Menu

Category Archives: All

Everything

Asterisk RTP bug worse than first thought: think intercepted streams

LinuxSecurity.com: This update fixes CVE-2017-12982.

LinuxSecurity.com: Qemu: usb: ohci: infinite loop due to incorrect return value [CVE-2017-9330] (#1457698) Qemu: nbd: segmentation fault due to client non-negotiation [CVE-2017-9524] (#1460173) Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [CVE-2017-10664] (#1466466) Qemu: exec: oob access during dma operation [CVE-2017-11334] (#1471640) revised full fix for XSA-226 (regressed

LinuxSecurity.com: This update fixes CVE-2017-12982.

Stolen 6M Celebrities data from Instagram sold on Dark Web

LinuxSecurity.com: Libidn2 2.0.4 (released 2017-08-30) integer overflow in bidi.c/_isBidi() * Fix integer overflow in puny_decode.c/decode_digit() * Improve docs * Fix idna_free() to idn_free() * Update fuzzer corpora

security update

security update

security update

LinuxSecurity.com: **Version 2.2.5** – 2017-08-30 * **Security** – Double-free in gdImagePngPtr(). **CVE-2017-6362** – Buffer over-read into uninitialized memory. **CVE-2017-7890** * **Fixed** – Fix #109: XBM reading fails with printed error – Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable – Fix #357: 2.2.4: Segfault in test suite – Fix #386:

LinuxSecurity.com: Libidn2 2.0.4 (released 2017-08-30) integer overflow in bidi.c/_isBidi() * Fix integer overflow in puny_decode.c/decode_digit() * Improve docs * Fix idna_free() to idn_free() * Update fuzzer corpora

LinuxSecurity.com: – Update to 2.6.0 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.6.0-2.1.9-and-1.3.21-released Security Advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security- advisory-2017-02

LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available.

LinuxSecurity.com: An update that solves three vulnerabilities and has 5 fixes An update that solves three vulnerabilities and has 5 fixes An update that solves three vulnerabilities and has 5 fixes is now available. is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.

DailyStormer comes back with Albanian domain; gets booted off

From streaming entertainment to social media to our online bank accounts and software, we are inundated every day with the need to create and remember new passwords. In fact, one study revealed that Americans have an average of 130 online accounts registered to a single email address. And what are the chances that those 130 […]

‘HoeflerText’ Popups Target Browsers With RAT and Locky Ransomware
US cops can’t keep license plate data scans secret without reason
Massive Locky Ransomware Strain Hits US with Over 23 Million Emails
News in brief: Call to link encryption to ID; Facebook maps everyone; Mirai ‘blackmailer’ extradited
Massive Locky ransomware campaign sends out 23 million emails in 24 hours
Online file conversion services – why trust them?
Hacker Charged for Crashing Businesses Using Millions of Mirai botnet
Open source or proprietary: how should we secure voting systems?
‘Independent’ gov law reviewer wants users preemptively identified before they’re ‘allowed’ to use encryption
Threatpost News Wrap, September 1, 2017
Ex-cop who won’t decrypt hard drives still in jail indefinitely
No Fix Planned For LabVIEW Bug, Says National Instruments
US Government Site Was Hosting Ransomware
Insecure Office 365 setups could be a ticking time bomb for your business
Blonde girlfriend’s passport let dark-haired man fly from London to Germany
Twitter struggles to deal with the sock-puppet and bot armies
Snoops ‘n’ snitches auditor IPCO gets up and running
Instagram warns users of API bug on heels of nude Bieber photos leak
China’s cybersecurity law grants government ‘unprecedented’ control over foreign tech
Connect at mine free Wi-Fi! I would knew what I is do! I is cafe boss!
WikiLeaks suffer defacement at the hands of OurMine group

WikiLeaks’ whistleblowing website suffered an attack from the group known as OurMine on Thursday The post WikiLeaks suffer defacement at the hands of OurMine group appeared first on WeLiveSecurity

IRS-Themed Ransomware Using Old-School Tactics Over the past week, researchers have discovered a new ransomware variant that attempts to impersonate both the IRS and the FBI, similar to the FBI lockscreen malware that was popular several years ago. By tricking the victim into opening a link to a fake FBI questionnaire, the ransomware is downloaded […]

Asterisk bugs make a right mess of RTP
AT&T customers with Arris modems at risk, claim infosec bods
Robocall scumbags already target Hurricane Harvey victims
Malware writer offers free trojan to hackers … with one small drawback
Instagram hacked; data of top celebrities stolen and traded
Session Hijacking Bug Exposed GitLab Users Private Tokens
When uploading comments to the FCC, you can now include malware
Bugs in Arris Modems Distributed by AT&T Vulnerable to Trivial Attacks
Angelfire: CIA’ Undetectable Implants Infect Windows Boot Sector
Polyinstantiating /tmp and /var/tmp directories
FDA Recalls 465K Pacemakers Tied to MedSec Research
Pacemaker gets firmware update – go and see your doctor
Beware scammers phishing for disaster charity – or anything else
WikiLeaks official website hacked by OurMine hacking group
Instagram confirms hack against high-profile users’ account info
Reflected XSS Bug Patched in Popular WooCommerce WordPress Plugin
Machine learning for malware: what could possibly go wrong?
UK council fined £70k for leaving vulnerable people’s data open to world+dog
Is your email in the latest cache of 711 million pwnd addresses?
Google removes 300 Android apps following DDoS attack

Google has been forced to remove almost 300 apps from its Play Store after learning that apps were being hijacked for DDoS attacks. The post Google removes 300 Android apps following DDoS attack appeared first on WeLiveSecurity

Patchy PCI compliance putting consumer credit card data at risk
People-rating app Sarahah slurps up contacts for feature that doesn’t exist
Mystery surrounds malware attack that forced German state parliament offline
CyberRehab’s mission? To clean up the internet, one ASN block at a time
No razzle-dazzle here! Hackers target Zazzle with run-of-the-mill brute-force attack
More than 700 million email addresses leaked in huge data breach

Huge data breach sees more than 700 million email addresses and passwords leaked publicly thanks to a misconfigured spambot, dubbed ‘Onliner’. The post More than 700 million email addresses leaked in huge data breach appeared first on WeLiveSecurity

ARM’s embedded TLS library fixes man-in-the-middle fiddle
Instagram’s leaky API exposed celebrities’ contact details
Siemens patches one security vuln, leaves folks to block second
465k Pacemakers vulnerable; users must visit doctors for fix

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low.

Risk Level: Very Low. Type: Trojan.

US government: We can jail you indefinitely for not decrypting your data
Intel Confirms Its Much-Loathed ME Feature Has A Kill Switch

security update

Oh, ambassador! You literally are spoiling us: Super-stealthy spyware hits Euro embassy PCs
Turla APT Used WhiteBear Espionage Tools Against Defense Industry, Embassies
New Locky Variant ‘IKARUSdilapidated’ Strikes Again
News in brief: AI writes new GoT book; Google breaks out of the speaker; Cortana and Alexa hook up
Electronics retail giant CeX hacked; data of 2 million customers stolen

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.