July 25, 2018
Facebook Security Exec Calls for Tightened Data Privacy
July 25, 2018
LinuxSecurity.com: New version of dcraw is available 9.28.0 Security fix for CVE-2018-5801
July 25, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2251
July 25, 2018
Risk Level: Very Low. Type: Trojan, Worm.
July 25, 2018
Security Technologies: ExecShield
July 25, 2018
Hook, line, and sinker: How to avoid looking ‘phish-y’
Top tips to help you avoid being caught receiving or sending phishing-looking emails The post Hook, line, and sinker: How to avoid looking ‘phish-y’ appeared first on WeLiveSecurity
July 25, 2018
Reading Time: ~4 min.According to the Identity Theft Research Center, 2017 saw 1,579 data breaches—a record high, and an almost 45 percent increase from the previous year. Like many IT service providers, you’re probably getting desensitized to statistics like this. But you still have to face facts: organizations will experience a security incident sooner or […]
July 25, 2018
Endpoint Concerns Blight IIoT Security
July 25, 2018
Two-Thirds of Organizations Hit in Supply-Chain Attacks
July 25, 2018
London Calling with New Strategies to Stop Ransomware
July 25, 2018
Safeguard your code: 17 tips to develop more-secure code
July 25, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
July 25, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
July 25, 2018
Risk Level: Very Low. Type: Trojan.
July 25, 2018
LinuxSecurity.com: A vulnerability has been discovered in Sympa, a modern mailing list manager, that allows write access to files on the server filesystem. This flaw allows to create or modify any file writable by the Sympa user, located on the server filesystem, using the function of Sympa
July 24, 2018
LinuxSecurity.com: The libarchive-zip-perl package is vulnerable to a directory traversal attack in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use
July 24, 2018
LinuxSecurity.com: CVE-2018-12584 A flaw in function ConnectionBase::preparseNewBytes of resip/stack/ConnectionBase.cxx has been detected, that
July 24, 2018
LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 24, 2018
LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 24, 2018
Kronos Banking Trojan Resurfaces After Years of Silence
July 24, 2018
Google Starts Labeling All HTTP Sites as ‘Not Secure’
July 24, 2018
LinuxSecurity.com: An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
July 24, 2018
LinuxSecurity.com: An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
July 24, 2018
LinuxSecurity.com: An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
July 24, 2018
LinuxSecurity.com: An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
July 24, 2018
security update
July 24, 2018
LinuxSecurity.com: Danny Grander reported that the unzip and untar tasks in ant, a Java based build tool like make, allow the extraction of files outside a target directory. An attacker can take advantage of this flaw by submitting a specially crafted Zip or Tar archive to an ant build to
July 24, 2018
Apache, IBM Patch Critical Cloud Vulnerability
July 24, 2018
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 24, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
July 24, 2018
Risk Level: Very Low. Type: Trojan, Worm.
July 24, 2018
Oracle Re-Patches Decade-Old Solaris Bug
July 24, 2018
Bluetooth bug could expose devices to snoopers
Patches have already been released or are expected to see the light of day soon The post Bluetooth bug could expose devices to snoopers appeared first on WeLiveSecurity
July 24, 2018
Supplier Error Leaks Decade of Data from Carmakers
July 24, 2018
Campaign’s Election Data Exposed in Virginia
July 24, 2018
LinuxSecurity.com: An update for rhev-hypervisor7 is now available for RHEV 3.X Hypervisor and Agents for Red Hat Enterprise Linux 6 and RHEV 3.X Hypervisor and Agents Extended Lifecycle Support for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact
July 24, 2018
LinuxSecurity.com: An update for rh-ror50-rubygem-sprockets is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 24, 2018
LinuxSecurity.com: An update for rh-ror42-rubygem-sprockets is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 24, 2018
LinuxSecurity.com: OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952) SL6 x86_64 java-1.8.0-openjdk-1.8.0.181-3.b13.el6_10.x86_64.rpm java-1.8.0-openjdk-debuginfo-1.8.0.181-3.b13.el6_10.x86_64.rpm java-1.8.0-openjdk-headless-1.8.0.181-3.b13.el6_10.x86_64.rpm java-1.8.0-openjdk-debug-1.8.0.181-3.b13.el6_10.x86_64.rpm java-1.8 [More…]
July 23, 2018
LinuxSecurity.com: Update to 1.2.6 to fix a local authenticated privilege escalation bug (CVE-2018-10900). The issue has been discovered and responsibly disclosed by Denis Andzakovic: https://pulsesecurity.co.nz/advisories/NM-VPNC-Privesc
July 23, 2018
New Spectre-Level Flaw Targets Return Stack Buffer
July 23, 2018
Spectre Will Haunt Us For a Long Time
July 23, 2018
LinuxSecurity.com: A regression that caused boot failures was fixed in the Linux kernel.
July 23, 2018
LinuxSecurity.com: A regression that caused boot failures was fixed in the Linux kernel.
July 23, 2018
Leaky Backup Spills 157 GB of Automaker Secrets
July 23, 2018
ThreatList: Supply-Chain Defenses Need Improvement
July 23, 2018
Major sites still largely lax on prompting users towards safer password choices, study finds
A study assessed whether or not the most popular English-language websites help users strengthen their security by providing them with guidance on creating safer passwords during account sign-up or password-change processes The post Major sites still largely lax on prompting users towards safer password choices, study finds appeared first on WeLiveSecurity
July 23, 2018
Has GDPR Impacted Insider Threats?
July 23, 2018
Attention Airline Passengers, Your Data Is at Risk
July 23, 2018
Don’t ignore application security | Salted Hash Ep 35
July 23, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Passenger, the worst of which could result in the execution of arbitrary code.
July 22, 2018
LinuxSecurity.com: CVE-2018-7033 Fix for issue in accounting_storage/mysql plugin by always escaping strings within the slurmdbd.
July 22, 2018
LinuxSecurity.com: Early versions of opencv have problems while reading data, which might result in either buffer overflows, out-of bounds errors or integer
July 22, 2018
Key takeaways from Singapore healthcare data breach
July 22, 2018
LinuxSecurity.com: The package networkmanager-vpnc before version 1.2.6-1 is vulnerable to privilege escalation.
July 21, 2018
LinuxSecurity.com: The package apache before version 2.4.34-1 is vulnerable to denial of service.
July 21, 2018
LinuxSecurity.com: The package znc before version 1.7.1-1 is vulnerable to multiple issues including privilege escalation and directory traversal.
July 21, 2018
The Fundamental Flaw in Security Awareness Programs
July 21, 2018
LinuxSecurity.com: Fabian Henneke discovered a cross-site scripting vulnerability in the password change form of GOsa, a web-based LDAP administration program.
July 21, 2018