February 6, 2019
Every day should be Safer Internet Day
February 6, 2019
IoT Scale Flaws Enable Denial of Service, Privacy Issues
February 5, 2019
security update
February 5, 2019
Risk Level: Very Low. Type: Trojan.
February 5, 2019
Google Patches Critical .PNG Image Bug
February 5, 2019
Webcast: Arm yourself before you go threat hunting in 2019
February 5, 2019
European Commission orders recall of children’s smartwatch over privacy concerns
The watch has been found to expose its wearers to a high level of risk of being contacted and monitored by attackers The post European Commission orders recall of children’s smartwatch over privacy concerns appeared first on WeLiveSecurity
February 5, 2019
EU Recalls Children’s Smartwatch That Leaks Location Data
February 5, 2019
The APT Name Game: How Grim Threat Actors Get Goofy Monikers
February 5, 2019
The cloud’s weakest security links aren’t where you’re looking
February 5, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
February 5, 2019
Spy Campaign Spams Pro-Tibet Group With ExileRAT
February 4, 2019
security update
February 4, 2019
‘Collection #1’ Data Dump Hacker Identified
February 4, 2019
SpeakUp Linux Backdoor Sets Up for Major Attack
February 4, 2019
Houzz discloses data breach, asks some users to reset passwords
Citing an ongoing investigation, the company wouldn’t say how or when the incident occurred The post Houzz discloses data breach, asks some users to reset passwords appeared first on WeLiveSecurity
February 4, 2019
security update
February 3, 2019
security update
February 3, 2019
security update
February 2, 2019
security update
February 2, 2019
New Mac Malware steals iPhone text messages from iTunes backups
February 2, 2019
Selfie stealing malware found in popular Android beauty camera apps
February 2, 2019
Authorities shut down xDedic marketplace for selling hacked servers
February 2, 2019
New Firmware Version of Nintendo Switch Hacked in just 4 Hours
February 2, 2019
FaceTime bug exposes live audio & video before recipient picks call
February 2, 2019
What If Your VPN Keeps Logs and Why You Should Care
February 2, 2019
Meet Aztarna, a tool to find vulnerable Internet connected robots
February 2, 2019
LinuxSecurity.com: A remote code execution vulnerability exists in PHP’s built-in phar stream wrapper when performing file operations on an untrusted phar:// URI. Some Drupal code (core, contrib, and custom) may be performing file operations on insufficiently validated user input, thereby being
February 2, 2019
LinuxSecurity.com: Bug fixes for binutils including one that is preventing Yocot/oe-core from building properly
February 2, 2019
LinuxSecurity.com: New mariadb packages are available for Slackware 14.1 and 14.2 to fix security issues.
February 2, 2019
Houzz Urges Password Resets After Data Breach
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
Three UK customer details exposed in homepage blunder
February 1, 2019
Reading Time: ~2 min. Facebook Research App Removed from App Store After seeing their Onavo VPN application removed from the Apple App Store last year, Facebook has re-branded the service as a “research” app and made it available through non-Apple testing services. The app itself requires users download and install a Facebook Enterprise Developer Certificate […]
February 1, 2019
Threatpost News Wrap Podcast For Feb. 1
February 1, 2019
Cybercriminals Aim for the Super Bowl Goal Posts
February 1, 2019
Hackers used Karma tool to hack iPhones of prominent Govt officials
February 1, 2019
Four new caches of stolen logins put Collection #1 in the shade
The recently discovered tranches of stolen login credentials freely floating around the internet total 2.2 billion records The post Four new caches of stolen logins put Collection #1 in the shade appeared first on WeLiveSecurity
February 1, 2019
LinuxSecurity.com: Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.38. Please see the MariaDB 10.0 Release Notes for further details:
February 1, 2019
LinuxSecurity.com: The 4.20.5 stable kernel update contains a number of important fixes across the tree.
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
TheMoon Rises Again, With a Botnet-as-a-Service Threat
January 31, 2019
Reading Time: ~5 min. This is the second of a three-part report on the state of three malware categories: miners, ransomware, and information stealers. As noted in the last blog, mining malware is on a decline, partly due to turmoil affecting cryptocurrencies. Ransomware is also on a decline (albeit a slower one). These dips are at […]
January 31, 2019
security update
January 31, 2019
security update
January 31, 2019
security update
January 31, 2019
Prepare to Defend Your Network Against Swarm-as-a-Service
January 31, 2019
2019 Already Marred By Slew of Data Breach Incidents
January 31, 2019
U.S. Government Goes After North Korea’s Joanap Botnet
January 31, 2019
Kwik-Fit hit by MOT fail, that’s Malware On Target
January 31, 2019
Japan to probe citizens’ IoT devices in the name of security
Smart devices were targeted by more than one-half of cyberattacks detected in the country in 2017 The post Japan to probe citizens’ IoT devices in the name of security appeared first on WeLiveSecurity
January 31, 2019
Hackers hit Airbus, steal personal details of employees
January 31, 2019
Google Pulls Data-Chugging App From iOS Devices
January 31, 2019
Mac “CookieMiner” Malware Aims to Gobble Crypto Funds
January 31, 2019
Cybercrime black markets: Dark web services and their prices
A closer look at cybercrime as a service on the dark web The post Cybercrime black markets: Dark web services and their prices appeared first on WeLiveSecurity
January 31, 2019
LinuxSecurity.com: Several security issues were fixed in Avahi.
January 31, 2019
LinuxSecurity.com: The package ghostscript before version 9.26-2 is vulnerable to sandbox escape.
January 31, 2019
Smashing Security #113: FaceTime, Facebook, faceplant
January 31, 2019
Attackers Can Track Kids’ Locations via Connected Watches
January 30, 2019
security update
January 30, 2019
Stealthy Malware Disguises Itself as a WordPress License Key
January 30, 2019
Apple Blasts Facebook Over Data-Sucking ‘Research’ App
January 30, 2019
‘We’re coming for you’, global police tell DDoS attack buyers
First closing in on operators, now on users, as the hunt continues and law enforcement in many countries is about to swoop on people who bought DDoS attacks on WebStresser The post ‘We’re coming for you’, global police tell DDoS attack buyers appeared first on WeLiveSecurity
January 30, 2019