October 25, 2018
LinuxSecurity.com: It was discovered that 389-ds-base (the 389 Directory Server) is vulnerable to search queries with malformed values in the do_search() function (servers/slapd/search.c). Attackers could leverage this vulnerability by sending crafted queries in a loop to cause DoS.
October 25, 2018
Yahoo agrees to pay $50 million to settle data breach lawsuit
October 25, 2018
EU Laws Could Spell Double Trouble for Firms
October 25, 2018
ESET releases new decryptor for Syrian victims of GandCrab ransomware
ESET experts have created a new decryption tool that can be used by Syrian victims of the GandCrab ransomware. It is based on a set of keys recently released by the malware operators The post ESET releases new decryptor for Syrian victims of GandCrab ransomware appeared first on WeLiveSecurity
October 25, 2018
Smashing Security #101: Rule 34, Twitter scams, and Facebook fails
October 25, 2018
LinuxSecurity.com: It was discovered that mosquitto, an MQTT broker, was vulnerable to remote denial-of-service attacks that could be mounted using various vectors.
October 25, 2018
security update
October 25, 2018
Risk Level: Very Low. Type: Trojan.
October 25, 2018
LinuxSecurity.com: An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 24, 2018
LinuxSecurity.com: An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
October 24, 2018
LinuxSecurity.com: An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
October 24, 2018
LinuxSecurity.com: An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
October 24, 2018
LinuxSecurity.com: An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
October 24, 2018
LinuxSecurity.com: An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 24, 2018
LinuxSecurity.com: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 24, 2018
LinuxSecurity.com: An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 24, 2018
LinuxSecurity.com: An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 24, 2018
Teacher linked to Celebgate hacking scandal facing 7 years in prison
October 24, 2018
LinuxSecurity.com: Multiple security issues have been found in the Mozilla Firefox web browser, which could result in the execution of arbitrary code, privilege escalation or information disclosure.
October 24, 2018
Magecart Cybergang Targets 0days in Third-Party Magento Extensions
October 24, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 24, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 24, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.
October 24, 2018
LinuxSecurity.com: An update that solves 25 vulnerabilities and has two fixes is now available.
October 24, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 24, 2018
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
October 24, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 24, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
October 24, 2018
Russia launched Triton malware to sabotage Saudi petrochemical plant
October 24, 2018
Banking Trojans continue to surface on Google Play
The malicious apps have all been removed from the official Android store but not before the apps were installed by almost 30,000 users The post Banking Trojans continue to surface on Google Play appeared first on WeLiveSecurity
October 24, 2018
Morrisons Loses Insider Breach Liability Appeal
October 24, 2018
LuminosityLink RAT author sentenced to 2.5 years in jail
As part of his plea agreement, the author of the malware also forfeited the proceeds from his crimes – 114 Bitcoin worth $725,000 The post LuminosityLink RAT author sentenced to 2.5 years in jail appeared first on WeLiveSecurity
October 24, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
October 24, 2018
City Pays $2K in Ransomware, Stirs ‘Never Pay’ Debate
October 23, 2018
LinuxSecurity.com: Several security issues were fixed in MySQL.
October 23, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2942
October 23, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2943
October 23, 2018
StrongPity APT Changes Tactics to Stay Stealthy
October 23, 2018
ProtonVPN Subscriptions Now Available on Firefox for $10
October 23, 2018
ThreatList: 3 Out of 4 Employees Pose a Security Risk to Businesses
October 23, 2018
Adult Website Hack Exposes 1.2M ‘Wife Lover’ Fans
October 23, 2018
How to Choose the Most Secure Software for your Business
October 23, 2018
Thousands of Applications Vulnerable to RCE via jQuery File Upload
October 23, 2018
LinuxSecurity.com: Several security issues were fixed in Tex Live.
October 23, 2018
Get Essential Security Information from Linux Security Summit Videos
October 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
October 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
October 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
October 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
October 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
October 23, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
October 23, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
October 23, 2018
Watch how a Tesla Model S was stolen with just a tablet
October 22, 2018
LinuxSecurity.com: Paramiko could allow unintended access to network services.
October 22, 2018
LinuxSecurity.com: Net-SNMP could be made to crash if it received specially crafted network traffic.
October 22, 2018
LinuxSecurity.com: libssh could allow unintended access to network services.
October 22, 2018
LinuxSecurity.com: Requests could be made to expose sensitive information if it received a specially crafted HTTP header.
October 22, 2018
The Danger and Opportunity in 5G Connectivity and IoT
October 22, 2018
Obamacare Sign-Up Channel Breach Affects 75K Consumers
October 22, 2018
Critical Bug Impacts Live555 Media Streaming Libraries
October 22, 2018
Strict password policy could prevent credential reuse, paper suggests
The solution to password recycling may be easier to implement than previously thought, according to a recent paper The post Strict password policy could prevent credential reuse, paper suggests appeared first on WeLiveSecurity
October 22, 2018
LinuxSecurity.com: Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file (CVE-2016-5319). In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function
October 21, 2018
Bad to the Bot Bone
October 21, 2018
LinuxSecurity.com: A vulnerability has been discovered in exiv2 (CVE-2018-16336), a C++ library and a command line utility to manage image metadata, resulting in remote denial of service (heap-based buffer over-read/overflow) via
October 21, 2018
LinuxSecurity.com: The package thunderbird before version 60.2.1-1 is vulnerable to multiple issues including arbitrary code execution and information disclosure.
October 20, 2018
Two Critical RCE Bugs Patched in Drupal 7 and 8
October 20, 2018
Apache Access Vulnerability Could Affect Thousands of Applications
October 20, 2018
Hackers breach Healthcare.gov system, taking files on 75,000 people
October 20, 2018
Password and credit card-stealing Azorult malware adds new tricks
October 20, 2018
Facebook Portal isn’t designed to be as private as you might hope
October 19, 2018
LinuxSecurity.com: Updated ghostscript packages fix many bugs and security vulnerabilities: Bypassing executeonly to escape -dSAFER sandbox. (CVE-2018-17961) Saved execution stacks can leak operator arrays. (CVE-2018-18073)
October 19, 2018
security update
October 19, 2018