October 16, 2018
Bug in Newly Released iOS 12.0.1 Gives Access To Your Photos
October 16, 2018
Facebook Expands Efforts to Squash Voter Suppression
October 16, 2018
Privacy Regulation Could Be a Test for States’ Rights
October 16, 2018
LinuxSecurity.com: Net-SNMP could be made to crash if it received specially crafted network traffic.
October 16, 2018
Phishers are after something unusual in ploy targeting book publishers
In a new twist on the theme, the scammers have their sights set on book manuscripts, among other things The post Phishers are after something unusual in ploy targeting book publishers appeared first on WeLiveSecurity
October 16, 2018
How to secure your Azure network
October 16, 2018
LinuxSecurity.com: An update for tomcat is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 16, 2018
Pentagon data breach puts personal details of 30,000 staff at risk
October 16, 2018
LinuxSecurity.com: An update for ghostscript is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 16, 2018
LinuxSecurity.com: Several security issues were fixed in Thunderbird.
October 15, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2916
October 15, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2918
October 15, 2018
security update
October 15, 2018
Up to 35 Million 2018 Voter Records For Sale on Hacking Forum
October 15, 2018
LinuxSecurity.com: Frediano Ziglio reported a missing check in the script to generate demarshalling code in the SPICE protocol client and server library. The generated demarshalling code is prone to multiple buffer overflows. An authenticated attacker can take advantage of this flaw to cause a denial
October 15, 2018
LinuxSecurity.com: Net-SNMP could be made to crash if it received specially crafted network traffic.
October 15, 2018
NotPetya Linked to Industroyer Attack on Ukraine Energy Grid
October 15, 2018
Facebook downgrades victim count, details data accessed in breach
While the number of victims is lower than previously thought, the data accessed for millions of them is more sensitive than originally believed The post Facebook downgrades victim count, details data accessed in breach appeared first on WeLiveSecurity
October 15, 2018
Facebook Offers Details on ‘View As’ Breach, Revises Numbers
October 15, 2018
The Occasional Orator Part 3
Proper preparation can make all the difference when it comes to speaking at conferences The post The Occasional Orator Part 3 appeared first on WeLiveSecurity
October 15, 2018
LinuxSecurity.com: Requests could be made to expose sensitive information if it received a specially crafted HTTP header.
October 15, 2018
How OpenStack Barbican deployment options secure your cloud
October 15, 2018
LinuxSecurity.com: Three vulnerabilities were discovered in the Open Ticket Request System which could result in privilege escalation or denial of service. For the stable distribution (stretch), these problems have been fixed in
October 14, 2018
Top cybersecurity facts, figures and statistics for 2018
October 14, 2018
LinuxSecurity.com: Nextcloud has been updated to 13.0.6 and fixes atleast the following security issue: A missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. The missing sanitization
October 14, 2018
LinuxSecurity.com: joernchen of Phenoelit discovered that git is prone to an arbitrary code execution vulnerability due to insufficient validation of submodule url and path via a specially crafted .gitmodules file in a project cloned with –recurse-submodules (CVE-2018-17456).
October 14, 2018
LinuxSecurity.com: Updated firefox packages fix security vulnerabilities: A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered
October 14, 2018
LinuxSecurity.com: Updated texlive packages fix security vulnerability: A buffer overflow in the handling of Type 1 fonts allowed arbitrary code execution when a malicious font is loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex (CVE-2018-17407).
October 14, 2018
security update
October 13, 2018
security update
October 13, 2018
LinuxSecurity.com: spamassassin: Certain unclosed tags in crafted emails allow for scan timeouts and result in denial of service (CVE-2017-15705) * spamassassin: Local user code injection in the meta rule syntax (CVE-2018-11781) SL7 x86_64 spamassassin-3.4.0-4.el7_5.x86_64.rpm spamassassin-debuginfo-3.4.0-4.el7_5.x86_64.rpm – Scientific Linux Development Team
October 13, 2018
30M Facebook breach; includes users phone numbers and location data
October 12, 2018
ICS Security Plagued with Basic, Avoidable Mistakes
October 12, 2018
LinuxSecurity.com: This update fixes several vulnerabilities in Imagemagick, a graphical software suite. Various memory handling problems or incomplete input sanitising have been found in the coders for BMP, DIB, PICT, DCM, CUT and PSD.
October 12, 2018
LinuxSecurity.com: Multiple vulnerabilities have been discovered in Wireshark, a network protocol analyzer which could result in denial of service or the execution of arbitrary code.
October 12, 2018
security update
October 12, 2018
LinuxSecurity.com: The package wireshark-cli before version 2.6.4-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.
October 12, 2018
Threatpost News Wrap Podcast For Oct. 12
October 12, 2018
Risk Level: Very Low. Type: Trojan.
October 12, 2018
Microsoft Zero-Day Patch for JET Bug Incomplete, Claims Firm
October 12, 2018
Reading Time: ~2 min.Latest Windows 10 Update Removes User Files Microsoft recently pulled its latest update, version 1809, after several users complained about personal files being deleted. While some users were able to use third-party software to retrieve deleted files, users whose files wnet missing from the Documents folder are having a much trickier time […]
October 12, 2018
Baby Got Bots
October 12, 2018
Shining a Light on a New Technique for Stealth Persistence
October 12, 2018
Facebook Bans More Than 800 Accounts in Disinformation Purge
October 12, 2018
Shocking: Hackers using Googlebots in cryptomining malware attacks
October 12, 2018
LinuxSecurity.com: An update that fixes three vulnerabilities is now available.
October 12, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 12, 2018
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
October 12, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
October 12, 2018
LinuxSecurity.com: An update that contains security fixes can now be installed.
October 12, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 12, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 12, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
October 12, 2018
This is how much the WannaCry ransomware attack cost the NHS
October 12, 2018
Threat Hunters & Security Analysts: A Dynamic Duo
October 12, 2018
Tips for minding the digital skills gap
The times they are a-changin‘, so how do you build and sharpen the skills that you need to avoid being left behind by the digital revolution? The post Tips for minding the digital skills gap appeared first on WeLiveSecurity
October 12, 2018
LinuxSecurity.com: Git could be made to run programs as your login if it recursivelyopened a malicious git repository.
October 12, 2018
000000 is Kanye West’s iPhone passcode
October 11, 2018
LinuxSecurity.com: An update for spamassassin is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 11, 2018
New Drupalgeddon Attacks Enlist Shellbot to Open Backdoors
October 11, 2018
ThreatList: Credential Theft Spikes by Triple Digits in U.S.
October 11, 2018
LinuxSecurity.com: Magnus Klaaborg Stubman discovered a NULL pointer dereference bug in net-snmp, a suite of Simple Network Management Protocol applications, allowing a remote, authenticated attacker to crash the snmpd process (causing a denial of service).
October 11, 2018
Type: Vulnerability. The Microsoft .NET Core is prone to an information-disclosure vulnerability; fixes are available.
October 11, 2018
LinuxSecurity.com: Several security issues were fixed in Tex Live.
October 11, 2018
Adaptable, All-in-One Android Trojan Shows the Future of Malware
October 11, 2018
Fake Adobe Flash Updates Hide Malicious Crypto Miners
October 11, 2018
Calif. Law Takes Aim at Weak IoT Passwords
October 11, 2018
LinuxSecurity.com: An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 11, 2018
New TeleBots backdoor: First evidence linking Industroyer to NotPetya
ESET’s analysis of a recent backdoor used by TeleBots – the group behind the massive NotPetya ransomware outbreak – uncovers strong code similarities to the Industroyer main backdoor, revealing a rumored connection that was not previously proven The post New TeleBots backdoor: First evidence linking Industroyer to NotPetya appeared first on WeLiveSecurity
October 11, 2018