Menu

Category Archives: All

Everything

LinuxSecurity.com: Update to ansible 2.2.1. Fixes several CVEs as well as a number of otherbugfixes. See: https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.mdfor full changes.

LinuxSecurity.com: Update to ansible 2.2.1. Fixes several CVEs as well as a number of otherbugfixes. See: https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.mdfor full changes.

Clock’s ticking for MD5-signed JAR files, says Oracle
Firefox flags Web of Trust add-on as suspicious, blocks by default
News in brief: real Q is a woman; Trump ‘still using Android phone’; Apple to join AI group
Voyeur adult website hacked; 180k members data leaked
Uber.com Backup Bug Nets Researcher $9K
How one man could have deleted any public Facebook video
Raspberry Pi to get a boost in brain power thanks to Google’s AI tools
Google to Block .js Attachments in Gmail
President Trump tweets from insecure Android, security boffins roll eyes
High-Severity Chrome Vulnerabilities Earn Researcher $32K in Rewards
Dark Web’ Largest Trading Platform AlphaBay Hacked; 200k Messages Leaked
Desperately seeking cybersecurity skills

Cybercrime is victimizing US companies and consumers, but a gap in cybersecurity skills presents a problem for the federal government. ESET’s Stephen Cobb investigates. The post Desperately seeking cybersecurity skills appeared first on WeLiveSecurity

In a bad mood? You might not be allowed to log on
10 questions to ask IDaaS vendors before you buy
In real life, Q is a woman! Head of MI6 calls for more female techies at SIS
Half of Ransomware Victims Pay Criminals’ Demands to Recover Data
Google pressure on devs to fix security issues bears fruit
Firefox 51 delivers a mix of security, performance and reliability tweaks, implements FLAC audio sup
Self-protection is key to Linux kernel security

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact [More…]

Disk-nuking malware takes out Saudi Arabian gear. Yeah, wipe that smirk off your face, Iran
‘Celebgate’ nudes thief gets just nine months of porridge
Get 72% off NordVPN Virtual Private Network Service For a Limited Time – Deal Alert
Cisco WebEx code execution hole – what you need to know
HummingWhale Malware infected Android Apps Downloaded Millions of Times
Trump lieutenants ‘use private email’ for govt work… but who’d make a big deal out of that?
Hacker Selling 126 Million Cell Phone Details of “U.S. Cellular” Customers
Shamoon malware revisiting Saudi Arabia; cyberinfrastructure on high alert
Default Credentials Found in Schneider Electric Wonderware Historian
Firefox 51 Begins Warning Users of Insecure HTTP Connections
Linux nasty kicks weak, hacked gadgets when they’re already down
News in brief: 1984 tops bestseller charts; Alexa pleases Trekkies; HP extends battery recall
Penguins force-fed root: Cruel security flaw found in systemd v228
Kaspersky cybercrime investigator cuffed in Russian treason probe

To address the need for application security in the digital transformation era, F5 is releasing a new host of products and services. “The digital transformation has really changed security as a whole,” says Preston Hogue, Director of Security Marketing and Competitive Intelligence. What he means is that everything—EVERYTHING—is moving to the cloud. Think about the […]

Court rejects US government appeal in case of Microsoft overseas email
Lloyds Banking Group hit with distributed denial of service attack

Lloyds Banking Group fell victim to an attempted cyberattack earlier this month, which saw cybercriminals attempt to crash the online banking service over a two day period. The post Lloyds Banking Group hit with distributed denial of service attack appeared first on WeLiveSecurity

Verizon’s $4.8bn acquisition of Yahoo put on hold after breach revelations
China clamps down tighter on web use with new VPN ban
41% off Netgear Arlo Security System Wireless HD Camera, Indoor/Outdoor, Night Vision – Deal Alert
It’s that time of the year again: Texas school district blabs staff tax documents to phishers
Corporations at risk of malware attack via Cisco’s WebEx Chrome extension
Cisco scrambling to fix a remote code execution problem in WebEx
RoT: Ransomware of Things

Could the Internet of Things spark the Ransomware of Things? ESET’s Stephen Cobb examines how ransomware and jackware are evolving. The post RoT: Ransomware of Things appeared first on WeLiveSecurity

Twitter’s Phantom Menace: a Star Wars botnet
Charger Mobile Ransomware Removed from Google Play
Charger Android ransomware spread via the official Google Play app store
Yahoo faces SEC probe into its two record-breaking data breaches

The US Securities and Exchange Commission is looking into whether Yahoo could have been quicker to tell investors about two record-breaking data breaches. The post Yahoo faces SEC probe into its two record-breaking data breaches appeared first on WeLiveSecurity

Looking for love? Don’t get caught out by the growing number of scammers
This new ransomware ‘bluff’ trick is costing victims big, even though their files are never really i
InfoWorld’s 2017 Technology of the Year Award winners
Identify and escape: A two-part ransomware plan
Technology of the Year 2017: The best hardware, software, and cloud services
Boffins break Samsung Galaxies with one SMS carrying WAP crap

LinuxSecurity.com: Multiple vulnerabilities have been found in Oracle’s JRE and JDK software suites, the worst of which may allow execution of arbitrary code

LinuxSecurity.com: Multiple vulnerabilities have been found in X.Org X Server, the worst of which may allow authenticated attackers to read from or send information to arbitrary X11 clients.

Firefox bares teeth, attacks sites that collect personal data
Western Digital fixes remote execution bug in My Cloud Mirror
Human bot hybrid finds LinkedIn email, phone number-filching holes
Graham Cluley nominated for most entertaining security blog. Please vote!
Trump’s FBI boss, Attorney General picks reckon your encryption’s getting backdoored
Internet gang claims it caused Lloyds Bank outage via a DDoS attack
Hacker Selling 1 Billion user accounts stolen from Chinese Internet Giants
US govt can’t stop Microsoft taking its Irish email seizure fight to the Supreme Court
SpyNote RAT Now Disguised As Netflix App

LinuxSecurity.com: Security fix for CVE-2016-2120, CVE-2016-7068, CVE-2016-7072, CVE-2016-7073,CVE-2016-7074

LinuxSecurity.com: Security fix for console video game music emu vulnerability in the fullyoptional audacious-plugins-exotic subpackage: CVE-2016-9957, CVE-2016-9958,CVE-2016-9959, CVE-2016-9960, CVE-2016-9961

LinuxSecurity.com: Security fix for CVE-2016-6814

LinuxSecurity.com: Update to 0.8.0-6.git97f52c1

LinuxSecurity.com: Rebase to latest upstream gitrev 20161120

News in brief: DuckDuckGo takes off; Sundance hit by cyberattack; Oz moots biometric arrivals

LinuxSecurity.com: Update from 3.8.1 to 3.8.2. Also fixes console video game music emuvulnerability in the fully optional audacious-plugins-exotic subpackage:CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961

LinuxSecurity.com: Update from 3.8.1 to 3.8.2. Also fixes console video game music emuvulnerability in the fully optional audacious-plugins-exotic subpackage:CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961

LinuxSecurity.com: Security fix for CVE-2016-2120, CVE-2016-7068, CVE-2016-7072, CVE-2016-7073,CVE-2016-7074

LinuxSecurity.com: Fix validation logic in the base consumer The base consumer is intended to onlyderive its validation switch from the on-disk configuration if the child classdoesn’t override the validate_signatures switch. There was a bug here where thedefault value provided in the base class made it appear as if *all* childconsumers had turned *off* validation, which […]

LinuxSecurity.com: This update fixes a security problem with the EDE package.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Android Pattern Lock ‘can be cracked in five attempts’ – here’s what to do
AG Nominee Backs Law Enforcement’s Ability to ‘Overcome’ Encryption
St. Louis Public Library Recovers from Ransomware Attack
UK courts experiencing surge in cyber-crime case load
When is a blockchain not a blockchain?
Study: 62% of security pros don’t know where their sensitive data is
Penguins force-fed root. Cruel flaw found in systemd v228
Yahoo sale to Verizon delayed, following revelation of massive security breaches
DDoSing has evolved in the vacuum left by IoT’s total absence of security
Update your Mac and iPhone – and help stop unwanted pwnage
Cisco Patches Critical Flaw in WebEx Chrome Plugin
Apple quashes bugs in iOS, MacOS, and Safari
The essential guide to anti-malware tools
Pompeo sworn in as CIA chief amid opposition from surveillance critics
Apps Carrying HummingBad Variant Booted From Google Play
As attacks rise, we ask: how secure is your Hadoop installation?
World’s most popular email server praised as ‘near-impenetrable’
I don’t care what your eyeballs tell you. Alternative fact is, we’ve locked up your files
Why Linux Installers Need to Add Security Features
Keeping Linux devices secure with rigorous long-term maintenance