LinuxSecurity.com: An update that contains security fixes can now be installed.
September 16, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.
September 16, 2018
Canadian town forced to pay Bitcoin after nasty ransomware attack
September 16, 2018
Russian Cybercriminal Pleads Guilty to Operating Kelihos Botnet
September 16, 2018
Apple removes top anti-malware apps from its store for “stealing data”
September 16, 2018
Pakistani hacker reports address bar spoofing flaws in Edge & Safari browser
September 16, 2018
Potential Hurricane Florence Phishing Scams
September 16, 2018
New GandCrab variant attacks Florida School District
September 16, 2018
LinuxSecurity.com: zutils version prior to version 1.8-pre2 contains a buffer overflow vulnerability in zcat which happened with some input files when the ‘-v, –show-nonprinting’ option was
September 15, 2018
security update
September 15, 2018
Official mobile version of Tor Browser released for Android – Download now
September 15, 2018
ICO Swamped with GDPR Breach Over-Reporting
September 15, 2018
DDoS attacks: Students blamed for many university cyber attacks
September 15, 2018
LinuxSecurity.com: New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
September 15, 2018
Researchers Heat Up Cold-Boot Attack That Works on All Laptops
September 14, 2018
E.U.: Tech Giants Face Big Fines, 1 Hour Limit to Remove Extremist Content
September 14, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2692
September 14, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2693
September 14, 2018
Security procedures are good – follow them and you get to keep your job
September 14, 2018
Five Weakest Links in Cybersecurity That Target the Supply Chain
September 14, 2018
Reading Time: ~2 min.Massive Customer Database Left Exposed by Data Management Firm A security researcher recently found a database containing customer information for nearly half a billion users of Veeam software on an unsecured AWS server. Most of the data was contact information spanning from 2013 to 2017 and was likely used by the Veeam […]
September 14, 2018
Magecart Threat Group Racks Up More Hack Victims
September 14, 2018
Veeam holds its hands up, admits database leak was plain ‘complacency’
September 14, 2018
Kernel sanders: Webroot vuln creates route to root Macs
September 14, 2018
LinuxSecurity.com: Updated ntp packages fix security vulnerability: Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6
September 13, 2018
LinuxSecurity.com: Updated flash-player-plugin packages fix security vulnerability: Successful exploitation of the currently un-disclosed vulerability could lead to information disclosure (CVE-2018-15967).
September 13, 2018
LinuxSecurity.com: New ghostscript packages are available for Slackware 14.2 and -current to fix security issues.
September 13, 2018
OilRig APT Continues Its Ongoing Malware Evolution
September 13, 2018
Princely five years in US big house for Nigerian biz email scammer
September 13, 2018
Former Detroit IT boss sent down 20 months for bathroom bung bonanza
September 13, 2018
ThreatList: Microsoft Macros Remain Top Vector for Malware Delivery
September 13, 2018
LinuxSecurity.com: An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 13, 2018
Programmer’s Day: Resources to audit your code
Taking advantage of the celebration of the Day of the Programmer, we share some audit tools to evaluate the security of your code The post Programmer’s Day: Resources to audit your code appeared first on WeLiveSecurity
September 13, 2018
Experts Bemoan Shortcomings with IoT Security Bill
September 13, 2018
Prison for man who assisted scareware scheme that targeted newspaper website
September 13, 2018
The Reg takes the US government’s insider threat training course
September 13, 2018
Kodi add-ons launch cryptomining campaign
ESET researchers have discovered several third-party add-ons for the popular open-source media player Kodi being used to distribute Linux and Windows cryptocurrency-mining malware The post Kodi add-ons launch cryptomining campaign appeared first on WeLiveSecurity
September 13, 2018
Solid password practice on Capital One’s site? Don’t bank on it
September 13, 2018
Risk Level: Very Low. Type: Trojan.
September 13, 2018
LinuxSecurity.com: USN-3747-1 introduced a regression in OpenJDK 10.
September 12, 2018
security update
September 12, 2018
security update
September 12, 2018
PowerShell Obfuscation Ups the Ante on Antivirus
September 12, 2018
Type: Vulnerability. Microsoft ChakraCore Scripting Engine is prone to a remote memory-corruption vulnerability; fixes are available.
September 12, 2018
Type: Vulnerability. Microsoft Internet Explorer is prone to a security-bypass vulnerability; fixes are available.
September 12, 2018
Type: Vulnerability. Microsoft Edge is prone to a remote code-execution vulnerability; fixes are available.
September 12, 2018
Type: Vulnerability. Microsoft ChakraCore Scripting Engine is prone to a remote memory-corruption vulnerability; fixes are available.
September 12, 2018
Type: Vulnerability. Microsoft Exchange Server is prone to a remote code-execution vulnerability; fixes are available.
September 12, 2018
Type: Vulnerability. Microsoft ChakraCore Scripting Engine is prone to a remote memory-corruption vulnerability; fixes are available.
September 12, 2018
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.
September 12, 2018
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability; fixes are available.
September 12, 2018
Type: Vulnerability. Microsoft Edge is prone to a remote privilege-escalation vulnerability; fixes are available.
September 12, 2018
Whisky business: Uni of Edinburgh servers Irn-Scru’d by cyber-attack
September 12, 2018
Apple Yet to Patch Safari Browser Address Bar Spoofing Flaw
September 12, 2018
Osiris Banking Trojan Displays Modern Malware Innovation
September 12, 2018
TV License website said it was secure. It wasn’t
September 12, 2018
Researchers demonstrate how to unlock Tesla wireless key fobs in 2 seconds
September 12, 2018
Patch Tuesday: Microsoft plugs zero-day hole exploited by PowerPool
Microsoft and Adobe have each shipped out their scheduled batches of patches to address security flaws in their respective software The post Patch Tuesday: Microsoft plugs zero-day hole exploited by PowerPool appeared first on WeLiveSecurity
September 12, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has two fixes is now available.
September 12, 2018
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
September 12, 2018
LinuxSecurity.com: An update that solves one vulnerability and has four fixes is now available.
September 12, 2018
LinuxSecurity.com: Two input sanitization failures have been found in the faxrunq and faxq binaries in mgetty. An attacker could leverage them to insert commands via shell metacharacters in jobs id and have them executed with the
September 12, 2018
LinuxSecurity.com: It was discovered that there was a denial of service and a potential arbitrary code execution vulnerability in the kamailio SIP server. A specially-crafted SIP message with an invalid “Via” header could cause a
September 12, 2018
LinuxSecurity.com: An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
September 12, 2018
LinuxSecurity.com: An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
September 12, 2018
Explore the threat landscape at Sophos ‘See the Future’ event
September 12, 2018
2-bit punks’ weak 40-bit crypto didn’t help Tesla keyless fobs one bit
September 12, 2018
Brit armed forces still don’t have enough techies, thunder MPs
September 12, 2018
LinuxSecurity.com: Updates for rh-dotnet21 and rh-dotnet21-dotnet are now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Low.
September 12, 2018
Risk Level: Very Low. Type: Trojan.
September 12, 2018
Threatlist: Email Attacks Surge, Targeting Execs
September 11, 2018
LinuxSecurity.com: Two input sanitization failures have been found in the faxrunq and faxq binaries in mgetty, a smart modem getty replacement. An attacker could leverage them to insert commands via shell metacharacters in jobs id and have them executed with the privilege of the faxrunq/faxq user.
September 11, 2018
Security firm uses Twitter to disclose critical zero-day flaw in Tor Browser
September 11, 2018
Microsoft Patches Three Actively Exploited Bugs as Part of Patch Tuesday
September 11, 2018
LinuxSecurity.com: Zsh could be made to execute arbitrary code if it received a specially crafted script.
September 11, 2018
security update
September 11, 2018
LinuxSecurity.com: Henning Westerholt discovered a flaw related to the Via header processing in kamailio, a very fast, dynamic and configurable SIP server. An unauthenticated attacker can take advantage of this flaw to mount a denial of service attack via a specially crafted SIP message
September 11, 2018
Bad Actors Sizing Up Systems Via Lightweight Recon Malware
September 11, 2018
Millions of Records Exposed in Veeam Misconfigured Server
September 11, 2018
When is a patch not a patch? When it’s for this McAfee password bug
September 11, 2018
LinuxSecurity.com: A security update is now available for Red Hat JBoss Enterprise Application Platform from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
September 11, 2018
Law firm seeking leak victims to launch £500m suit at British Airways
September 11, 2018
Live broadcast: Threat hunting in the modern attack landscape
September 11, 2018
Adobe Patches Six Critical Flaws in ColdFusion
September 11, 2018
Abandoning a domain name can come back to bite you, research shows
A domain name once left behind can catch up with you – by giving fraudsters access to a treasure trove of sensitive information The post Abandoning a domain name can come back to bite you, research shows appeared first on WeLiveSecurity
September 11, 2018
Magecart Group Pinned in Recent British Airways Breach
September 11, 2018
LinuxSecurity.com: Several security issues were fixed in the kernel.
September 11, 2018
Email security crisis… What email security crisis?
September 11, 2018