August 31, 2018
How to retrofit the cloud for security: 2 essential steps
August 31, 2018
Security bods: Android system broadcasts enable user tracking
August 31, 2018
LinuxSecurity.com: CVE-2018-5740 The “deny-answer-aliases” feature in BIND has a flaw which can cause named to exit with an assertion failure.
August 30, 2018
LinuxSecurity.com: CVE-2018-10871 By default nsslapd-unhashed-pw-switch was set to ‘on’. So a copy of
August 30, 2018
New Threat Actor ‘Rocke’: A Rising Monero Cryptomining Menace
August 30, 2018
Type: Vulnerability. The Microsoft Windows LSASS service is prone to a remotely exploitable buffer overrun vulnerability; may allow arbitrary code execution.
August 30, 2018
LinuxSecurity.com: Several security issues were fixed in libx11.
August 30, 2018
LinuxSecurity.com: Several security issues were fixed in libx11.
August 30, 2018
LinuxSecurity.com: An update for OpenDaylight is now available for Red Hat OpenStack Platform 13.0 (Queens). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
August 30, 2018
LinuxSecurity.com: An update for ansible is now available for Red Hat OpenStack Platform 13.0 (Queens). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
August 30, 2018
LinuxSecurity.com: poppler could be made to crash if it received specially crafted PDF file.
August 30, 2018
Travel Breaches Hit Air Canada and Asia-Pac Hotelier
August 30, 2018
Instagram expands 2FA and account verification
The move is part of a three-pronged plan that is intended to bolster user trust and safety on the photo-sharing platform The post Instagram expands 2FA and account verification appeared first on WeLiveSecurity
August 30, 2018
A DDoS Knocked Spain’s Central Bank Offline
August 30, 2018
A False Sense of Security
August 30, 2018
LinuxSecurity.com: Several issues were discovered in libx11, the client interface to the X Windows System. The functions XGetFontPath, XListExtensions, and XListFonts are vulnerable to an off-by-one override on malicious server responses. A malicious server could also send a reply in which
August 30, 2018
Chinese hotel chain warns of massive customer data theft
August 29, 2018
Smashing Security #093: Abandoned domains and dating app dangers
August 29, 2018
BusyGasper Malware Packs a Simple but Potent Punch
August 29, 2018
Company that Sells Spyware to Domestic Abusers Hacked
August 29, 2018
Yahoo Persists in Scanning Emails for In-Depth Ad-Targeting
August 29, 2018
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 5.9 Long Life. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 29, 2018
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 29, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2570
August 29, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2557
August 29, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2571
August 29, 2018
High-Severity Flaws Patched in Schneider Electric Products
August 29, 2018
The 4 Critical Building Blocks for Digital Threat Hunting
August 29, 2018
Podcast: Plugging Leaky Data in the Cloud
August 29, 2018
Hackers faked Cosmos backend to hoodwink bank out of $13.5m
August 29, 2018
Researchers Shine Light on Smart-Bulb Data Theft
August 29, 2018
Semi-annual balance of mobile security
For Android, malware detections were down 27.48% compared to the first half of 2017; for iOS, they decreased 15% compared to the same period last year The post Semi-annual balance of mobile security appeared first on WeLiveSecurity
August 29, 2018
ICO Breach Complaints Jump 160% in a Year
August 29, 2018
Fiserv Flaw Exposed Customer Data at Hundreds of Banks
August 29, 2018
LinuxSecurity.com: Several issues were discovered in the Tomcat servlet and JSP engine. They could lead to unauthorized access to protected resources, denial-of-service, or information leak.
August 29, 2018
Intel Management Engine JTAG flaw proof-of-concept published
August 29, 2018
security update
August 29, 2018
LinuxSecurity.com: New kernel packages are available for Slackware 14.2 to mitigate security issues.
August 28, 2018
Crashing Mobile Apps Capture Screens, Leak Private Data
August 28, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
August 28, 2018
Facebook Flaw Allowed Remote Commands
August 28, 2018
LinuxSecurity.com: An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 28, 2018
LinuxSecurity.com: An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 28, 2018
LinuxSecurity.com: Multiple researchers have discovered a vulnerability in the way the Intel processor designs have implemented speculative execution of instructions in combination with handling of page-faults. This flaw could allow an attacker controlling an unprivileged process to read
August 28, 2018
LinuxSecurity.com: bind: processing of certain records when “deny-answer-aliases” is in use may trigger an assert leading to a denial of service (CVE-2018-5740) SL6 x86_64 bind-debuginfo-9.8.2-0.68.rc1.el6_10.1.i686.rpm bind-debuginfo-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm bind-libs-9.8.2-0.68.rc1.el6_10.1.i686.rpm bind-libs-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm bind-utils-9.8.2-0.68.rc1.el6_10.1 [More…]
August 28, 2018
LinuxSecurity.com: bind: processing of certain records when “deny-answer-aliases” is in use may trigger an assert leading to a denial of service (CVE-2018-5740) SL7 x86_64 bind-debuginfo-9.9.4-61.el7_5.1.i686.rpm bind-debuginfo-9.9.4-61.el7_5.1.x86_64.rpm bind-libs-9.9.4-61.el7_5.1.i686.rpm bind-libs-9.9.4-61.el7_5.1.x86_64.rpm bind-libs-lite-9.9.4-61.el7_5.1.i686.rpm bind-libs-lite-9. [More…]
August 28, 2018
LinuxSecurity.com: Several security issues were fixed in GD.
August 28, 2018
LinuxSecurity.com: An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
August 28, 2018
LinuxSecurity.com: An update for bind is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
August 28, 2018
LinuxSecurity.com: An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 28, 2018
Risk Level: Very Low. Type: Trojan.
August 28, 2018
6 Tips to Protect Your Online Business from Cyber Attacks
August 28, 2018
Microsoft Windows Zero-Day Found in Task Scheduler
August 28, 2018
PoC targeting critical Apache Struts bug found online
The discovery was made barely two days after the release of a patch that fixes the critical flaw in the web application framework The post PoC targeting critical Apache Struts bug found online appeared first on WeLiveSecurity
August 28, 2018
LinuxSecurity.com: This is the Six-Month notification for the retirement of Red Hat Enterprise Linux 6.4 Advanced Mission Critical (AMC). This notification applies only to those customers subscribed to the Advanced Mission Critical (AMC) channel for Red Hat Enterprise Linux 6.4.
August 28, 2018
ThreatList: Ransomware Attacks Down, Fileless Malware Up in 2018
August 28, 2018
Adobe Pushes Out Unscheduled Creative Cloud Application Fix
August 28, 2018
Lukáš Štefanko: I hope other app developers don’t follow Epic‘s example
After Epic Games shunned Google Play, debates about threats faced by Android users have taken on a whole new tenor. Joining us to add his voice to the mix is ESET Malware Researcher Lukáš Štefanko The post Lukáš Štefanko: I hope other app developers don’t follow Epic‘s example appeared first on WeLiveSecurity
August 28, 2018
How hackers managed to steal $13.5 million in Cosmos bank heist
August 28, 2018
Boffins bork motion control gear with the power of applied sound
August 28, 2018
Windows 0-day pops up out of nowhere Twitter
August 28, 2018
LinuxSecurity.com: An update that solves one vulnerability and has 6 fixes is now available.
August 28, 2018
LinuxSecurity.com: An update that solves one vulnerability and has 10 fixes is now available.
August 28, 2018
Risk Level: Very Low. Type: Trojan.
August 28, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
August 28, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
August 28, 2018
LinuxSecurity.com: Several vulnerabilities were discovered in Ruby 2.1. CVE-2016-2337
August 27, 2018
AT Command Hitch Leaves Android Phones Open to Attack
August 27, 2018
LinuxSecurity.com: The Bootstrap framework was found to have cross-site scripting vulnerabilities in the “collapse” plugin. For Debian 8 “Jessie”, this problem has been fixed in version
August 27, 2018
LinuxSecurity.com: The system could be made to expose sensitive information.
August 27, 2018