Menu

Category Archives: All

Everything

Stories From Two Years in an IoT Honeypot
How secure is your supply chain?
Exploit Kit Activity Quiets, But Is Far From Silent

When you meet Gary Hayslip, don’t let his calm demeanor fool you — underneath is a deep passion for and understanding of the “Internet of Everything” or IoE. To say his 25-year career in information security is impressive would be an understatement. From serving as Command Information Security Officer in the United States Navy to […]

Inmates Caught Hacking into Ohio Correctional Facility Network System

LinuxSecurity.com: New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…]

Type: Vulnerability. libjpeg and libjpeg-turbo libraries are prone to a memory-corruption vulnerability; fixes are available.

New Linux SSH server shows off Golang’s infrastructure power
FDA Demands St. Jude Take Action on Medical Device Security
Microsoft’s critical Windows and Office patches present a panoply of problems

LinuxSecurity.com:

LinuxSecurity.com:

LinuxSecurity.com:

LinuxSecurity.com:

LinuxSecurity.com:

LinuxSecurity.com:

LinuxSecurity.com: An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…]

LinuxSecurity.com: An update for libreoffice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…]

LinuxSecurity.com: An update for tomcat is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…]

LinuxSecurity.com: An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…]

LinuxSecurity.com: An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com:

DDoS attacks abusing exposed LDAP servers on the rise
14% off APC 11-Outlet Surge Protector with USB Charging Ports and SurgeArrest – Deal Alert
Your AGA ovens can be hacked; turned on and off remotely because IoT
‘High Risk’ Zero Day Leaves 200,000 Magento Merchants Vulnerable
Attackers can guess our passcode “just from the way we tilt our phone”
Android malware creators throw up a roadblock to thwart the good guys
Google joins the efforts to halt the spread of fake news
Don’t let hackers ruin your roast! Security flaws found in AGA cooker app
Selling spyware, making millions, breaking sanctions…
Microsoft zero-day vulnerability was being exploited for cyber-espionage
Smartphone sensors offer hackers a way past security PINs
Priorities clash over the call to encrypt the whole internet
Real or virtual currency? Scammers accept both

ESET researchers have discovered and reported scammers stealing PayPal and Paxful credentials disguised as a tool for YouTube monetization, and a bitcoin trading marketplace. The post Real or virtual currency? Scammers accept both appeared first on WeLiveSecurity

Hacked home routers are trying to brute force their way into WordPress websites
Microsoft kills off security bulletins after several stays
Smashing Security #016: Wonga wronga!

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Netflix’s HTTPS Update Can’t Combat Passive Traffic Analysis Attacks

security update

Hackers Cloning Popular Android Apps to Infect Users with Malware
Phone Hack Uses Sensors To Steal PINs
Shadow Brokers dump contained Solaris hacking tools
Office Zero Day Delivering FINSPY Spyware to Victims in Russia
Microsoft Word exploit linked to cyberspying in Ukraine conflict

LinuxSecurity.com: Security Report Summary

News in brief: NATO cyberthreat centre launches; Yahoo ‘hacker’ denied bail; Samsung delays AI assistant

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low.

Risk Level: Very Low. Type: Trojan.

New tech allows researchers to bypass fingerprint scanner on smartphone
Internet Society: Encryption is key to growing world economy

The Internet Society says that current perceptions of data encryption are misguided and need to change for the sake of the digital economy. The post Internet Society: Encryption is key to growing world economy appeared first on WeLiveSecurity

For a while the infamous Mirai botnet could have exploited your IoT devices to mine Bitcoins
Court to force adult site to expose ‘pirating’ users
SAP Updates Two-Year-Old Patch for TREX Vulnerability
Low fines for charities misusing donors’ data was ‘a masterstroke’
Microsoft fixes 45 flaws, including three actively exploited vulnerabilities
Determining your risk
Malware, Sir? Jenkins ‘software butler’ tool gets many security fixes
Inmates hid self-built PCs in the ceiling and connected them to prison network
Don’t buy the elixir of youth: Machine learning is not magic

There is no magic in machine learning. It’s a field of computer science that gives computers the ability to find patterns in huge amounts of data. The post Don’t buy the elixir of youth: Machine learning is not magic appeared first on WeLiveSecurity

Google boosts verification after wave of Maps fake listings fraud
Insider hacks Marriott hotel reservation system; slashes rates up to 95%
Mark Shuttleworth says some free software folk are ‘deeply anti-social’ and ‘love to hate’
Microsoft patches Word zero-day vulnerability being actively exploited in attacks
Microsoft Patches Three Vulnerabilities Under Attack
Fortinet upgrades for better cloud, SD-WAN protection
Microsoft patches Word zero-day booby-trap exploit

security update

FBI Kills Kelihos Botnet after Russian Hacker Arrested in Spain
Adobe Patches 59 Vulnerabilities Across Flash, Reader, Photoshop
Microsoft Patches Word Zero-Day Spreading Dridex Malware

LinuxSecurity.com: Multiple vulnerabilities have been found in X.Org server and libraries, the worse of which allowing local attackers to execute arbitrary code.

LinuxSecurity.com: New vim packages are available for Slackware 14.0 and 14.1 to fix a security issue. [More Info…]

LinuxSecurity.com: Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in QEMU, the worst of which could the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition.

LinuxSecurity.com: Security Report Summary

News in brief: Macron vows encryption crackdown; mobile calls on planes ruled out; AI wins at poker
Triple malware threat delivered by USPS-themed spam
Spammer’s Arrest Puts End to Kelihos Botnet
Graham Cluley speaking at the Foursys SecureTour, up and down the UK
DNS record will help prevent unauthorized SSL certificates
Attackers using a Word zero-day to spread malware
Third-Party Sellers From Amazon Hacked by Cyber Criminals
Nothing is certain except death, taxes – and tax scams, phishing and ransomware
Pwned at the factory: attackers think outside the box
Tools Used by Lamberts APT Found in Vault 7 Dumps
Unsecured database exposed diabetics’ sensitive data
Rollback of FCC privacy requirements could have broad repercussions
Fighting post-truth with reality in cybersecurity

Welcome to the beginning of a new series of short articles focused on the currents state of AI, all the ins and outs of machine learning, and how it affects cybersecurity. The post Fighting post-truth with reality in cybersecurity appeared first on WeLiveSecurity

CIA tools exposed by Wikileaks linked to hacking across 16 countries
spectrology – Basic Audio Steganography Tool
Smartphone sensors ‘can reveal PINs and passwords’

A smartphone’s internal sensors may provide cybercriminals with enough information to be able to guess a user PINs and passwords, according to new research by Newcastle University in the UK. The post Smartphone sensors ‘can reveal PINs and passwords’ appeared first on WeLiveSecurity

Top tip for botnet overlords: Don’t vacation in countries that can extradite you to the United States
US dismantles Kelihos botnet after Russian hacker’s arrest