January 19, 2019
LinuxSecurity.com: Security fix for CVE-2018-20455 CVE-2018-20456 CVE-2018-20457 CVE-2018-20458 CVE-2018-20459 CVE-2018-20460 CVE-2018-20461 through rebase to 3.2.0
January 19, 2019
LinuxSecurity.com: **PHP version 7.2.14** (10 Jan 2019) **Core:** * Fixed bug php#77369 (memcpy with negative length via crafted DNS response). (Stas) * Fixed bug php#71041 (zend_signal_startup() needs ZEND_API). (Valentin V. Bartenev) * Fixed bug php#76046 (PHP generates “FE_FREE” opcode on the wrong line). (Nikita) **Date:** * Fixed bug php#77097 (DateTime::diff gives wrong diff when the
January 19, 2019
Google Play Removes Malicious Malware-Ridden Apps
January 18, 2019
security update
January 18, 2019
Fallout EK Retools for a Fresh New 2019 Look
January 18, 2019
Ingenious! The Android malware which only triggers if you’re moving
January 18, 2019
Threatpost News Wrap Podcast For Jan. 18
January 18, 2019
Risk Level: Very Low. Type: Trojan.
January 18, 2019
Reading Time: ~2 min. Texas Town Brought to a Halt by Ransomware Several days ago the town of Del Rio, Texas, fell victim to a ransomware attack that knocked most of the town’s major systems offline. While the town’s IT department quickly worked to isolate the infection, remaining departments were forced to switch to hand-written […]
January 18, 2019
Get 3 Years of NordVPN Service for Just $2.99 Per Month – Deal Alert
January 18, 2019
Twitter Android Glitch Exposed Private Tweets for Years
January 18, 2019
Watch as hackers take over a construction crane
January 18, 2019
Malware can fully compromise building control systems
January 18, 2019
Bug bounty: Hack Tesla Model 3 to win your own Model 3
January 18, 2019
The Pirate Bay malware can empty your Cryptocurrency wallet
January 18, 2019
Two men charged with hacking into SEC in stock-trading scheme
The hacking duo is believed to have exploited a software flaw and compromised several SEC workstations with malware in order to take early peeks at financial disclosures The post Two men charged with hacking into SEC in stock-trading scheme appeared first on WeLiveSecurity
January 18, 2019
The 773 Million Record “Collection #1” Data Breach
January 18, 2019
15+ Password Cracking Techniques Used By Hackers 2019
January 18, 2019
I used to be a dull John Doe. Thanks to Huawei, I’m now James Bond!
January 18, 2019
Microsoft blue biz bug bounty bonanza beckons
January 18, 2019
Got a Drupal-powered website? You may want to get patching now…
January 18, 2019
Microsoft Launches Azure DevOps Bug Bounty Program
January 17, 2019
Apple CEO Demands Federal Data Privacy Legislation
January 17, 2019
Risk Level: Very Low. Type: Trojan.
January 17, 2019
Risk Level: Very Low. Type: Trojan.
January 17, 2019
Risk Level: Very Low. Type: Trojan.
January 17, 2019
Risk Level: Very Low. Type: Trojan.
January 17, 2019
Risk Level: Very Low. Type: Trojan.
January 17, 2019
Top GP: Medical app Your.MD’s data security wasn’t my remit
January 17, 2019
Cyber-Jackpot: 773M Credentials Dumped on the Dark Web
January 17, 2019
773 million records with emails & plain text passwords leaked online
January 17, 2019
The Collection #1 data breach – what you need to do about it
January 17, 2019
773 million email IDs, 21 million passwords for anyone to see in massive data dump
The vast dossier of stolen login details appears to have been gathered from data stolen in many breaches The post 773 million email IDs, 21 million passwords for anyone to see in massive data dump appeared first on WeLiveSecurity
January 17, 2019
Cryptomining Malware Uninstalls Cloud Security Products
January 17, 2019
Magecart hits hundreds of websites via ad supply chain hijack
January 17, 2019
New Year’s resolutions: Routing done right
As another thing to improve this year, you may want to route your focus on a device that is the nerve center of your network and, if poorly secured, the epicenter of much potential trouble The post New Year’s resolutions: Routing done right appeared first on WeLiveSecurity
January 17, 2019
As the Government Shutdown Drags on, Security Risks Intensify
January 17, 2019
Oracle Java Card updated for IoT applications
January 17, 2019
LinuxSecurity.com: This is the final notification for the retirement of Red Hat Enterprise Linux 6.7 Extended Update Support (EUS). This notification applies only to those customers subscribed to the Extended Update Support (EUS) channel for Red Hat Enterprise Linux 6.7.
January 17, 2019
South Korea says mystery hackers cracked advanced weapons servers
January 17, 2019
Risk Level: Very Low. Type: Trojan.
January 17, 2019
Threatpost Survey Says: 2FA is Just Fine, But Go Ahead and Kill SMS
January 16, 2019
Millions of Oklahoma Gov Files Exposed by Wide-Open Server
January 16, 2019
LinuxSecurity.com: Several security issues were fixed in libcaca.
January 16, 2019
Lowjax city: Researchers crack open notorious Fancy Bear rootkit
January 16, 2019
U.S. Issues Multiple Charges For 2016 SEC Hack
January 16, 2019
Fortnite Hacked Via Insecure Single Sign-On
January 16, 2019
Magecart Returns with Advertising Library Tactic
January 16, 2019
Car and almost $1m on offer for Tesla Model 3 hacks
The electric car maker is raising the ante in automotive security, putting one of its swanky models as a target at a hacking contest The post Car and almost $1m on offer for Tesla Model 3 hacks appeared first on WeLiveSecurity
January 16, 2019
VOIPO Database Exposes Millions of Texts, Call Logs
January 16, 2019
Firms fined $1M for SingHealth data security breach
January 16, 2019
UK Banks Finally Issue New Cards After Ticketmaster Breach
January 16, 2019
LinuxSecurity.com: This update fixes CVE-2018-20685 (the first “variant”) and backports several fixes to unbreak ECDSA authentication from PKCS#11, certificate authentication and so on.
January 16, 2019
LinuxSecurity.com: **Horde_Form 2.0.19** * [mjr] SECURITY: Prevent RCE vulnerability due to potential directory traversal in Image uploads (An independent security researcher has reported this vulnerability to SecuriTeam Secure Disclosure program).
January 16, 2019
LinuxSecurity.com: **Horde_Form 2.0.19** * [mjr] SECURITY: Prevent RCE vulnerability due to potential directory traversal in Image uploads (An independent security researcher has reported this vulnerability to SecuriTeam Secure Disclosure program).
January 16, 2019
LinuxSecurity.com: Patch for CVE-2016-10091
January 16, 2019
LinuxSecurity.com: Keegan Ryan discovered that NSS incorrectly handled ECDSA key generation. A local attacker could possibly use this issue to perform a cache-timing attack and recover private ECDSA keys (CVE-2018-0495). References:
January 15, 2019
LinuxSecurity.com: It was observed that URL’s which gets downloaded via “–log=” attribute stores sensitive information. This update fixes that. References: – https://bugs.mageia.org/show_bug.cgi?id=24112
January 15, 2019
LinuxSecurity.com: A heap use-after-free vulnerability in the server code of the file transfer extension, which can result in remote code execution. This attack appears to be exploitable via network connectivity (CVE-2018-6307).
January 15, 2019
IDenticard Zero-Days Allow Corporate Building Access, Location Recon
January 15, 2019
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 15, 2019
security update
January 15, 2019
security update
January 15, 2019
LinuxSecurity.com: Several issues in wireshark, a tool that captures and analyzes packets off the wire, have been found by different people. These are basically issues with length checks or invalid memory access in
January 15, 2019
LinuxSecurity.com: libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution (CVE-2018-15127) SL7 x86_64 libvncserver-0.9.9-13.el7_6.i686.rpm libvncserver-0.9.9-13.el7_6.x86_64.rpm libvncserver-debuginfo-0.9.9-13.el7_6.i686.rpm libvncserver-debuginfo-0.9.9-13.el7_6.x86_64.rpm libvncserver-devel-0.9.9-13.el7_6.i686.rpm [More…]
January 15, 2019
ThreatList: $1.7M is the Average Cost of a Cyber-Attack
January 15, 2019
LinuxSecurity.com: Several security issues were fixed in libcaca.
January 15, 2019
Yes, you can remotely hack … building site cranes. Wait, what?
January 15, 2019
Man whose DDoS attacks took down entire country’s Internet jailed
January 15, 2019
8 million users installed 9 adware apps from Play Store
January 15, 2019
What makes a cybercriminal?
Forget balaclavas or hoodies, these cybercriminals are hiding in plain sight The post What makes a cybercriminal? appeared first on WeLiveSecurity
January 15, 2019
Reading Time: ~2 min. For many MSPs, integrating their security solution with their remote monitoring and management (RMM) and professional service automation (PSA) platforms is essential for doing business. Together, these platforms help lower the cost of keeping up with each client, ensuring profitable margins for a healthy, growing business. For true providers of IT […]
January 15, 2019
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2019:0049
January 15, 2019
LinuxSecurity.com: An update for libvncserver is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 15, 2019
LinuxSecurity.com: The v4.19.14 stable update contains important fixes across the tree.
January 15, 2019
A city in Texas is using paper after suffering ransomware attack
January 15, 2019
Risk Level: Very Low. Type: Trojan.
January 15, 2019
Risk Level: Very Low. Type: Trojan.
January 15, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 15, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 15, 2019