October 24, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 24, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 24, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.
October 24, 2018
LinuxSecurity.com: An update that solves 25 vulnerabilities and has two fixes is now available.
October 24, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 24, 2018
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
October 24, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 24, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
October 24, 2018
Russia launched Triton malware to sabotage Saudi petrochemical plant
October 24, 2018
Are your jilted apps stalking you?
October 24, 2018
Banking Trojans continue to surface on Google Play
The malicious apps have all been removed from the official Android store but not before the apps were installed by almost 30,000 users The post Banking Trojans continue to surface on Google Play appeared first on WeLiveSecurity
October 24, 2018
WordPress takes aim at ancient versions of its software
October 24, 2018
Poorly secured SSH servers targeted by Chalubo botnet
October 24, 2018
Morrisons Loses Insider Breach Liability Appeal
October 24, 2018
Former high school teacher pleads guilty to hacking celebrities
October 24, 2018
Are you Cyber Aware? How about your friends and family?
October 24, 2018
LuminosityLink RAT author sentenced to 2.5 years in jail
As part of his plea agreement, the author of the malware also forfeited the proceeds from his crimes – 114 Bitcoin worth $725,000 The post LuminosityLink RAT author sentenced to 2.5 years in jail appeared first on WeLiveSecurity
October 24, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
October 24, 2018
City Pays $2K in Ransomware, Stirs ‘Never Pay’ Debate
October 23, 2018
LinuxSecurity.com: Several security issues were fixed in MySQL.
October 23, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2942
October 23, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2943
October 23, 2018
StrongPity APT Changes Tactics to Stay Stealthy
October 23, 2018
ProtonVPN Subscriptions Now Available on Firefox for $10
October 23, 2018
ThreatList: 3 Out of 4 Employees Pose a Security Risk to Businesses
October 23, 2018
Adult Website Hack Exposes 1.2M ‘Wife Lover’ Fans
October 23, 2018
How to Choose the Most Secure Software for your Business
October 23, 2018
Patch now! Multiple serious flaws found in Drupal
October 23, 2018
Thousands of Applications Vulnerable to RCE via jQuery File Upload
October 23, 2018
LinuxSecurity.com: Several security issues were fixed in Tex Live.
October 23, 2018
Get Essential Security Information from Linux Security Summit Videos
October 23, 2018
Adult websites shuttered after 1.2 million user details exposed
October 23, 2018
Why is Elon Musk promoting this Bitcoin scam? (He’s not)
October 23, 2018
Pirates! Don’t blame your illegal file sharing on family members
October 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
October 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
October 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
October 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
October 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
October 23, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
October 23, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
October 23, 2018
Watch how a Tesla Model S was stolen with just a tablet
October 22, 2018
LinuxSecurity.com: Net-SNMP could be made to crash if it received specially crafted network traffic.
October 22, 2018
LinuxSecurity.com: Paramiko could allow unintended access to network services.
October 22, 2018
LinuxSecurity.com: libssh could allow unintended access to network services.
October 22, 2018
LinuxSecurity.com: Requests could be made to expose sensitive information if it received a specially crafted HTTP header.
October 22, 2018
The Danger and Opportunity in 5G Connectivity and IoT
October 22, 2018
Obamacare Sign-Up Channel Breach Affects 75K Consumers
October 22, 2018
Critical Bug Impacts Live555 Media Streaming Libraries
October 22, 2018
Popular website plugin harboured a serious 0-day for years
October 22, 2018
Strict password policy could prevent credential reuse, paper suggests
The solution to password recycling may be easier to implement than previously thought, according to a recent paper The post Strict password policy could prevent credential reuse, paper suggests appeared first on WeLiveSecurity
October 22, 2018
Alleged robber busted after Facebook-friending victim to apologize
October 22, 2018
Up to 9.5 million net neutrality comments were fake
October 22, 2018
Maker of LuminosityLink RAT gets 30 months in the clink
October 22, 2018
LinuxSecurity.com: Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file (CVE-2016-5319). In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function
October 21, 2018
Bad to the Bot Bone
October 21, 2018
LinuxSecurity.com: A vulnerability has been discovered in exiv2 (CVE-2018-16336), a C++ library and a command line utility to manage image metadata, resulting in remote denial of service (heap-based buffer over-read/overflow) via
October 21, 2018
LinuxSecurity.com: The package thunderbird before version 60.2.1-1 is vulnerable to multiple issues including arbitrary code execution and information disclosure.
October 20, 2018
Two Critical RCE Bugs Patched in Drupal 7 and 8
October 20, 2018
Apache Access Vulnerability Could Affect Thousands of Applications
October 20, 2018
Hackers breach Healthcare.gov system, taking files on 75,000 people
October 20, 2018
Password and credit card-stealing Azorult malware adds new tricks
October 20, 2018
Facebook Portal isn’t designed to be as private as you might hope
October 19, 2018
LinuxSecurity.com: Updated ghostscript packages fix many bugs and security vulnerabilities: Bypassing executeonly to escape -dSAFER sandbox. (CVE-2018-17961) Saved execution stacks can leak operator arrays. (CVE-2018-18073)
October 19, 2018
security update
October 19, 2018
LinuxSecurity.com: pdated tcpflow package fixes security vulnerability: An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during caplen processing. If the caplen is less than 144, one can cause
October 19, 2018
LinuxSecurity.com: Smarty 3.1.32 or below is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files (CVE-2018-13982).
October 19, 2018
LinuxSecurity.com: Updated mgetty packages fix security vulnerabilities: The function do_activate() did not properly sanitize shell metacharacters to prevent command injection (CVE-2018-16741).
October 19, 2018
LinuxSecurity.com: This update provides vlc 3.0.4 and fixes atleast the following security issue: A use-after-free was discovered in the MP4 demuxer of the VLC media player, which could result in the execution of arbitrary code if a malformed media
October 19, 2018
LinuxSecurity.com: Updated 389-ds-base package fixes security vulnerabilities: a race condition on reference counter leads to DoS using persistent search (CVE-2018-10850)
October 19, 2018
LinuxSecurity.com: The updated glib2.0 packages fix security vulnerabilities: In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference (CVE-2018-16428).
October 19, 2018
LinuxSecurity.com: Updated rust packages fix security vulnerability The Rust Programming Language Standard Library before version 1.29.1 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in the standard library that can result in buffer overflow. This attack
October 19, 2018
LinuxSecurity.com: The updated clamav packages fix a security vulnerability: Vulnerability in ClamAV’s MEW unpacking feature that could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition on an affected device (CVE-2018-15378).
October 19, 2018
LinuxSecurity.com: Updated docker packages fix security vulnerabilities: Lack of content verification in docker allowed a remote attacker to cause a Denial of Service via a crafted image layer payload, aka gzip bombing (CVE-2017-14992).
October 19, 2018
LinuxSecurity.com: Updated calibre package fixes security vulnerability: gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that
October 19, 2018
Risk Level: Very Low.
October 19, 2018