March 2, 2018
GitHub knocked briefly offline by biggest DDoS attack ever
At its peak, inbound traffic reached a staggering 1.35 terabits per second (Tbps), outflanking the previously record-setting assault of 1 Tbps at French web hosting provider OVH in September 2016. The post GitHub knocked briefly offline by biggest DDoS attack ever appeared first on WeLiveSecurity
March 2, 2018
Chi*a ce*sors the letter ‘N’ from the i*ter*et for a day
March 2, 2018
The rise of AI needs to be controlled, report warns
The experts urge policy-makers to work closely with technical researchers, computer scientists and the cybersecurity community to investigate, understand and prepare for possible malicious uses of AI. The post The rise of AI needs to be controlled, report warns appeared first on WeLiveSecurity
March 2, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in SimpleSAMLphp, a framework for authentication, primarily via the SAML protocol. CVE-2016-9814 & CVE-2016-9955
March 2, 2018
Can emojis save you from a terrible password?
March 2, 2018
Don’t fall for fake iTunes and App Store messages
March 2, 2018
How to start analyzing the security of your IoT devices
The big challenge with IoT devices is that they are all different: Each manufacturer has its own firmware, uses different protocols, and designs its own architecture. So, the first step before carrying out any analysis is to understand the architecture, find out what components are involved, and how they interact and communicate among themselves. The […]
March 2, 2018
Train to become an expert cyber crime fighter
March 2, 2018
The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. Thanatos Ransomware Causing Major Damage for Victims A new ransomware variant has recently appeared and is proving […]
March 2, 2018
Github hit by 1.35 Tbps DDoS attack; the largest ever
March 2, 2018
security update
March 2, 2018
LinuxSecurity.com: New ntp packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
March 1, 2018
LinuxSecurity.com: New dhcp packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues.
March 1, 2018
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
March 1, 2018
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
March 1, 2018
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
March 1, 2018
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
March 1, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 1, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 1, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 1, 2018
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
March 1, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 1, 2018
Sophisticated RedDrop Malware Targets Android Phones
March 1, 2018
LinuxSecurity.com: An update for quagga is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 1, 2018
LinuxSecurity.com: This is the One-Year notification for the retirement of Red Hat Enterprise Linux 6.4 Advanced Mission Critical (AMC). This notification applies only to those customers subscribed to the Advanced Mission Critical (AMC) channel for Red Hat Enterprise Linux 6.4.
March 1, 2018
LinuxSecurity.com: – Update to 2.7.0 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.7.0-2.1.10-and-1.3.22-released Security Advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security- advisory-2018-01
March 1, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 1, 2018
Smashing Security #067: Cyber stalking and gun control
March 1, 2018
Mobile World Congress: Introducing 5G
If we look back at previous incarnations of mobile networks, 1G, 2G and so on, there have been major changes to the technology. The next generation, 5G, delivers, greater speed and lower latency, but also has the advantage of being able to connect many more devices concurrently. The post Mobile World Congress: Introducing 5G appeared […]
March 1, 2018
27% of under-18s have been sexted, and it’s on the rise
March 1, 2018
Why Blockchain Will Serve New IT Purposes in 2018
March 1, 2018
Major reform of cybersecurity policies in France
This document, which is described by its authors as a “real white paper on cyber-defense”, is divided into three parts, followed by approximately 20 priority recommendations summarizing the central elements of the document. The post Major reform of cybersecurity policies in France appeared first on WeLiveSecurity
March 1, 2018
LinuxSecurity.com: An update for rh-dotnet20-dotnet, rh-dotnetcore10-dotnetcore, and rh-dotnetcore11-dotnetcore is now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact
March 1, 2018
LinuxSecurity.com: Kelby Ludwig and Scott Cantor discovered that the Shibboleth service provider is vulnerable to impersonation attacks and information disclosure due to incorrect XML parsing. For additional details please refer to the upstream advisory at
March 1, 2018
In the past, security awareness training for user education—i.e. empowering users to make more savvy IT decisions in their daily routines—was considered a “nice to have,” not a necessity. The decision to adopt user education was typically passed over because of budget, lack of in-house expertise, and the general lack of availability of high-quality, low-cost, […]
February 28, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
February 28, 2018
Unprotected AWS Bucket Exposes 50.4 GB of Financial Giant’s Data
February 28, 2018
LinuxSecurity.com: It was discovered that the Net::FTP module did not properly process filenames in combination with certain operations. A remote attacker could exploit this flaw to execute arbitrary commands by setting up a malicious FTP server and tricking a user or Ruby application into downloading files with specially crafted names using the Net::FTP module. (CVE-2017-17405) […]
February 28, 2018
LinuxSecurity.com: quagga: Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary code (CVE-2018-5379) SL7 x86_64 quagga-0.99.22.4-5.el7_4.i686.rpm quagga-0.99.22.4-5.el7_4.x86_64.rpm quagga-debuginfo-0.99.22.4-5.el7_4.i686.rpm quagga-debuginfo-0.99.22.4-5.el7_4.x86_64.rpm quagga-contrib-0.99.22.4-5.el7_4.x86_64. [More…]
February 28, 2018
Misconfigured Memcached Servers Abused to Amplify DDoS Attacks
February 28, 2018
security update
February 28, 2018
security update
February 28, 2018
security update
February 28, 2018
LinuxSecurity.com: An update for ruby is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 28, 2018
LinuxSecurity.com: create a separate user for dnsmasq.
February 28, 2018
LinuxSecurity.com: The textbook ElGamal implementation is not secure. PyCrypto and some other implementations use the wrong algorithm, which may lead to some information disclosure simply by looking at the encrypted text. For a full description, see https://github.com/dlitz/pycrypto/issues/253 This update includes a fix for this problem backported from pycryptodome.
February 28, 2018
LinuxSecurity.com: Use default RPM build flags and configure parameters (#1539097) Remove group writable bit from some config files (#1528445)
February 28, 2018
If any phone can be hacked, should we give up on security? [VIDEO]
February 28, 2018
New Android malware record voice calls for extortion & blackmailing
February 28, 2018
Irish eyes are sighing: Data protection office notes olagoanin’* up 79%
February 28, 2018
Intel Releases Updated Spectre Fixes For Broadwell and Haswell Chips
February 28, 2018
Let’s talk about PCI-DSS
February 28, 2018
Got that itchy GandCrab feeling? Ransomware decryptor offers relief
February 28, 2018
LinuxSecurity.com: An update is now available for CloudForms Management Engine 5.8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 28, 2018
Researchers unveil Veil to make ‘private browsing more private’
The blinding server randomly adds some nonsense code to every webpage. This ‘code obfuscation’, according to the academics, has no effect on what the actual page looks like, but it drastically changes the appearance of the underlying source file. The post Researchers unveil Veil to make ‘private browsing more private’ appeared first on WeLiveSecurity
February 28, 2018
ISIS recruiter caught by Facebook screenshot
February 28, 2018
Making private browsing more private
February 28, 2018
Apple co-founder Steve Wozniak scammed by Bitcoin fraudster
February 28, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0350
February 28, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0349
February 28, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0349
February 28, 2018
Cryptocurrency scams on Android: do you know what to watch out for?
The recent rise in cryptocurrency scams appearing on the Android platform in disguise has shown that such incidents are not exclusive to PCs and also highlight the importance of knowing what to look out for so you do not unintentionally take part. The post Cryptocurrency scams on Android: do you know what to watch out […]
February 28, 2018
Dutch name authority: DNSSEC validation errors can be eliminated
February 28, 2018
LinuxSecurity.com: The package mbedtls before version 2.7.0-1 is vulnerable to arbitrary code execution.
February 28, 2018
Popular cache utility exploited for massive reflected DoS attacks
February 28, 2018
Intel gives Broadwells and Haswells their Meltdown medicine
February 28, 2018
Phone-cracking firm advertises that it can unlock any iPhone
February 28, 2018
NSA boss: Trump won’t pull trigger for Russia election hack retaliation
February 27, 2018
Massive Malspam Campaign Targets Unpatched Systems
February 27, 2018
iTunes will no longer work on old PCs & 1st Generation Apple TV
February 27, 2018
LinuxSecurity.com: An update that solves 9 vulnerabilities and has 40 fixes is now available.
February 27, 2018