Menu

Category Archives: All

Everything

Ransomware scum infect cancer non-profit
SOHOpeless routers offer hard-coded credentials and command injection bugs

LinuxSecurity.com: An update for runc is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…]

LinuxSecurity.com: An update for docker is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: An update for docker-latest is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact [More…]

Kill it with fire: US-CERT urges admins to firewall off Windows SMB
Thanks to Obama: Chelsea Manning will be out in May 2017
New RCE Flaws Found in Samsung Smartcam
Gmail Phishing Scam Stealing Credentials Through Infected Attachment
Vulnerabilities Leave iTunes, App Store Open to Script Injection
Sensitive access tokens and keys found in hundreds of Android apps

LinuxSecurity.com: NVIDIA graphics drivers could be made to crash under certain conditions.

News in brief: flying cars take off; terrible passwords; Facebook picks Paris incubator campus
The unseemly world of Darkweb marketplaces

LinuxSecurity.com: Multiple vulnerabilities have been found in libxml2, the worst of which could lead to the execution of arbitrary code.

LinuxSecurity.com: Security fix for CVE-2016-9131, CVE-2016-9147, CVE-2016-9444

LinuxSecurity.com: Security fix for CVE-2016-9131, CVE-2016-9147, CVE-2016-9444

LinuxSecurity.com: This update avoids a malicious repository writing to files outside the localstorage root.

LinuxSecurity.com: An update for bind is now available for Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: An update for bind97 is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…]

Terrorists are winning the digital arms race
Router Vulnerabilities Disclosed in July Remain Unpatched
Italian pair arrested over alleged hack of cardinals and masons
Credential-stuffers enjoy up to 2% attack success rate – report
Mega UK hospitals trust Barts says IT borkage was due to trojan – not ransomware
SHA-1 End Times Have Arrived
Advice for Trump: think about your security infrastructure
Why WhatsApp’s ‘Backdoor’ Isn’t a Backdoor
WhatApp scams spread widely thanks to trust between friends
It makes good security sense to change Alexa’s name – here’s how
BBC launches probe into leak of Russian-dubbed Sherlock finale
Andrew Macpherson on Intelligence Gathering with Maltego
Facebook took two weeks to remove video of 12-year-old girl that livestreamed her suicide
Ransomware: Should you pay up?

ESET’s Cameron Camp provides valuable insight into what you should do if you’re a victim of ransomware. The post Ransomware: Should you pay up? appeared first on WeLiveSecurity

The war for cybersecurity talent hits the Hill
Ransomware brutes smacked 1 in 3 NHS trusts last year
Google ventures into public key encryption
Got microservices? You'd better secure them

One of the toughest parts of being a computer security pro is trying to figure out what to hang your career on every two to five years. Which new buzzwords will stick to become a new paradigms, and which will disappear into the ether? Keeping up with the latest and greatest enterprise tech is part […]

Is your IP security camera making you less secure?
Advice to Donald Trump: think before you tweet
Devs reverse-engineer 16,000 Android apps, find secrets and keys to AWS accounts
Dodgy Dutch developer built backdoors into thousands of sites

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: Multiple vulnerabilities have been found in file, the worst of which could allow remote attackers to execute arbitrary code.

LinuxSecurity.com: A buffer overflow in MiniUPnPc might allow remote attackers to cause a Denial of Service condition.

911 app is a joke, says security researcher Randy Westergren
Dovecot mailserver graded ‘nearly impenetrable’
Top tips (not including anti-virus) for protecting your Android from malware

Risk Level: Very Low. Type: Trojan.

LinuxSecurity.com: A buffer overflow in xdelta might allow remote attackers to execute arbitrary code.

LinuxSecurity.com: A buffer overflow in VLC might allow remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code.

Researchers Expose Fake Android Apps Stealing Instagram Passwords

Type: Vulnerability. Microsoft Identity Model Extensions is prone to a privilege-escalation vulnerability; fixes are available.

News in brief: Snowden supporters petition Obama; iOS Onion browser now free; bank bans WhatsApp
I love podcasts so much, I took a deep breath and made one…
Ukraine power outages ‘the work of cyberattackers’, warn experts
White House Approves New Rules for Sharing of Raw Intelligence Data
Spora ransomware goes freemium with four different payment options
Botnet of things: Samsung SmartCams vulnerable to hackers
Invest in encryption and get it right

The heavy ICO fine against Royal & Sun Alliance Insurance PLC has highlighted a shortcoming with encryption. The post Invest in encryption and get it right appeared first on WeLiveSecurity

WhatsApp ‘backdoor’ turns out to be known design feature
Facebook’s new public Wi-Fi locator is raising privacy concerns
Trump picks hackable Rudy Giuliani as cybersecurity advisor
Free IoT Vulnerability Scanner Hunts Enterprise Threats
The CSO guide to top security conferences
IHOP’s Twitter account hacked; retweets a tweet against Hillary clinton
Wandera has uncovered severe mobile data exposures that affect a high proportion of enterprises. Try it now for free.
Obama administration signs off on wider data-sharing for NSA
French spies warn politicians of hack risk as election draws near
Google Cloud Platform finally offers key management service
Windows 10 Anniversary Update crushed exploits without need of patches
Google reveals its servers all contain custom security silicon
Brilliant phishing attack probes sent mail, sends fake attachments
Just give up: 123456 is still the world’s most popular password

Risk Level: Very Low. Type: Trojan.

Netflix Users Targeted with yet another sophisticated Phishing Scam
Meet Spora, a ransomware that infects users in good faith – Literally

security update

security update

security update

Student Arrested for Selling Keylogger that Infected thousands of devices
WhatsApp vulnerability could allow Facebook and others to read messages
Facebook users hit with “You are in this video?” malware scam
Just in Time for Trump, the NSA Loosens Its Privacy Rules
First came mass MongoDB ransacking: Now copycat ransoms hit Elasticsearch
Guccifer 2.0, alleged Russian cyberspy, returns to deride U.S.
Suspected NSA tool hackers dump more cyberweapons in farewell
How to set up your Android phone for ultimate privacy
Promising compsci student sold key-logger, infects 16,000 machines, pleads guilty, faces jail
US Marines seek more than a few good men (3,000 men and women, actually) for cyber-war

security update

Playpen child sex abuse archive admin gets 20 years in the Big House

security update

Researchers Warn Against “free internet without Wi-Fi” WhatsApp Scam
Adobe’s Latest Security Patch Installs Chrome Extension to Collect Data
WhatsApp Says ‘Backdoor’ Claim Bogus
Adobe Acrobat Reader DC security update installs Chrome spyware
News in brief: new browser launched; social network closes down; cyberattack on health provider
Google’s Key Transparency Simplifies Public Key Lookups