Menu

Category Archives: Security

Articles about security

An update that fixes 11 vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

An update that solves one vulnerability and has four fixes is now available.

An update that solves two vulnerabilities and has one errata is now available.

Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition.

A vulnerability in emerge-delta-webrsync and Portage could result in a man-in-the-middle attack.

Multiple vulnerabilities have been found in Mailman, the worst of which could result in the arbitrary execution of code.

An update that solves 8 vulnerabilities and has 102 fixes is now available.

An update that fixes three vulnerabilities is now available.

SAS 2019: Exodus Spyware Found Targeting Apple iOS Users

security update

New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.

How CISOs should respond to the cybersecurity crisis

Cedric Krier discovered that missing access validation in Tryton could result in information disclosure . For the stable distribution (stretch), this problem has been fixed in

Security fix for CVE-2019-8936

Security fix for CVE-2019-8936

security update

**PHP version 7.3.4** (04 April 2019) **Core:** * Fixed bug php#77738 (Nullptr deref in zend_compile_expr). (Laruence) * Fixed bug php#77660 (Segmentation fault on break 2147483648). (Laruence) * Fixed bug php#77652 (Anonymous classes can lose their interface information). (Nikita) * Fixed bug php#77345 (Stack Overflow caused by circular reference in garbage collection). (Alexandru

Security fix for CVE-2019-8936

New openjpeg packages are available for Slackware 14.2 and -current to fix security issues.

New wget packages are available for Slackware 14.2 and -current to fix a security issue.

An update that fixes one vulnerability is now available.

An update that fixes 16 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that solves two vulnerabilities and has 16 fixes is now available.

Kusano Kazuhiko discovered a buffer overflow vulnerability in the handling of Internationalized Resource Identifiers (IRI) in wget, a network utility to retrieve files from the web, which could result in the execution of arbitrary code or denial of service when recursively

An update that fixes 11 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes four vulnerabilities is now available.

New malware can modify CT and MRI scan results
Top 10 VPN Services For 2019
Hard Times for Cryptojacking
Private data of 540 million Facebook users exposed in plain text
2018’s Biggest Security Breaches and What to Worry about in 2019
FBI catches heat, HS kids catch a hacking rap, and Albany catches a ransomware infection
Podcast: Chris Vickery on UpGuard’s Discovery of Millions of Facebook Records
Cisco Finally Patches Router Bugs As New Unpatched Flaws Surface

security update

security update

security update

security update

Scare-bnb: Family finds creeper cams hidden in their weekend rental by scanning Wi-Fi
Facebook Boots 74 Cybercrime Groups From Platform

Reading Time: ~2 min. Massive Data Breach at Georgia Tech It was recently revealed that the personal information on over 1.3 million people was illicitly accessed by hackers who breached Georgia Tech systems in December of last year. The breach is the second of the year for the university, and was only discovered after IT […]

Hackers Abuse Google Cloud Platform to Attack D-Link Routers

An update that fixes one vulnerability is now available.

Unpatched D-Link routers targeted in malicious DNS hijacking campaign
LokiBot Trojan Spotted Hitching a Ride Inside .PNG Files
Ticketmaster is hit by a £5 million legal action after online payment card theft

An update that solves one vulnerability and has one errata is now available.

An update that fixes one vulnerability is now available.

Prepare to foil cybercriminals at SANS Krakow 2019
Blundering London council emails unredacted version of notorious Gangs Matrix to 44 people. Data ends up on Snapchat

An update that fixes three vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

No dice, comrade! Senate floats Russia-busting election law

Risk Level: Very Low. Type: Trojan.

An update that solves two vulnerabilities and has one errata is now available.

An update that solves two vulnerabilities and has one errata is now available.

Chinese hackers poke the Bayer, but German giant says it withstood attack

Multiple vulnerabilities were found in the PuTTY SSH client, which could result in denial of service and potentially the execution of arbitrary code. In addition, in some situations random numbers could potentially be re-used.

Several vulnerabilities have been found in the Apache HTTP server. CVE-2019-0217

An update that fixes 16 vulnerabilities is now available.

Preinstalled Mobile Security App on Xiaomi Handsets Delivered Vulnerabilities, Not Protection
Facebook and Amazon are Locked in a Blame Game Over Leaked Data: Who’s Really To Blame?
540 million records on Facebook users exposed by third-party apps

The databases, sitting unprotected on cloud servers, contained reams of information amassed by two apps integrated with the social network The post 540 million records on Facebook users exposed by third-party apps appeared first on WeLiveSecurity

Capita bags £13.2m Police Scotland deal for crime-snooping tech
Ethiopia sits on 737 Max report but says pilots followed Boeing drills

An update that fixes 15 vulnerabilities is now available.

Unsecured databases found leaking half a billion resumes onto the net, no password required
Free Cynet Threat Assessment for Mid-sized and Large Organizations
You don’t need a PhD to phish a Brit university: Nonprofit claims 100% hit rate is easy peasy
BEC Scam Gang London Blue Evolves Tactics, Targets

Adam Dobrawy, Frederico Silva and Gregory Brzeski from HyperOne.com discovered that pdns, an authoritative DNS server, did not properly validate user-supplied data when building a HTTP request from a DNS query in the HTTP Connector of the Remote backend. This would allow a

AdvanceCOMP could be made to run arbitrary code if it opened a specially crafted file.

Several security issues were fixed in the Apache HTTP Server.

Yup, it’s the new tax year: If you smell a RAT, it’s because crims are ramping up tax scams
SAS 2019 to Tackle APTs, Supply Chains and More
Here’s to you: UK.gov praises Reg-reading techies for keeping on top of cybersecurity
NIST cybersecurity resources for smaller businesses

How can smaller businesses address their cybersecurity risks without the resources of large organizations? The post NIST cybersecurity resources for smaller businesses appeared first on WeLiveSecurity

Smashing Security #122: The big fat con at Office Depot
Who needs foreign servers? Researchers say the USA is doing a fine job of harboring its own crimeware flingers

Multiple vulnerabilities have been found in Xen, the worst of which could result in privilege escalation.

It’s time to reset the ‘Days without a Facebook data loss’ sign after 500 million records left exposed on AWS
Nvidia Fixes 8 High-Severity Flaws Allowing DoS, Code Execution
540 million Facebook users left exposed due to sloppy third-party developer security

An update that fixes three vulnerabilities is now available.

An update that solves three vulnerabilities and has 17 fixes is now available.

An update that solves three vulnerabilities and has 17 fixes is now available.

Security fix for CVE-2018-20662, CVE-2019-9631, CVE-2019-9200 and CVE-2019-9903.

A patchy Apache a-patchin: HTTP server gets fix for worrying root access hole
Facebook Data of Millions Exposed in Leaky Datasets
In its ransomware response, Norsk Hydro is an example for us all
How to Maximize the Value of Your Cybersecurity Investment
Teen TalkTalk hacker denies flogging stolen personal data for Bitcoin
OceanLotus APT Uses Steganography to Shroud Payloads
Toyota data breach: Hackers steal 3.1 million customers’ data
Inside job: Bithumb crypto exchange hacked again; loses $20 million

Reading Time: ~4 min. Although phishing has been around in various forms since the 1980s, our research shows it continues to evolve—and remains a major threat. These days, phishing tactics have gotten so sophisticated, it can be difficult to spot a scam—particularly in the case of hijacked email reply chains. Let’s look at a concrete example. […]

Just the small matter of the bill for scrapping Blighty’s old nuclear submarines: It’s £7.5bn