August 3, 2018
LinuxSecurity.com: It was found that the security update of busybox announced as DLA-1445-1 to prevent the exploitation of CVE-2011-5325, a symlinking attack, was too strict in case of cpio archives. This update restores the old behavior.
August 3, 2018
DHS Launches Cyber-Risk Management Center
August 3, 2018
Reddit Breached After SMS 2FA Fail
August 3, 2018
Reading Time: ~2 min.Cryptojacking “Game” Found on Steam Store Valve has taken recent action against an indie-developed game available on Steam, the company’s game/app store, and removed their listing after many customers had complained about cryptomining slowing their systems, once launched. Additionally, the developers have been caught selling in-game items on third-party sites, that were […]
August 3, 2018
LinuxSecurity.com: Various vulnerabilities were discovered in graphicsmagick, a collection of image processing tools and associated libraries, resulting in denial of service, information disclosure, and a variety of buffer overflows and overreads.
August 3, 2018
security update
August 3, 2018
LinuxSecurity.com: New lftp packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
August 2, 2018
LinuxSecurity.com: Several vulnerabilities were discovered in libsmpack, a library used to handle Microsoft compression formats. A remote attacker could craft malicious CAB, CHM or KWAJ files and use these flaws to cause a denial of service via application crash, or potentially execute arbitrary code.
August 2, 2018
LinuxSecurity.com: openslp: Heap memory corruption in slpd/slpd_process.c allows denial of service or potentially code execution (CVE-2017-17833) SL6 x86_64 openslp-2.0.0-3.el6.i686.rpm openslp-2.0.0-3.el6.x86_64.rpm openslp-debuginfo-2.0.0-3.el6.i686.rpm openslp-debuginfo-2.0.0-3.el6.x86_64.rpm openslp-devel-2.0.0-3.el6.i686.rpm openslp-devel-2.0.0-3.el6.x86_64.rpm openslp-server- [More…]
August 2, 2018
ThreatList: Spam’s Revival is Tied to Adobe Flash’s Demise
August 2, 2018
LinuxSecurity.com: New version 2.6.2. Security fix for CVE-2018-14339, CVE-2018-14340, CVE-2018-14341, CVE-2018-14342, CVE-2018-14343, CVE-2018-14344, CVE-2018-14367, CVE-2018-14368, CVE-2018-14369, CVE-2018-14370.
August 2, 2018
LinuxSecurity.com: Update to 6.6. —- Version 6.5 – address CVE-2018-10773, CVE-2018-10774, CVE-2018-10775 – fix injection of Fedora LDFLAGS
August 2, 2018
LinuxSecurity.com: Update to 6.6. —- Version 6.5 – address CVE-2018-10773, CVE-2018-10774, CVE-2018-10775 – fix injection of Fedora LDFLAGS
August 2, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has two fixes is now available.
August 2, 2018
Phishing Campaign Steals Money From Industrial Companies
August 2, 2018
Cisco drops a cool $2.3 billion on SaaSy outfit Duo Security
August 2, 2018
Podcast: Breaking Down the COSCO Ransomware Attack
August 2, 2018
Reading Time: ~6 min.Cybercriminals are constantly experimenting with new ways to take money from their victims. Their tactics evolve quickly to maximize returns and minimize risk. The emergence of cryptocurrency has opened up new opportunities to do just that. To better understand today’s threat landscape, it’s worth exploring the origins of cryptocurrencies and the progress […]
August 2, 2018
Reddit hacked – but don’t give up on 2FA just yet
August 2, 2018
LinuxSecurity.com: Several security issues were fixed in ClamAV.
August 2, 2018
Reddit reveals breach as attacker circumvents staff’s 2FA
The company has learned the hard way that there are better ways to deliver two-factor authentication than via text messages The post Reddit reveals breach as attacker circumvents staff’s 2FA appeared first on WeLiveSecurity
August 2, 2018
A single ransomware creator made almost $6 million
August 2, 2018
Yale University discloses old school data breach
August 2, 2018
Spam is getting smarter and we’re still falling for it
August 2, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in mutt, a sophisticated text-based Mail User Agent, resulting in denial of service, stack-based buffer overflow, arbitrary command execution, and directory traversal
August 2, 2018
UK.gov ploughs cash into creaky police technology
August 2, 2018
LinuxSecurity.com: The security update of busybox announced as DLA-1445-1 introduced a regression due to an incomplete fix for CVE-2015-9261. It was no longer possible to decompress gzip archives which exceeded a certain file size.
August 2, 2018
Do you work in a regulated industry?
August 2, 2018
New Zealand school on naughty step after ransomware failure
August 2, 2018
LinuxSecurity.com: New blueman packages are available for Slackware 14.2 and -current to fix a security issue.
August 2, 2018
DOJ Nabs Three FIN7 Cybercrime Suspects in Europe
August 1, 2018
security update
August 1, 2018
LinuxSecurity.com: Several security issues were fixed in libmspack.
August 1, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
August 1, 2018
LinuxSecurity.com: An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
August 1, 2018
LinuxSecurity.com: Security critical patch update for OpenJDK (July CPU). See http://www.oracle.com/technetwork/security- advisory/cpujul2018-4258247.html#AppendixJAVA
August 1, 2018
LinuxSecurity.com: Security critical patch update for OpenJDK (July CPU). See http://www.oracle.com/technetwork/security- advisory/cpujul2018-4258247.html#AppendixJAVA
August 1, 2018
LinuxSecurity.com: # New upstream release 2.3 Fixes possible tag truncation security bug in AEAD API, see RHBZ#1602752 ## 2.3 – 2018-07-18 * SECURITY ISSUE: finalize_with_tag() allowed tag truncation by default which can allow tag forgery in some cases. The method now enforces the min_tag_length provided to the GCM constructor. * Added support for Python 3.7. […]
August 1, 2018
Risk Level: Very Low.
August 1, 2018
Amnesty International Targeted by Nation-State Spyware
August 1, 2018
Android apps infected with umm… *Windows* malware
August 1, 2018
Phone scam exploits Russian hacking fears
August 1, 2018
HP offers rewards for hacking its printers
But don’t get too excited just yet: the first-of-its-kind bug bounty program for printers is invite-only for now The post HP offers rewards for hacking its printers appeared first on WeLiveSecurity
August 1, 2018
New Spectre Variant Hits the Network
August 1, 2018
Clarksons says single user account to blame for data breach
August 1, 2018
Conversation hijacking attacks | Salted Hash Ep 38
August 1, 2018
Oooooh! Fashion! Yes, breach did contain 1 million+ records
August 1, 2018
UK cyber security boffins dispense Ubuntu 18.04 wisdom
August 1, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may result in incorrect processing of HTTP/FTP, directory traversal, command injection, unintended socket creation or information disclosure.
July 31, 2018
ThreatList: Business Email Compromises Way Up for Q2
July 31, 2018
LinuxSecurity.com: Update zziplib to 0.13.69 version, fixes all known CVEs for the package.
July 31, 2018
LinuxSecurity.com: Security fix for CVE-2018-13988.
July 31, 2018
HP Offers Up to $10,000 Rewards for Printer Bugs
July 31, 2018
LinuxSecurity.com: Denis Andzakovic discovered that network-manager-vpnc, a plugin to provide VPNC support for NetworkManager, is prone to a privilege escalation vulnerability. A newline character can be used to inject a
July 31, 2018
OneDrive app for Android updated with fingerprint authentication
With this update, Microsoft is bringing a feature for Android users that has been available on iOS devices for quite a while now The post OneDrive app for Android updated with fingerprint authentication appeared first on WeLiveSecurity
July 31, 2018
UK CNP Fraud Drops as Banks Fight Back
July 31, 2018
Idaho Inmates Hack Tablets for Extra Credits
July 31, 2018
Inmates hack tablets for free credits prison
The nature of the vulnerability hasn’t been disclosed, but is said to have already been identified and fixed The post Inmates hack tablets for free credits prison appeared first on WeLiveSecurity
July 31, 2018
LinuxSecurity.com: New seamonkey packages are available for Slackware 14.2 and -current to fix security issues.
July 31, 2018
LinuxSecurity.com: New file packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
July 31, 2018
security update
July 30, 2018
LinuxSecurity.com: Several security issues were fixed in MySQL.
July 30, 2018
LinuxSecurity.com: yum-utils: reposync: improper path validation may lead to directory traversal (CVE-2018-10897) SL6 noarch yum-plugin-aliases-1.1.30-42.el6_10.noarch.rpm yum-plugin-changelog-1.1.30-42.el6_10.noarch.rpm yum-plugin-ovl-1.1.30-42.el6_10.noarch.rpm yum-plugin-security-1.1.30-42.el6_10.noarch.rpm yum-plugin-tmprepo-1.1.30-42.el6_10.noarch.rpm yum-plugin-verify-1.1.30-42.e [More…]
July 30, 2018
LinuxSecurity.com: OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952) SL6 x86_64 java-1.7.0-openjdk-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm java-1.7.0-openjdk-debuginfo-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm java-1.7.0-openjdk-devel-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm java-1.7.0-openjdk-demo-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm [More…]
July 30, 2018