LinuxSecurity.com: The package logstash before version 6.6.1-1 is vulnerable to information disclosure.
February 26, 2019
LinuxSecurity.com: The package elasticsearch before version 6.6.1-1 is vulnerable to privilege escalation.
February 26, 2019
LinuxSecurity.com: An update for polkit is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 26, 2019
6 Pieces of Tech Every Office Needs
February 26, 2019
High-Severity SHAREit App Flaws Open Files for the Taking
February 26, 2019
LinuxSecurity.com: GNOME Keyring could be made to expose sensitive information.
February 26, 2019
LinuxSecurity.com: USN-3866-2 introduced a regression in Ghostscript.
February 26, 2019
LinuxSecurity.com: LDB could be made to crash if it received specially crafted network traffic.
February 26, 2019
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
February 26, 2019
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
February 26, 2019
Critical WinRAR Flaw Found Actively Being Exploited
February 26, 2019
Google aims for password-free app and site logins on Android
With FIDO2 certification for Android, Google is setting the stage for password-less app and website sign-ins on a billion devices The post Google aims for password-free app and site logins on Android appeared first on WeLiveSecurity
February 26, 2019
LinuxSecurity.com: ultiple vulnerabilities have been discovered in liblivemedia, the LIVE555 RTSP server library: CVE-2019-6256
February 26, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 26, 2019
LinuxSecurity.com: An update that fixes 7 vulnerabilities is now available.
February 26, 2019
LinuxSecurity.com: The package kibana before version 6.6.1-1 is vulnerable to multiple issues including arbitrary code execution and information disclosure.
February 26, 2019
The Dark Sides of Modern Cars: Hacking and Data Collection
February 26, 2019
Threatpost Data: Password Managers Are Worth the Risk, Readers Say
February 25, 2019
Check your VPN DNS test tool legitimacy: Is it “good” or deceptive
February 25, 2019
LinuxSecurity.com: An update that solves one vulnerability and has three fixes is now available.
February 25, 2019
LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.
February 25, 2019
Risk Level: Very Low. Type: Trojan.
February 25, 2019
ToRPEDO Privacy Attack on 4G/5G Networks Affects All U.S. Carriers
February 25, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 25, 2019
Escalating DNS attacks have domain name steward worried
The keeper of the internet’s ‘phone book’ is urging a speedy adoption of security-enhancing DNS specifications The post Escalating DNS attacks have domain name steward worried appeared first on WeLiveSecurity
February 25, 2019
LinuxSecurity.com: Several security issues were fixed in Bind.
February 25, 2019
Google Ditches Passwords in Latest Android Devices
February 25, 2019
Your $350 Nike self-lacing sneakers aren’t as smart as you hoped
February 25, 2019
LinuxSecurity.com: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 25, 2019
LinuxSecurity.com: A newer version of waagent is needed for several features of the Azure platform. For Debian 8 “Jessie”, this problem has been fixed in version
February 25, 2019
LinuxSecurity.com: The package msmtp before version 1.8.3-1 is vulnerable to certificate verification bypass.
February 25, 2019
LinuxSecurity.com: The package python-mysql-connector before version 8.0.15-1 is vulnerable to authentication bypass.
February 25, 2019
Understanding VPN through open systems interconnection model
February 23, 2019
Major Android ad fraud scam campaign drains battery & eats data
February 23, 2019
Setting up a Django application on RHEL 8 Beta
February 23, 2019
Phishing Scam Cloaks Malware With Fake Google reCAPTCHA
February 22, 2019
Reddit Gold: Alice and Bob, Caught in a Web of Lies
February 22, 2019
Video: HackerOne CEO on the Evolving Bug Bounty Landscape
February 22, 2019
Data Breaches of the Week: Tales of PoS Malware, Latrine Status
February 22, 2019
Threatpost News Wrap Podcast For Feb. 22
February 22, 2019
Reading Time: ~2 min. Email Phishers Find New Filter Bypass Since email filters have gained popularity over the last decade, scammers have been forced to adapt their attacks. To bypass a normal URL filter that would check for malicious links, these scammers have found a way to alter the “document relationship” file (xml.rels) and continue […]
February 22, 2019
Android banking malware distributed with fake Google reCAPTCHA
February 22, 2019
Taking Care of Your Personal Online Security (For Paranoids)
February 22, 2019
Infosec in spaaace! NCC and Surrey Uni to pore over satellite security
February 22, 2019
Cyber-extortionists take aim at lucrative targets
A new report shines some light on multiple aspects of the growing threat of cyber-extortion The post Cyber-extortionists take aim at lucrative targets appeared first on WeLiveSecurity
February 22, 2019
Threatpost Poll: Are Password Managers Too Risky?
February 22, 2019
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
February 21, 2019
Type: Vulnerability. Microsoft .NET Framework and Visual Studio are prone to an security vulnerability; fixes are available.
February 21, 2019
Type: Vulnerability. Microsoft Windows is prone to a local security-bypass vulnerability; fixes are available.
February 21, 2019
Type: Vulnerability. Microsoft Windows is prone to a local security-bypass vulnerability; fixes are available.
February 21, 2019
Type: Vulnerability. Microsoft Windows is prone to a local security-bypass vulnerability; fixes are available.
February 21, 2019
ThreatList: Porn-Focused Malware Triples, Dark Web Loves It
February 21, 2019
Adobe Re-Patches Critical Acrobat Reader Flaw
February 21, 2019
Black-hat sextortionists required: Competitive salary and dental plan
February 21, 2019
Highly Critical Drupal RCE Flaw Affects Millions of Websites
February 21, 2019
19-Year-Old WinRAR Flaw Plagues 500 Million Users
February 21, 2019
Reading Time: ~3 min. “Internet of things” (IoT) is a term that’s becoming increasingly commonplace in our daily lives. Internet-connected devices are being designed and implemented at a rapid clip, especially in our own homes. The internet is not just at our fingertips anymore, but also at our beck and call with smart speakers and […]
February 21, 2019
How costly are sweetheart swindles?
And that’s on top of the heartache experienced by the tens of thousands of people who fall for romance scams each year The post How costly are sweetheart swindles? appeared first on WeLiveSecurity
February 21, 2019
Bored bloke takes control of British Army ‘psyops’ unit’s Twitter
February 21, 2019
Researcher: Not Hard for a Hacker to Capsize a Ship at Sea
February 20, 2019
Separ Malware Plucks Hundreds of Companies’ Credentials in Ongoing Phish
February 20, 2019
security update
February 20, 2019
Apple’s Shazam App Boots Facebook Ads and Other Third-Party SDKs
February 20, 2019
Password Manager Firms Blast Back at ‘Leaky Password’ Revelations
February 20, 2019
GitHub Increases Rewards, Scope For Bug-Bounty Program
February 20, 2019
Microsoft: Russia’s Fancy Bear Working to Influence EU Elections
February 20, 2019
Most & least radiation emitting smartphones in 2019
February 20, 2019
Torrent uploader CracksNow caught distributing GrandCrab ransomware
February 20, 2019
Dark Web hacker selling 92M new accounts on Dream market
February 20, 2019
Siegeware: When criminals take over your smart building
Siegeware is what you get when cybercriminals mix the concept of ransomware with building automation systems: abuse of equipment control software to threaten access to physical facilities The post Siegeware: When criminals take over your smart building appeared first on WeLiveSecurity
February 20, 2019
The man suing Apple over two-factor authentication has ‘previous’
February 20, 2019
Download Kali Linux 2019.1 with Metasploit 5.0
February 19, 2019
Microsoft to Kill Updates for Legacy OS Using SHA-1
February 19, 2019
ThreatList: APT Adversaries Up the Ante on Speed, Target Telecom
February 19, 2019
security update
February 19, 2019
security update
February 19, 2019