experimenting with new ways to take money from their victims. Their tactics evolve quickly to maximize returns and minimize risk. The emergence of cryptocurrency has opened up new opportunities to do just that. To better understand today’s threat landscape, it’s worth exploring the origins of cryptocurrencies and the progress […]
August 2, 2018
Reddit hacked – but don’t give up on 2FA just yet
August 2, 2018
How to defend yourself against SamSam ransomware
August 2, 2018
Facebook bans midterm-meddling accounts and pages
August 2, 2018
LinuxSecurity.com: Several security issues were fixed in ClamAV.
August 2, 2018
Reddit reveals breach as attacker circumvents staff’s 2FA
The company has learned the hard way that there are better ways to deliver two-factor authentication than via text messages The post Reddit reveals breach as attacker circumvents staff’s 2FA appeared first on WeLiveSecurity
August 2, 2018
Microsoft Edge adds WebAuthn as passwords near the end
August 2, 2018
A single ransomware creator made almost $6 million
August 2, 2018
Yale University discloses old school data breach
August 2, 2018
Spam is getting smarter and we’re still falling for it
August 2, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in mutt, a sophisticated text-based Mail User Agent, resulting in denial of service, stack-based buffer overflow, arbitrary command execution, and directory traversal
August 2, 2018
UK.gov ploughs cash into creaky police technology
August 2, 2018
LinuxSecurity.com: The security update of busybox announced as DLA-1445-1 introduced a regression due to an incomplete fix for CVE-2015-9261. It was no longer possible to decompress gzip archives which exceeded a certain file size.
August 2, 2018
Do you work in a regulated industry?
August 2, 2018
New Zealand school on naughty step after ransomware failure
August 2, 2018
LinuxSecurity.com: New blueman packages are available for Slackware 14.2 and -current to fix a security issue.
August 2, 2018
DOJ Nabs Three FIN7 Cybercrime Suspects in Europe
August 1, 2018
security update
August 1, 2018
LinuxSecurity.com: Several security issues were fixed in libmspack.
August 1, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
August 1, 2018
LinuxSecurity.com: An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
August 1, 2018
LinuxSecurity.com: Security critical patch update for OpenJDK (July CPU). See http://www.oracle.com/technetwork/security- advisory/cpujul2018-4258247.html#AppendixJAVA
August 1, 2018
LinuxSecurity.com: Security critical patch update for OpenJDK (July CPU). See http://www.oracle.com/technetwork/security- advisory/cpujul2018-4258247.html#AppendixJAVA
August 1, 2018
LinuxSecurity.com: # New upstream release 2.3 Fixes possible tag truncation security bug in AEAD API, see RHBZ#1602752 ## 2.3 – 2018-07-18 * SECURITY ISSUE: finalize_with_tag() allowed tag truncation by default which can allow tag forgery in some cases. The method now enforces the min_tag_length provided to the GCM constructor. * Added support for Python 3.7. […]
August 1, 2018
Risk Level: Very Low.
August 1, 2018
Amnesty International Targeted by Nation-State Spyware
August 1, 2018
Android apps infected with umm… *Windows* malware
August 1, 2018
Alleged SIM-swap scammer nabbed for stealing $5m in Bitcoin
August 1, 2018
Staff dust off their typewriters after malware attack
August 1, 2018
Phone scam exploits Russian hacking fears
August 1, 2018
HP offers rewards for hacking its printers
But don’t get too excited just yet: the first-of-its-kind bug bounty program for printers is invite-only for now The post HP offers rewards for hacking its printers appeared first on WeLiveSecurity
August 1, 2018
New Spectre Variant Hits the Network
August 1, 2018
Clarksons says single user account to blame for data breach
August 1, 2018
Conversation hijacking attacks | Salted Hash Ep 38
August 1, 2018
Oooooh! Fashion! Yes, breach did contain 1 million+ records
August 1, 2018
UK cyber security boffins dispense Ubuntu 18.04 wisdom
August 1, 2018
Porn-warning security scam hooks you up to “Apple Care”
August 1, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may result in incorrect processing of HTTP/FTP, directory traversal, command injection, unintended socket creation or information disclosure.
July 31, 2018
ThreatList: Business Email Compromises Way Up for Q2
July 31, 2018
LinuxSecurity.com: Security fix for CVE-2018-13988.
July 31, 2018
LinuxSecurity.com: Update zziplib to 0.13.69 version, fixes all known CVEs for the package.
July 31, 2018
HP Offers Up to $10,000 Rewards for Printer Bugs
July 31, 2018
LinuxSecurity.com: Denis Andzakovic discovered that network-manager-vpnc, a plugin to provide VPNC support for NetworkManager, is prone to a privilege escalation vulnerability. A newline character can be used to inject a
July 31, 2018
SamSam: The (almost) $6 million ransomware
July 31, 2018
Spectre chip weakness can be used to steal data remotely
July 31, 2018
OneDrive app for Android updated with fingerprint authentication
With this update, Microsoft is bringing a feature for Android users that has been available on iOS devices for quite a while now The post OneDrive app for Android updated with fingerprint authentication appeared first on WeLiveSecurity
July 31, 2018
UK CNP Fraud Drops as Banks Fight Back
July 31, 2018
Idaho Inmates Hack Tablets for Extra Credits
July 31, 2018
Cryptojacking for beginners – what you need to know
July 31, 2018
Inmates hack tablets for free credits prison
The nature of the vulnerability hasn’t been disclosed, but is said to have already been identified and fixed The post Inmates hack tablets for free credits prison appeared first on WeLiveSecurity
July 31, 2018
LinuxSecurity.com: New seamonkey packages are available for Slackware 14.2 and -current to fix security issues.
July 31, 2018
LinuxSecurity.com: New file packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
July 31, 2018
security update
July 30, 2018
LinuxSecurity.com: Several security issues were fixed in MySQL.
July 30, 2018
LinuxSecurity.com: yum-utils: reposync: improper path validation may lead to directory traversal (CVE-2018-10897) SL6 noarch yum-plugin-aliases-1.1.30-42.el6_10.noarch.rpm yum-plugin-changelog-1.1.30-42.el6_10.noarch.rpm yum-plugin-ovl-1.1.30-42.el6_10.noarch.rpm yum-plugin-security-1.1.30-42.el6_10.noarch.rpm yum-plugin-tmprepo-1.1.30-42.el6_10.noarch.rpm yum-plugin-verify-1.1.30-42.e [More…]
July 30, 2018
LinuxSecurity.com: OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952) SL6 x86_64 java-1.7.0-openjdk-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm java-1.7.0-openjdk-debuginfo-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm java-1.7.0-openjdk-devel-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm java-1.7.0-openjdk-demo-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm [More…]
July 30, 2018
Connected Car Apps Open Privacy Hole For Used Car Owners
July 30, 2018
LinuxSecurity.com: yum-utils: reposync: improper path validation may lead to directory traversal (CVE-2018-10897) SL7 noarch yum-plugin-aliases-1.1.31-46.el7_5.noarch.rpm yum-plugin-changelog-1.1.31-46.el7_5.noarch.rpm yum-plugin-ovl-1.1.31-46.el7_5.noarch.rpm yum-plugin-tmprepo-1.1.31-46.el7_5.noarch.rpm yum-plugin-verify-1.1.31-46.el7_5.noarch.rpm yum-plugin-versionlock-1.1.31-46.el7 [More…]
July 30, 2018
LinuxSecurity.com: OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952) SL7 x86_64 java-1.7.0-openjdk-1.7.0.191-2.6.15.4.el7_5.x86_64.rpm java-1.7.0-openjdk-debuginfo-1.7.0.191-2.6.15.4.el7_5.x86_64.rpm java-1.7.0-openjdk-headless-1.7.0.191-2.6.15.4.el7_5.x86_64.rpm java-1.7.0-openjdk-accessibility-1.7.0.191-2.6.15.4.el7_5.x86_64. [More…]
July 30, 2018
LinuxSecurity.com: CVE-2018-14339 CVE-2018-14340 CVE-2018-14341
July 30, 2018
DMARC Compliance Lacking in 28 Percent of .Gov Agencies
July 30, 2018
New York Times profiles one of its own security experts
July 30, 2018