January 14, 2019
security update
January 14, 2019
Threatpost Poll: Can We Fix 2FA?
January 14, 2019
Hack Allows Escape of Play-with-Docker Containers
January 14, 2019
Risk Level: Very Low. Type: Trojan.
January 14, 2019
Risk Level: Very Low. Type: Trojan.
January 14, 2019
Risk Level: Very Low. Type: Trojan.
January 14, 2019
British TV viewers targeted by email fraudsters
January 14, 2019
Ryuk Hauls in $3.7M in ‘Earnings,’ Adds TrickBot to the Attack Mix
January 14, 2019
Mozilla Kills Default Support for Adobe Flash in Firefox 69
January 14, 2019
RBS reissues punters with new bank cards after Ticketmaster breach
January 14, 2019
Goddamn the Pusher man: Nominet kicks out domain name hijack bid
January 14, 2019
Poland may consider Huawei ban amid ‘spy’ arrests – reports
January 14, 2019
Data Exposed in OXO, Amazon and MongoDB Leaks
January 14, 2019
Nissan EV app password reset prompts user panic
January 14, 2019
LinuxSecurity.com: An update for systemd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 14, 2019
CES: Smart cities and the challenge of securing the neighborhood
In our final report from CES we take a look at smart city initiatives The post CES: Smart cities and the challenge of securing the neighborhood appeared first on WeLiveSecurity
January 14, 2019
Podcast: Emotet Grows With Fast-Evolving Tactics
January 14, 2019
New Linux Systemd security holes uncovered
January 14, 2019
Governments need to embrace AI for the good of the people
January 14, 2019
Brit hacker hired by Liberian telco to nobble rival now behind bars
January 14, 2019
LinuxSecurity.com: New zsh packages are available for Slackware 14.0, 14.1, and 14.2 to fix security issues.
January 14, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 14, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 14, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 14, 2019
LinuxSecurity.com: An update that solves one vulnerability and has 6 fixes is now available.
January 14, 2019
Risk Level: Very Low. Type: Trojan.
January 14, 2019
LinuxSecurity.com: The Qualys Research Labs discovered multiple vulnerabilities in systemd-journald. Two memory corruption flaws, via attacker-controlled alloca()s (CVE-2018-16864, CVE-2018-16865) and an out-of-bounds read flaw leading to an information leak (CVE-2018-16866), could allow an attacker to
January 13, 2019
LinuxSecurity.com: The package python2-django before version 1.11.18-1 is vulnerable to content spoofing.
January 13, 2019
LinuxSecurity.com: The package python-django before version 2.1.5-1 is vulnerable to content spoofing.
January 13, 2019
security update
January 13, 2019
LinuxSecurity.com: Due to kernel issue there is a way to reuse start_time of a process. This allows to duplicate process authorized by polkit. This update mitigates polkit issue #75 (slowfork): https://gitlab.freedesktop.org/polkit/polkit/issues/75
January 13, 2019
It only takes a Skype Call to Unlock an Android Handset
January 12, 2019
Kaspersky tipped off US about the contractor who stole NSA data
January 12, 2019
9 million users installed 85 adware infected apps from Play Store
January 12, 2019
Aussie govt emergency service hacked to send fake warning alerts
January 12, 2019
WhatsApp Gold Scam is Back with Malware Payload
January 12, 2019
Hacker ‘BestBuy’ sentenced to prison for operating Mirai DDoS botnet
January 12, 2019
Facebook staff discussed cashing in on user data, reports say
January 12, 2019
LinuxSecurity.com: An integer underflow was discovered in the CAF demuxer of the VLC media player. For the stable distribution (stretch), this problem has been fixed in
January 12, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes 13 vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
January 12, 2019
LinuxSecurity.com: Resolves CVE-2018-16869
January 12, 2019
LinuxSecurity.com: Resolves CVE-2018-16869
January 12, 2019
LinuxSecurity.com: New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
January 11, 2019
Anonymous hacker jailed for 10 years over hospital DDoS attacks
January 11, 2019
security update
January 11, 2019
TA505 Crime Gang Debuts Brand-New ServHelper Backdoor
January 11, 2019
Unprotected MongoDB leaks resumes of 202M Chinese job seekers
January 11, 2019
U.S. Government Shutdown Leaves Dozens of .Gov Websites Vulnerable
January 11, 2019
Yet Another Bypass: Is 2FA Broken? Authentication Experts Weigh In
January 11, 2019
Huawei sales director nicked in Poland on suspicion of ‘spying’
January 11, 2019
Reading Time: ~2 min. Malicious Apps Get Millions of Installs Google recently removed 85 apps from the Play Store after they were found to contain predatory adware. With over nine million combined downloads, the apps were mostly fake games or utility apps that began pushing a constant stream of full-screen ads to users until the […]
January 11, 2019
LinuxSecurity.com: The package wireshark-cli before version 2.6.6-1 is vulnerable to multiple issues including information disclosure and denial of service.
January 11, 2019
LinuxSecurity.com: The package systemd before version 240.0-3 is vulnerable to multiple issues including arbitrary file overwrite and information disclosure.
January 11, 2019
What happens when the cops get hit with malware, too?
January 11, 2019
Reddit Locks Down Accounts After Security Incident
January 11, 2019
LinuxSecurity.com: read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header (CVE-2017-14502).
January 11, 2019
LinuxSecurity.com: Terminology before 1.3.1 allows Remote Code Execution because popmedia is mishandled, as demonstrated by an unsafe “cat README.md” command when e}pn is used. A popmedia control sequence can allow the malicious execution of executable file formats registered in the X desktop share MIME types (/usr/share/applications). The control sequence defers
January 11, 2019
LinuxSecurity.com: fix CVE-2019-3498 python-django: Content spoofing via URL path in
January 11, 2019
LinuxSecurity.com: backport anti-phishing fixes
January 11, 2019
LinuxSecurity.com: **Horde_Image 2.5.4** * [mjr] SECURITY: Fix potential RCE in the text method when using the Imagemagick backend. * [mjr] SECURITY: Sanitize image type parameter (PR: 2, Fariskhi Vidyan). * [mjr] Fix issues with escaping single and double quote characters in the text method when using the Imagemagick backend.
January 11, 2019
At CES, Focus is On ‘Cool Factor’ Not IoT Security
January 10, 2019
‘Unprecedented’ DNS Hijacking Attacks Linked to Iran
January 10, 2019
Google Search Results Spoofed to Create Fake News
January 10, 2019
Reddit users locked out of accounts after ‘security concern’
January 10, 2019
Zerodium is paying $2 million for Apple iOS remote jailbreak
January 10, 2019
NSA to release free reverse engineering tool GHIDRA at RSAConference
January 10, 2019
2018’s Top hacks and data breaches
January 10, 2019
Town of Salem data breach: Personal data of 7.6M gamers stolen
January 10, 2019
Face unlock on many Android smartphones falls for a photo
No 3D-printed heads or realistic masks were needed to trick even a handful of high-end handset models into unlocking their screens The post Face unlock on many Android smartphones falls for a photo appeared first on WeLiveSecurity
January 10, 2019
Reading Time: ~4 min. We live in a digital age where internet-connected devices are the norm. Our phones, our televisions, even our light bulbs are tied together in today’s tech ecosystem. For high school and college students, this degree of digital connection is the standard, and when school is in session, tech accessories are a […]
January 10, 2019
Smashing Security #110: What? You can get paid to leave Facebook?
January 10, 2019
LinuxSecurity.com: A vulnerability was found in mbedTLS which allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites (CVE-2018-19608). References:
January 10, 2019
LinuxSecurity.com: A bug in the server implementation of RTSP-over-HTTP in live could allow a denial-of-service attack. A bug in the server implementation of RTSP-over-HTTP could allow a buffer overflow, which could result in the execution of arbitrary code
January 10, 2019
LinuxSecurity.com: An authenticated user who can obtain a TGT using an older encryption type (DES, DES3, or RC4) can cause an assertion failure in the KDC by sending an S4U2Self request (CVE-2018-20217). References:
January 10, 2019
CES IoT security – do you know who your home is talking to?
There’s a digital treasure trove to be had in your home so you should take steps to protect it The post CES IoT security – do you know who your home is talking to? appeared first on WeLiveSecurity
January 10, 2019