LinuxSecurity.com: An update that fixes three vulnerabilities is now available.
November 30, 2018
LinuxSecurity.com: An update that solves one vulnerability and has two fixes is now available.
November 30, 2018
LinuxSecurity.com: Multiple security vulnerabilities were found in libarchive, a multi-format archive and compression library. Heap-based buffer over-reads, NULL pointer dereferences and out-of-bounds reads allow remote attackers to cause a denial-of-service (application crash) via
November 29, 2018
LinuxSecurity.com: An update for ruby is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
November 29, 2018
LinuxSecurity.com: Multiple vulnerabilities were discovered in the implementation of the Perl programming language. The Common Vulnerabilities and Exposures project identifies the following problems:
November 29, 2018
Critical Zoom Flaw Lets Hackers Hijack Conference Meetings
November 29, 2018
LinuxSecurity.com: Several security vulnerabilities were discovered in Ghostscript, an interpreter for the PostScript language, which could result in denial of service, the creation of files or the execution of arbitrary code if a malformed Postscript file is processed (despite the dSAFER sandbox being
November 29, 2018
LinuxSecurity.com: The package samba before version 4.9.3-1 is vulnerable to multiple issues including denial of service and access restriction bypass.
November 29, 2018
LinuxSecurity.com: The package powerdns-recursor before version 4.1.8-1 is vulnerable to denial of service.
November 29, 2018
Cisco Patches Critical Bug in License Management Tool
November 29, 2018
Hackers Breach Dunkin’ Donuts Accounts in Credential Stuffing Attack
November 29, 2018
US charges Iranian hackers for SamSam ransomware attacks
November 29, 2018
GCHQ opens kimono for infosec world to ogle its vuln disclosure process
November 29, 2018
US indicts two over SamSam ransomware attacks
The hacking and extortion scheme took place over a 34-month period with the SamSam ransomware affecting over 200 organizations in the US and Canada The post US indicts two over SamSam ransomware attacks appeared first on WeLiveSecurity
November 29, 2018
Smashing Security #106: Google Maps, Fed phishing, and Grinch bots
November 29, 2018
Distributing Malware By Becoming an Admin on an Open-Source Project
November 29, 2018
LinuxSecurity.com: An update for rh-ruby25-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 29, 2018
LinuxSecurity.com: An update for rh-ruby24-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 29, 2018
LinuxSecurity.com: An update for rh-ruby23-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 29, 2018
Dell Warns of Attempted Breach on Network
November 29, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in OpenSSL, the worst of which may lead to a Denial of Service condition.
November 29, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in RPM, the worst of which could allow a remote attacker to escalate privileges.
November 29, 2018
Microsoft Warns of Two Apps That Expose Private Keys
November 28, 2018
LinuxSecurity.com: The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.1 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. (CVE-2017-5950)
November 28, 2018
LinuxSecurity.com: Buffer overflows in URL auth code if there is a “mount” definition that enables URL authentication. A malicious client could send long HTTP headers, leading to a buffer overflow and potential remote code execution (CVE-2018-18820).
November 28, 2018
security update
November 28, 2018
security update
November 28, 2018
ThreatList: Cryptominers Dominate Malware Growth in 2018
November 28, 2018
FBI Sinkholes $38M Global Ad Fraud Operation
November 28, 2018
School district fails to reclaim $120,000 wired by bank to scammer
November 28, 2018
The Nature of Mass Exploitation Campaigns
November 28, 2018
EU Voters Worried About Election Hacking and Disinformation
November 28, 2018
LinuxSecurity.com: USN-3804-1 introduced a regression in OpenJDK.
November 28, 2018
LinuxSecurity.com: Several security issues were fixed in Git.
November 28, 2018
Pegasus Spyware Targets Investigative Journalists in Mexico
November 27, 2018
LinuxSecurity.com: Several vulnerabilities were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which may result in denial of service or the execution of arbitrary code if a malformed Postscript file is processed (despite the -dSAFER sandbox being enabled).
November 27, 2018
Reading Time: ~4 min.At Webroot, we stay ahead of cybersecurity trends in order to keep our customers up-to-date and secure. As the end of the year approaches, our team of experts has gathered their top cybersecurity predictions for 2019. What threats and changes should you brace for? General Data Protection Regulation Penalties “A large US-based […]
November 27, 2018
3ve – Major online ad fraud operation disrupted
International law enforcement swoops on fake ad viewing outfit The post 3ve – Major online ad fraud operation disrupted appeared first on WeLiveSecurity
November 27, 2018
LinuxSecurity.com: Several security issues were fixed in Samba.
November 27, 2018
Cisco Re-Issues Patch For High-Severity WebEx Flaw
November 27, 2018
Cheetah Mobile Blames SDKs for Rampant Ad Fraud in Its Android Apps
November 27, 2018
LinuxSecurity.com: USN-3816-1 caused a regression in systemd-tmpfiles.
November 27, 2018
LinuxSecurity.com: Several security issues were fixed in WebKitGTK+.
November 27, 2018
Risk Level: Very Low. Type: Trojan, Worm.
November 27, 2018
Widespread Malvertising Campaign Hijacks 300 Million Sessions
November 27, 2018
When the FBI rather than the fraudsters make the fake FedEx website
November 27, 2018
German chat site faces fine under GDPR after data breach
The country’s first fine under GDPR is lower than might have been expected, however, as the company was acknowledged for its post-incident cooperation and enhanced security measures The post German chat site faces fine under GDPR after data breach appeared first on WeLiveSecurity
November 27, 2018
Baroness Trumpington, former Bletchley Park clerk, dies aged 96
November 27, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues:
November 27, 2018
Uber fined £385k by ICO for THAT hack of 57m customers’ deets
November 27, 2018
LinuxSecurity.com: An update for rh-nginx114-nginx is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 27, 2018
LinuxSecurity.com: An update for rh-nginx112-nginx is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 27, 2018
LinuxSecurity.com: An update for rh-dotnet21-dotnet is now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
November 27, 2018
Oz opposition caves, offers encryption backdoor compromise
November 27, 2018
LinuxSecurity.com: A vulnerability in spice-gtk could allow an attacker to remotely execute arbitrary code.
November 27, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Libav, the worst of which may allow a Denial of Service condition.
November 27, 2018
LinuxSecurity.com: A vulnerability in Tablib might allow remote attackers to execute arbitrary python commands.
November 27, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Binutils, the worst of which may allow remote attackers to cause a Denial of Service condition. [More…]
November 27, 2018
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
November 27, 2018
LinuxSecurity.com: An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
November 27, 2018
LinuxSecurity.com: An update for sos-collector is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
November 27, 2018
LinuxSecurity.com: An update for NetworkManager is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 27, 2018
Risk Level: Very Low. Type: Trojan, Worm.
November 27, 2018
Knuddels Flirt App Slapped with Hefty Fine After Data Breach
November 26, 2018
Mobile Rotexy Malware Touts Ransomware, Banking Trojan Functions
November 26, 2018
USPS, Amazon Data Leaks Showcase API Weaknesses
November 26, 2018
User Confidence in Smartphone Security Abysmal
November 26, 2018
Reading Time: ~5 min.‘Tis the season of giving, which means scammers may try to take advantage of your good will. A surprising fact about American donation habits is that everyday folks like yourself are the single largest driver of charitable donations in the United States. Giving USA’s Annual Report on Philanthropy found that individuals gave […]
November 26, 2018
Bedroom design outfit slapped with £160k fine for 1.6 million spam calls
November 26, 2018
Bug Bounty: Earn $40,000 for hacking Facebook, Instagram or WhatsApp
November 26, 2018
Man arrested for stealing $1m from Silicon Valley Exec via SIM-swapping
November 26, 2018
Adult video game website High Tail Hall hacked; user data stolen
November 26, 2018
LinuxSecurity.com: An update for rh-mysql57-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
November 26, 2018
LinuxSecurity.com: An update for rh-nginx110-nginx is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 26, 2018
LinuxSecurity.com: An update for rh-nginx18-nginx is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 26, 2018
Smartphone shopping: Avoid the blues on Cyber Monday
As we increasingly make use of our smartphones to satisfy our shopping needs, let’s shine a light on how these hubs of our digital lives can be used to shop securely, on and around a day dedicated to online deals The post Smartphone shopping: Avoid the blues on Cyber Monday appeared first on WeLiveSecurity
November 26, 2018
Tighten up your security defences at SANS London 2019
November 26, 2018
LinuxSecurity.com: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 26, 2018