January 10, 2019
Google Search Results Spoofed to Create Fake News
Reddit users locked out of accounts after ‘security concern’
January 10, 2019
Zerodium is paying $2 million for Apple iOS remote jailbreak
January 10, 2019
NSA to release free reverse engineering tool GHIDRA at RSAConference
January 10, 2019
2018’s Top hacks and data breaches
January 10, 2019
Town of Salem data breach: Personal data of 7.6M gamers stolen
January 10, 2019
Face unlock on many Android smartphones falls for a photo
No 3D-printed heads or realistic masks were needed to trick even a handful of high-end handset models into unlocking their screens The post Face unlock on many Android smartphones falls for a photo appeared first on WeLiveSecurity
January 10, 2019
Reading Time: ~4 min. We live in a digital age where internet-connected devices are the norm. Our phones, our televisions, even our light bulbs are tied together in today’s tech ecosystem. For high school and college students, this degree of digital connection is the standard, and when school is in session, tech accessories are a […]
January 10, 2019
Smashing Security #110: What? You can get paid to leave Facebook?
January 10, 2019
LinuxSecurity.com: A vulnerability was found in mbedTLS which allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites (CVE-2018-19608). References:
January 10, 2019
LinuxSecurity.com: A bug in the server implementation of RTSP-over-HTTP in live could allow a denial-of-service attack. A bug in the server implementation of RTSP-over-HTTP could allow a buffer overflow, which could result in the execution of arbitrary code
January 10, 2019
LinuxSecurity.com: An authenticated user who can obtain a TGT using an older encryption type (DES, DES3, or RC4) can cause an assertion failure in the KDC by sending an S4U2Self request (CVE-2018-20217). References:
January 10, 2019
CES IoT security – do you know who your home is talking to?
There’s a digital treasure trove to be had in your home so you should take steps to protect it The post CES IoT security – do you know who your home is talking to? appeared first on WeLiveSecurity
January 10, 2019
LinuxSecurity.com: libgxps 0.3.1 release. – Fix font scaling when converting xps to pdf – Handle errors returned by archive_read_data in GXPSArchive – Ensure gxps_archive_read_entry() fills the GError in case of failure – Make the pdf generated by xpstopdf to be 96 dpi – Fix OUTPUT FILE description in man pages – Clear the GError before […]
January 10, 2019
LinuxSecurity.com: Security fix for CVE-2018-1000532, new non-root permissions and a few smaller fixes. Fix a directory traversal issue introduced with the fix for CVE-2018-1000532, and refuses to run as setuid root or via sudo to avoid any more priviledge escalation issue. —- Security fix for CVE-2018-1000532 and a few smaller fixes
January 10, 2019
LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.
January 10, 2019
LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.
January 10, 2019
LinuxSecurity.com: Several vulnerabilities were discovered in libcaca, a graphics library that outputs text: integer overflows, floating point exceptions or invalid memory reads may lead to a denial-of-service (application crash) if a malformed image file is processed.
January 9, 2019
ICEPick-3PC: A Sophisticated Adware That Collects Data En Masse
January 9, 2019
LinuxSecurity.com: An update that solves three vulnerabilities and has two fixes is now available.
January 9, 2019
LinuxSecurity.com: An update that fixes 13 vulnerabilities is now available.
January 9, 2019
Google Play Boots 85 Malicious Adware Apps
January 9, 2019
security update
January 9, 2019
security update
January 9, 2019
Type: Vulnerability. Microsoft Skype for Android is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Exchange Server is prone to an information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Exchange is prone to a remote memory-corruption vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Outlook is prone to an information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Visual Studio is prone to an information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft ASP.NET is prone to a denial-of-service vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Office SharePoint is prone to a cross-site scripting vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Office SharePoint is prone to a cross-site scripting vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft ASP.NET Core is prone to a remote denial-of-service vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft ASP.NET Core is prone to an information disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Word is prone to an information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Office is prone to an information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Office SharePoint is prone to a cross-site scripting vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows Subsystem for Linux is prone to a local information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Visual Studio is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
January 9, 2019
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
January 9, 2019
LinuxSecurity.com: Django could be made to expose spoofed information over the network.
January 9, 2019
LinuxSecurity.com: Several security issues were fixed in NSS.
January 9, 2019
ThreatList: WordPress Vulnerabilities Tripled in 2018
January 9, 2019
Biometrics in 2019: Increased Security or New Attack Vector?
January 9, 2019
The Promise and Peril of 5G
January 9, 2019
Intel Patches High-Severity Privilege-Escalation Bugs
January 9, 2019
Google Play Store spews malware onto 9 million ‘Droids
January 9, 2019
Automated phishing attack tool bypasses 2FA protection
January 9, 2019
Being paid to quit Facebook
January 9, 2019
Ethereum Classic hackers steal over $1.1M with 51% attacks
January 9, 2019
CES – singularity and securing the car
What’s in store for automotive security once cars morph into mobile living rooms and working spaces? And how about transportation at large? The post CES – singularity and securing the car appeared first on WeLiveSecurity
January 9, 2019
LinuxSecurity.com: Updates for rh-dotnet21-dotnet and rh-dotnet22-dotnet are now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
January 9, 2019
Risk Level: Very Low. Type: Trojan.
January 9, 2019
Risk Level: Very Low. Type: Trojan.
January 9, 2019
LinuxSecurity.com: The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file (CVE-2018-11468). DISCOUNT through version 2.2.3a is vulnerable to a Heap-based
January 8, 2019
LinuxSecurity.com: Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact (CVE-2018-16391).
January 8, 2019