February 8, 2018
CyberThreat18: 2 days of bughunting, techie chat and code lockdown
February 8, 2018
WordPress users – do an update now, and do it by hand!
February 8, 2018
Smashing Security #064: So just a ‘teeny tiny’ security issue then?
February 8, 2018
Google Expands Play Marketplace Bug Bounty Program
February 7, 2018
LinuxSecurity.com: It was discovered that the webhook validation of Anymail, a Django email backends for multiple ESPs, is prone to a timing attack. A remote attacker can take advantage of this flaw to obtain a WEBHOOK_AUTHORIZATION secret and post arbitrary email tracking events.
February 7, 2018
security update
February 7, 2018
LinuxSecurity.com: A vulnerabilities has been found in the PostgreSQL database system: CVE-2018-1053
February 7, 2018
Type: Vulnerability. Adobe Flash Player is prone to an remote code-execution vulnerability; fixes are available.
February 7, 2018
LinuxSecurity.com: Two vulnerabilities were discovered in Libtasn1, a library to manage ASN.1 structures, allowing a remote attacker to cause a denial of service against an application using the Libtasn1 library.
February 7, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has 17 fixes is now available.
February 7, 2018
LinuxSecurity.com: Security fix for CVE-2017-17969 (from Debian)
February 7, 2018
LinuxSecurity.com: Security fix for CVE-2018-6381
February 7, 2018
LinuxSecurity.com: This update includes a rebase from 8.0.47 to 8.0.49.
February 7, 2018
LinuxSecurity.com: This is a security fix release that fixes a sandbox escape in the flatpak dbus proxy. This issue was found by Gabriel Campana of The Google Security Team. Major changes in 0.10.3 * Fix dbus proxy vulnerability in authentication phase * Make permission handling ignore unknown permissions for forwards compatibility * Removed incorrect error […]
February 7, 2018
Risk Level: Very Low. Type: Trojan.
February 7, 2018
UK-led police operation quashes Luminosity Link RAT
The investigation showed that the tool, which required little technical knowledge to deploy, had over 8,600 users in 78 countries. Victims are believed to be in the thousands. The post UK-led police operation quashes Luminosity Link RAT appeared first on WeLiveSecurity
February 7, 2018
Reddit users, beware its evil twin
February 7, 2018
YouTube Kids hasn’t cleaned up its act
February 7, 2018
LinuxSecurity.com: Security fixes for CVE-2017-17485 and CVE-2018-5968.
February 7, 2018
Alleged Kelihos botmaster and spam king extradited to US
February 7, 2018
Abusing X.509 Digital Certificates for Covert Data Exchange
February 7, 2018
Australian cops to enter kindergartens to teach kids not to cyber
February 7, 2018
Malware Exploiting Spectre, Meltdown Flaws Emerges
February 7, 2018
Beware the looming Google Chrome HTTPS certificate apocalypse!
February 7, 2018
Uber quits GitHub for in-house code after 2016 data breach
February 7, 2018
LinuxSecurity.com: New kernel packages are available for Slackware 14.2 to mitigate the speculative side channel attack known as Spectre variant 2.
February 7, 2018
Web analytics outfit Mixpanel slurped surfers’ passwords
February 7, 2018
LinuxSecurity.com: It was discovered that mpv, a media player, was vulnerable to remote code execution attacks. An attacker could craft a malicious web page that, when used as an argument in mpv, could execute arbitrary code in the host of the mpv user.
February 7, 2018
Who doesn’t like a good mobile game? Especially a free one! They allow you to blow off steam while fine-tuning your skills, competing with others or maybe even winning bragging rights among friends. Free games can be fun to play, yet there are some common-sense guidelines to make sure these apps don’t surprise you with […]
February 7, 2018
Risk Level: Very Low.
February 7, 2018
Risk Level: Very Low. Type: Trojan.
February 7, 2018
Adobe: Two critical Flash security bugs fixed for the price of one
February 6, 2018
Safer Internet Day 2018 [VIDEO]
February 6, 2018
All Ledger hardware wallets vulnerable to man in the middle attack
February 6, 2018
Uber and Waymo clash in court over driverless technology
February 6, 2018
Firefox 59’s privacy mode plugs leaky referrers
February 6, 2018
MacUpdate Hacked to Distribute Mac Cryptocurrency Miner
February 6, 2018
One year later, the UK’s Active Cyber Defence is seeing good results
February 6, 2018
Keeping kids safe online – trying to practice what I preach
February 6, 2018
FBI warns of email scams claiming to be from Bureau
Another template attempts to scare, rather than thrill, the recipients. Upon learning that “your IP address and other identifying information were used to commit multiple online crimes”, the mark is urged to contact the sender by phone immediately. The post FBI warns of email scams claiming to be from Bureau appeared first on WeLiveSecurity
February 6, 2018
Spectre and Meltdown | Salted Hash Ep 17
February 6, 2018
How I Got Paid $0 From the Uber Security Bug Bounty
February 6, 2018
Open source turns 20 years old, looks to attract normal people
February 6, 2018
Think you have a tracker on your phone? Learn how to make your device more resilient
While it certainly doesn’t hurt to ask for help from local law enforcement, know that even major cities may not have the expertise or the bandwidth to investigate compromised mobile devices. The most important objective is to take steps to make sure you’re safe. Ask for help, but do not wait for others to help […]
February 6, 2018
LinuxSecurity.com: ClamAV 0.99.3 recommended for all ClamAV users. Please see details below: 1. ClamAV UAF (use-after-free) Vulnerabilities (CVE-2017-12374) ————————————————————— The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could
February 6, 2018
LinuxSecurity.com: This is a security fix release that fixes a sandbox escape in the flatpak dbus proxy. This issue was found by Gabriel Campana of The Google Security Team. Major changes in 0.10.3 * Fix dbus proxy vulnerability in authentication phase * Make permission handling ignore unknown permissions for forwards compatibility * Removed incorrect error […]
February 6, 2018
LinuxSecurity.com: Security fix for CVE-2017-17969 (from Debian)
February 6, 2018
Safer Internet Day: 3 things your social networks can do for you
February 6, 2018
Safer Internet Day: 3 things you can do for your social networks
February 6, 2018
X.509 metadata can carry information through the firewall
February 6, 2018
Grammarly user? Patch now to stop crooks stealing all your data…
February 6, 2018
Grammarly Patches Chrome Extension Bug That Exposed Users’ Docs
February 5, 2018
Authorities shut down Luminosity RAT used by buyers in 78 countries
February 5, 2018
security update
February 5, 2018
Covert Data Channel in TLS Dodges Network Perimeter Protection
February 5, 2018
New Monero Crypto Mining Botnet Leverages Android Debugging Tool
February 5, 2018
LinuxSecurity.com: It was discovered that an XHR/AJAX call did not properly encode user input in the “dokuwiki” wiki platform. This resulted in a reflected file download vulnerability.
February 5, 2018
Risk Level: Very Low. Type: Trojan.
February 5, 2018
Risk Level: Very Low. Type: Trojan.
February 5, 2018
Buying Bitcoin on your credit card? Not any more…
February 5, 2018
LinuxSecurity.com: An update that solves one vulnerability and has two fixes is now available.
February 5, 2018
LinuxSecurity.com: An update that fixes 11 vulnerabilities is now available.
February 5, 2018
What online sex toys can teach you about secure coding
February 5, 2018
Accused Brit hacker Lauri Love will NOT be extradited to America
February 5, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 5, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 5, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 5, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 5, 2018
Vulnerabilities reached a historic peak in 2017
In 2017, the number of vulnerabilities smashed records set in previous years. According to CVE Details, more than 14,600 vulnerabilities were reported in 2017, compared to 6447 in 2016. The post Vulnerabilities reached a historic peak in 2017 appeared first on WeLiveSecurity
February 5, 2018
Russian-monitoring Shetlands radar station was nearly sold off
February 5, 2018
Knock, knock. Who’s there? Another Amazon Key door-lock hack
February 5, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
February 5, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
February 5, 2018
LinuxSecurity.com: ‘landave’ discovered a heap-based buffer overflow vulnerability in the NCompress::NShrink::CDecoder::CodeReal method in p7zip, a 7zr file archiver with high compression ratio. A remote attacker can take advantage of this flaw to cause a denial-of-service or, potentially the
February 4, 2018