Menu

Category Archives: All

Everything

Aggregate this: NewsNow has spilt a bunch of ‘encrypted’ passwords

LinuxSecurity.com: The package zsh before version 5.6-1 is vulnerable to insufficient validation.

How to improve hiring practices in cybersecurity

Should schools and businesses do more to combat the shortfall of cybersecurity professionals by changing the hiring process for those interested in having a career in the industry? The post How to improve hiring practices in cybersecurity appeared first on WeLiveSecurity

Users fret over Chrome auto-login change
Freelance workers targeted in new malware campaign
Linux or Windows: 25 Things You Must Know While Choosing The Best Platform
AdGuard adblocker resets passwords after credential-stuffing attack
Braking bad: Mitsubishi recalls 68k SUVs over buggy software
Woman hijacked CCTV cameras days before Trump inauguration
WWII Bombe operator Ruth Bourne: I’d never heard of Enigma until long after the war
14 years prison for man who helped hackers evade detection by anti-virus software
Wendy’s faces class action over collecting staff fingerprints
NewsNow suffers security breach – passwords should be considered compromised
Bug? Feature? Power users baffled as BitLocker update switch-off continues

Risk Level: Very Low. Type: Trojan, Virus, Worm.

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Microsoft ‘kills’ passwords, throws up threat manager, APIs Graph Security
Cybercriminals Target Kodi Media Player for Malware Distribution

security update

security update

security update

security update

LinuxSecurity.com: mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess (CVE-2011-2767) SL6 x86_64 mod_perl-2.0.4-12.el6_10.x86_64.rpm mod_perl-debuginfo-2.0.4-12.el6_10.x86_64.rpm mod_perl-debuginfo-2.0.4-12.el6_10.i686.rpm mod_perl-devel-2.0.4-12.el6_10.i686.rpm mod_perl-devel-2.0.4-12.el6_10.x86_64.rpm i386 mod_perl-2.0.4-12.el6_10. [More…]

LinuxSecurity.com: An update that fixes two vulnerabilities is now available.

LinuxSecurity.com: Several vulnerabilities were discovered in openafs, an implementation of the distributed filesystem AFS. The Common Vulnerabilities and Exposures project identifies the following problems:

Adwind RAT Scurries By AV Software With New DDE Variant
Google’s Forced Sign-in to Chrome Raises Privacy Red Flags
Malware hits Freelancers at Fiverr and Freelancer.com
Baddies just need one email account with clout to unleash phishing hell
Assessing the Human Element in Cyber Risk Analysis
Thousands of stolen frequent flyer miles of top airlines sold on Dark Web
Tricky DoS Attack Crashes Mozilla Firefox

LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.

LinuxSecurity.com: An update that solves one vulnerability and has two fixes is now available.

LinuxSecurity.com: An update that fixes two vulnerabilities is now available.

LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that solves 6 vulnerabilities and has one errata is now available.

The Occasional Orator Part 2

Public speaking and presenting at conferences can be daunting for the majority of people but by including some subtle tricks, the speaker can deliver a stronger message The post The Occasional Orator Part 2 appeared first on WeLiveSecurity

White House Issues National Cyber Strategy
Independence Blue Cross Breach Exposed 17K Records
Data Manipulation: How Security Pros Can Respond to an Emerging Threat
Bankrupt NCIX customer data resold on Craigslist
Facebook faces sanctions if it drags its feet on data transparency
App developers are STILL allowed to read your Gmails
Police accidentally tweet bookmarks that reveal surveilled groups
Some credential-stuffing botnets don’t care about being noticed any more
iTunes is assigning you a ‘trust score’ based on emails and phone calls
Take this short survey to assess your organization’s threat intelligence maturity
Best Free Online Movie Streaming Sites for 2018

LinuxSecurity.com: Joran Herve discovered that the Okular document viewer was susceptible to directory traversal via malformed .okular files (annotated document archives), which could result in the creation of arbitrary files.

Podcast: Two Billion IoT Devices Still Vulnerable to BlueBorne Bug

LinuxSecurity.com: Two security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code and local information disclosure.

LinuxSecurity.com: Joran Herve discovered that the Okular document viewer was susceptible to directory traversal via malformed .okular files (annotated document archives), which could result in the creation of arbitrary files.

Cyber-Attack Inevitable, Businesses Not Prepared
Operator of VirusTotal Like Malware-Scanning Service Jailed for 14 Years

LinuxSecurity.com: New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues.

LinuxSecurity.com: Luis Merino, Markus Vervier and Eric Sesterhenn discovered that missing input sanitising in the Hylafax fax software could potentially result in the execution of arbitrary code via a malformed fax message.

Hacker gets 14 years jail time for operating Scan4You malware scanning service
The curious sudden rise of free US election ‘net security guardians
Woman Pleads Guilty to DC CCTV Ransomware Blitz
SingHealth data breach reveals several ‘inadequate’ security measures
Virus screener goes down, Intel patches more chips, Pegasus government spying code spreads across globe

LinuxSecurity.com: An update that contains security fixes can now be installed.

LinuxSecurity.com: An update that fixes two vulnerabilities is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that fixes 24 vulnerabilities is now available.

LinuxSecurity.com: An update that fixes two vulnerabilities is now available.

LinuxSecurity.com: An update that contains security fixes can now be installed.

LinuxSecurity.com: An update that contains security fixes can now be installed.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

security update

Hackers steal $60 million from Japan’s Zaif cryptocurrency exchange
Critical Vulnerability Found in Cisco Video Surveillance Manager
Twitter: Don’t panic, but we may have leaked your DMs to rando devs
Couldn’t give a fsck about patching? Well, that’s your WordPress website pwned, then

security update

Twitter Flaw Exposed Direct Messages To External Developers
Delphi Packer Looks for Human Behavior Before Deploying Payload
Apple’s dropping Back To My Mac Remote Access. Here’s an Alternative, Currently Discounted.
Unpatched Microsoft Zero-Day in JET Allows Remote Code-Execution
Enigma message crack honours pioneering Polish codebreakers
Hackers target Newegg with “sophisticated malware”; steal credit card data
California man may get 6 months in prison for uploading Deadpool on Facebook
Scottish brewery recovers from ransomware attack
Bitcoin flaw could have allowed dreaded 51% takeover
Top 3 benefits of company open source programs
Attackers crack Newegg’s defenses, slurp customers’ credit card data

The skimmer, injected into the store’s payment page, harvested credit-card details from the store’s online customers for more than a month The post Attackers crack Newegg’s defenses, slurp customers’ credit card data appeared first on WeLiveSecurity

Australian encryption Bill raises bar for outrageous legislation: Comms Alliance
Security Vulnerability in ESS ExpressVote Touchscreen Voting Computer
Equifax faces ?500,000 fine in the UK over massive data breach
Warning issued as Netflix subscribers hit by phishing attack
Never mind Brexit. UK must fling more £billions at nuke subs, say MPs