January 24, 2019
Nasty security bug found and fixed in Linux apt
New ransomware strain is locking up Bitcoin mining rigs in China
January 24, 2019
Hadoop coop thrown for loop by malware snoop n’ scoop troop? Oh poop
January 24, 2019
LinuxSecurity.com: Security fix for CVE-2018-20551, CVE-2018-20481, CVE-2018-20650 and CVE-2018-18897.
January 24, 2019
LinuxSecurity.com: Security fix for CVE-2019-5010 in Python. Anaconda is joined because an unrelated fix was done there that allowed to remove a workaround in Python.
January 24, 2019
LinuxSecurity.com: – xattr: strip credentials from any URL that is stored (CVE-2018-20483)
January 24, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 24, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2019
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
January 23, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 23, 2019
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
January 23, 2019
Redaman Spams Russian Banking Customers with Rotating Tactics
January 23, 2019
Malware in Ad-Based Images Targets Mac Users
January 23, 2019
Monero: Cybercrime’s Top Choice for Mining Malware
January 23, 2019
Risk Level: Very Low. Type: Trojan.
January 23, 2019
Risk Level: Very Low. Type: Trojan.
January 23, 2019
Risk Level: Very Low. Type: Trojan.
January 23, 2019
Risk Level: Very Low. Type: Trojan.
January 23, 2019
Got a Nest security camera? Enable two-step verification now
January 23, 2019
6 Signs of Successful Threat Hunting
January 23, 2019
‘Chaos’ iPhone X Attack Alleges Remote Jailbreak
January 23, 2019
Popular free Android VPN apps on Play Store contain malware
January 23, 2019
U.S. Gov Issues Urgent Warning of DNS Hijacking Attacks
January 23, 2019
Reading Time: ~3 min. Fitness trackers and other digital wearables have unlocked a new era of convenience and engagement in consumer health. Beyond general fitness trackers, you can find wearables for a variety of purposes; some help diabetics, some monitor for seizure activity, and some can aid in senior citizens’ health and quality of life. […]
January 23, 2019
Black hats are great for language diversity, says Eugene Kaspersky
January 23, 2019
Former employee blamed for hack of WordPress plugin maker
The plugin’s users are recommended to change their passwords on WPML’s website following havoc reportedly wrought by a disgruntled ex-employee The post Former employee blamed for hack of WordPress plugin maker appeared first on WeLiveSecurity
January 23, 2019
Microsoft Windows RCE Flaw Gets Temporary Micropatch
January 23, 2019
RogueRobin Malware Uses Google Drive as C2 Channel
January 23, 2019
LinuxSecurity.com: New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
January 23, 2019
LinuxSecurity.com: Multiple vulnerabilities were found in the journald component of systemd which can lead to a crash or code execution. CVE-2018-16864
January 23, 2019
LinuxSecurity.com: Fix for CVE-2019-5885 Upgrade notes available at https://github.com/matrix- org/synapse/blob/v0.34.0/UPGRADE.rst#upgrading-to-v0340 – Note this continues to use Python 2.
January 23, 2019
LinuxSecurity.com: Several vulnerabilities have been resolved in libjpeg-turbo, Debian’s default JPEG implemenation. CVE-2016-3616
January 22, 2019
How Web Apps Can Turn Browser Extensions Into Backdoors
January 22, 2019
Google Fined $57M in Largest GDPR Slap Yet
January 22, 2019
Adobe Issues Unscheduled Updates for Experience Manager Platform
January 22, 2019
Google fined €50 million for violating EU data privacy rules
France’s data protection watchdog issues the first major penalty under the EU’s new privacy regime The post Google fined €50 million for violating EU data privacy rules appeared first on WeLiveSecurity
January 22, 2019
Email security does not end with your password
A strong password is a great start, but there are more ways to make sure that your email is as secure as possible The post Email security does not end with your password appeared first on WeLiveSecurity
January 22, 2019
LinuxSecurity.com: It was discovered that aria2 (the lightweight command-line download utility) can store passed user credentials in a log file when using the –log option. This might allow local users to obtain sensitive information by reading this file.
January 22, 2019
security update
January 22, 2019
Twitter bug may have exposed private tweets of Android users for years
If you use Twitter for Android and want your tweets to be private, you may want to play safe and review your settings The post Twitter bug may have exposed private tweets of Android users for years appeared first on WeLiveSecurity
January 21, 2019
Websites can steal browser data via extensions APIs
January 21, 2019
LinuxSecurity.com: admin: Prevent access if any authentication agent isn’t available
January 21, 2019
New ransomware steals PayPal data with phishing link in ransom note
January 20, 2019
LinuxSecurity.com: Fix for use after free in affile_dw_reap
January 20, 2019
LinuxSecurity.com: libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2_MSG_USERAUTH_SUCCESS message in place of the SSH2_MSG_USERAUTH_REQUEST message which the server would expect to initiate authentication, the attacker could successfully authentciate
January 20, 2019
GDPR Suit Filed Against Amazon, Apple
January 19, 2019
2018’s Most Common Vulnerabilities Include Issues New and Old
January 19, 2019
How 2018 became Facebook’s worst year in privacy and security
January 19, 2019
LinuxSecurity.com: Security fix for CVE-2018-20455 CVE-2018-20456 CVE-2018-20457 CVE-2018-20458 CVE-2018-20459 CVE-2018-20460 CVE-2018-20461 through rebase to 3.2.0
January 19, 2019
LinuxSecurity.com: **PHP version 7.2.14** (10 Jan 2019) **Core:** * Fixed bug php#77369 (memcpy with negative length via crafted DNS response). (Stas) * Fixed bug php#71041 (zend_signal_startup() needs ZEND_API). (Valentin V. Bartenev) * Fixed bug php#76046 (PHP generates “FE_FREE” opcode on the wrong line). (Nikita) **Date:** * Fixed bug php#77097 (DateTime::diff gives wrong diff when the
January 19, 2019
Google Play Removes Malicious Malware-Ridden Apps
January 18, 2019
security update
January 18, 2019
Fallout EK Retools for a Fresh New 2019 Look
January 18, 2019
Ingenious! The Android malware which only triggers if you’re moving
January 18, 2019
Threatpost News Wrap Podcast For Jan. 18
January 18, 2019
Risk Level: Very Low. Type: Trojan.
January 18, 2019
Reading Time: ~2 min. Texas Town Brought to a Halt by Ransomware Several days ago the town of Del Rio, Texas, fell victim to a ransomware attack that knocked most of the town’s major systems offline. While the town’s IT department quickly worked to isolate the infection, remaining departments were forced to switch to hand-written […]
January 18, 2019
Get 3 Years of NordVPN Service for Just $2.99 Per Month – Deal Alert
January 18, 2019
Twitter Android Glitch Exposed Private Tweets for Years
January 18, 2019
Watch as hackers take over a construction crane
January 18, 2019
Malware can fully compromise building control systems
January 18, 2019
Bug bounty: Hack Tesla Model 3 to win your own Model 3
January 18, 2019
The Pirate Bay malware can empty your Cryptocurrency wallet
January 18, 2019
Two men charged with hacking into SEC in stock-trading scheme
The hacking duo is believed to have exploited a software flaw and compromised several SEC workstations with malware in order to take early peeks at financial disclosures The post Two men charged with hacking into SEC in stock-trading scheme appeared first on WeLiveSecurity
January 18, 2019
The 773 Million Record “Collection #1” Data Breach
January 18, 2019
15+ Password Cracking Techniques Used By Hackers 2019
January 18, 2019
I used to be a dull John Doe. Thanks to Huawei, I’m now James Bond!
January 18, 2019
Microsoft blue biz bug bounty bonanza beckons
January 18, 2019