Menu

Category Archives: All

Everything

LinuxSecurity.com: New php packages are available for Slackware 14.0, 14.1, and -current to fix security issues. [More Info…]

LinuxSecurity.com: New openssl packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. [More Info…]

LinuxSecurity.com: New mozilla-firefox packages are available for Slackware 14.1 and -current to fix security issues. [More Info…]

LinuxSecurity.com: Prosody 0.9.10 ============== A summary of changes in this release: Security——– * mod_dialback: Adopt key generation algorithm from XEP-0185, toprevent impersonation attacks (CVE-2016-0756) Fixes and improvements———————- * Startup: Open /dev/urandom read-only, to fix afailure to start on some systems (fixes #585) * Networking: Improve handling ofthe ‘select’ network backend running out of file descriptors […]

security update

Box makes it easier for businesses to control encryption of cloud data
A huge X-ray system is scanning entire trucks at Super Bowl 50

Threat Intelligence has become common throughout the cyber security landscape used in traditional information technology platforms from next generation firewalls, application load balancers, SIEM and other threat monitoring and prevention tools. With the pervasive growth of IoT initiatives and concerns around how to protect operational infrastructures from malicious actors an understanding of how existing threat […]

Dell is stepping in to protect the boot layer of PCs, tablets
Encryption 101: What is it? When should I use it?

More than perhaps any other security topic, encryption really seems to perplex a lot of people. So, let’s take a closer look – from basics to best practice. The post Encryption 101: What is it? When should I use it? appeared first on We Live Security.

Facebook at 12: Bigger, better and securer

In recognition of Facebook’s 12th birthday and its 1.2 billion active users who still enjoy using it, a timely guide on how to keep your account secure. The post Facebook at 12: Bigger, better and securer appeared first on We Live Security.

Nuclear secrets spear-phisher pleads guilty
What is… Tor? (Sophos Blog presents)
Brazilian companies receive more than 40,000 spam emails in infostealer campaign
Spam campaign targets Portuguese-speaking firms in Brazil and other regions to deliver malware and steal sensitive data.Read More
Google plans to fight extremist propaganda with AdWords
New security measures to protect EU data flows to the US

The European Commission and the US have agreed on a landmark new deal that will seek to boost the security of ‘transatlantic data flows’, it has been revealed The post New security measures to protect EU data flows to the US appeared first on We Live Security.

LinuxSecurity.com: The first serious look at the government’s plans for a new internet surveillance law has demonstrated just how much confusion there still remains about the legislation.

LinuxSecurity.com: One of the benefits of the next-generation Internet protocol known as IPv6 is the enhanced privacy it offers over its IPv4 predecessor. With a staggering 2128 (or about 3.4?1038) theoretical addresses available, its IP pool is immune to the types of systematic scans that criminal hackers and researchers routinely perform to locate vulnerable devices […]

LinuxSecurity.com: An open source network utility used by administrators and security professionals contains a cryptographic weakness so severe that it may have been intentionally created to give attackers a surreptitious way to eavesdrop on protected communications, its developer warned Monday.

LinuxSecurity.com: Websites that rely on the Tor anonymity service to cloak their server address may be leaking their geographic location and other sensitive information thanks to a setting that’s turned on by default in many releases of Apache, the world’s most widely used Web server.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.

Google fixes multiple Wi-Fi flaws, mediaserver bugs in Android

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: Updated kernel packages that fix three security issues, multiple bugs, and one enhancement are now available for Red Hat Enterprise Linux 7.1 Extended Update Support. [More…]

security update

What Is Social Engineering?

Here at Webroot, we take security seriously. With that being said, there is always more that you can do to improve your security and privacy while browsing online. Below is a list of browser plugins that we recommend you check out. Webroot Filtering Extension This one is pretty much a given as we are Webroot. […]

Silk Road bitcoin-stealing Secret Service agent re-arrested
China's next five-year plan offers clues about cyber security targets
Bot fixes buggy code so you don’t have to
Dark web is mostly illegal, say researchers
Startup's security platform uses AI to to learn from human decision making
European firms’ financial departments the target of cyberattacks

Two major cyberattacks have siphoned over $50 million and nearly $80 million from a Belgian bank and an Austrian aircraft parts manufacturer, respectively. They were both victim to a scam known as Business Email Compromise. The post European firms’ financial departments the target of cyberattacks appeared first on We Live Security.

Security flaws not so critical if admin rights are taken away
Mass spammer gets 27 months in the slammer
The battle for Node.js security has only begun
Samsung’s default mobile browser now supports ad blocking

Type: Vulnerability. Microsoft Internet Explorer is prone to a security-bypass vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a security-bypass vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a security-bypass vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to an information disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Oracle's Java plug-in move no surprise, but is JavaWS the answer?

LinuxSecurity.com: Breaking encryption technology used by terrorists and criminals poses a frustrating dilemma for intelligence agencies and, most recently, congressional lawmakers.

LinuxSecurity.com: The NSA is publicly moving away from cryptographic algorithms vulnerable to cryptanalysis using a quantum computer. It just published a FAQ about the process: Q: Is there a quantum resistant public-key algorithm that commercial vendors should adopt?

LinuxSecurity.com: Malwarebytes says it could take three to four weeks to fix security flaws found by Google in its popular anti-malware product .

LinuxSecurity.com: Several security issues were fixed in QEMU.

Where do US presidential candidates stand on privacy and surveillance?

LinuxSecurity.com: There is a big problem brewing in the Internet. You may have noticed that big attacks that disrupt networks or servers’ ability to deliver traffic, called Distributed Denial of Service (DDoS), are showing up in the news more often. You may not know that, officially, documented attacks are happening at the scale of several […]

LinuxSecurity.com: Security fix for CVE-2016-0738

LinuxSecurity.com: Backport of the patch for CVE-2015-5295

Android has some critical remotely-exploitable security holes. But can you get the patch?

Remote code execution vulnerabilities have been found in the Android operating system, and patches released for Nexus devices. But what about your smartphone? Is there a patch for you, and can you get your hands on it? The post Android has some critical remotely-exploitable security holes. But can you get the patch? appeared first on […]

You need these critical Android updates – but will you get them?
Goodbye and good riddance: Oracle finally ditches Java browser plug-in
Apple’s Siri finally stops sending abortion seekers to adoption centers
Average successful hack nets less than $15,000
Decrypt SSL traffic to detect hidden threats
Police train birds of prey to take out drones
UK council ‘thwarts ransomware attack’

Lincolnshire County Council has successfully thwarted attempts by cybercriminals to extort money out them and brought most of its systems back online, almost one week on from the ransomware attack. The post UK council ‘thwarts ransomware attack’ appeared first on We Live Security.

Latest Nginx updates address three security flaws
Ruby on Rails fixes multiple input validation vulnerabilities
5 steps to make threat intelligence work for you

LinuxSecurity.com: Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 Supplementary. Red Hat Product Security has rated this update as having Critical security [More…]

LinuxSecurity.com: Updated java-1.8.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having Critical security [More…]

LinuxSecurity.com: Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security [More…]

LinuxSecurity.com: Updated java-1.7.1-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 6 and 7 Supplementary. Red Hat Product Security has rated this update as having Critical security [More…]

LinuxSecurity.com: The government’s use of a controversial invasive technology for tracking phones just got a little more controversial.

LinuxSecurity.com: Meet Adam. He’s a mid-level engineer at a mid-level software company in a cookie-cutter California office park. He can code a handful of languages, has a penchant for computer vision and enjoys soccer and skiing. In short, Adam has little to distinguish him from legions of other programmers in the Bay Area.