July 19, 2018
Ubisoft Games Hit by Massive DDoS Attacks
LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 13. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 19, 2018
Google slapped with €4.34bn fine by EU over antitrust violations
Tech giant has 90 days to comply with ruling or faces further penalties over ‘anti-competitive’ practices The post Google slapped with €4.34bn fine by EU over antitrust violations appeared first on WeLiveSecurity
July 19, 2018
LinuxSecurity.com: An update for fluentd is now available for Red Hat OpenStack Platform 13.0 Operational Tools for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 19, 2018
LinuxSecurity.com: This is the Six-Month notification for the retirement of Red Hat Enterprise Linux 6.7 Extended Update Support (EUS). This notification applies only to those customers subscribed to the Extended Update Support (EUS) channel for Red Hat Enterprise Linux 6.7.
July 19, 2018
US Orgs Overly Optimistic About Cyber-Readiness
July 19, 2018
LinuxSecurity.com: unzip and untar target tasks in ant allows the extraction of files outside the target directory. A crafted zip or tar file submitted to an Ant build could create or overwrite arbitrary files with the
July 19, 2018
Microsoft offers up to $100,000 to identity bug finders
July 19, 2018
British Airways cancelled flights at Heathrow after ‘IT system issue’
Thousands of British Airways passengers left stranded at Heathrow airport following incident The post British Airways cancelled flights at Heathrow after ‘IT system issue’ appeared first on WeLiveSecurity
July 19, 2018
LinuxSecurity.com: Jeriko One discovered two vulnerabilities in the ZNC IRC bouncer which could result in privilege escalation or denial of service. For the stable distribution (stretch), these problems have been fixed in
July 18, 2018
LinuxSecurity.com: A use-after-free was discovered in the MP4 demuxer of the VLC media player, which could result in the execution of arbitrary code if a malformed media file is played.
July 18, 2018
LinuxSecurity.com: New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
July 18, 2018
LinuxSecurity.com: CVE-2018-11439 Fix for a heap-based buffer over-read via a crafted audio file.
July 18, 2018
security update
July 18, 2018
security update
July 18, 2018
ThreatList: Popular Apps Get Enterprise Blacklisted
July 18, 2018
LinuxSecurity.com: New release (1:12.2.6-1) Security fix for CVE-2018-1128 Security fix for CVE-2018-1129 Security fix for CVE-2018-10861
July 18, 2018
LinuxSecurity.com: The package curl before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: The package libcurl-gnutls before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: The package libcurl-compat before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: The package lib32-libcurl-gnutls before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: The package lib32-libcurl-compat before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: The package lib32-curl before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: Several security issues were fixed in PolicyKit.
July 18, 2018
Smaller Nation State Attacks: A Growing Cyber Menace
July 18, 2018
SPECTRE Variant 1 scanning tool
July 18, 2018
Time to Yank Cybercrime into the Light
July 18, 2018
LinuxSecurity.com: A vulnerability was discovered in WordPress, a web blogging tool. It allowed remote attackers with specific roles to execute arbitrary code.
July 18, 2018
LinuxSecurity.com: A vulnerability in tqdm could allow remote attackers to execute arbitrary code.
July 18, 2018
security update
July 18, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.
July 17, 2018
LinuxSecurity.com: Multiple vulnerabilities have been discovered in various parsers of Blender, a 3D modeller/ renderer. Malformed .blend model files and malformed multimedia files (AVI, BMP, HDR, CIN, IRIS, PNG, TIFF) may result in the execution of arbitrary code.
July 17, 2018
LinuxSecurity.com: New mutt packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
July 17, 2018
800K Patient Records At Issue in ProCare Health Snafu
July 17, 2018
security update
July 17, 2018
LinuxSecurity.com: gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification (CVE-2018-12020) SL7 x86_64 gnupg2-2.0.22-5.el7_5.x86_64.rpm gnupg2-debuginfo-2.0.22-5.el7_5.x86_64.rpm gnupg2-smime-2.0.22-5.el7_5.x86_64.rpm gnupg2-2.0.22-5.el7_5.src.rpm – Scientific Linux Development Team
July 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
July 17, 2018
DDoS Attacks Get Bigger, Smarter and More Diverse
July 17, 2018
How to Teach Your Employees About Cybersecurity
July 17, 2018
A deep dive down the Vermin RAThole
ESET researchers have analyzed remote access tools cybercriminals have been using in an ongoing espionage campaign to systematically spy on Ukrainian government institutions and exfiltrate data from their systems The post A deep dive down the Vermin RAThole appeared first on WeLiveSecurity
July 17, 2018
Reading Time: ~3 min.While one-click shopping on Amazon (or Webroot.com, for that matter) seems super easy when you’re the consumer, there are a lot of complex strategies and processes going on behind the scenes. We chat with Cathy Ondrak, product owner for Webroot.com, to get a glimpse behind the curtain. In her role, Cathy works […]
July 17, 2018
LinuxSecurity.com: The package thunderbird before version 52.9.1-1 is vulnerable to multiple issues including arbitrary code execution, cross-site request forgery and information disclosure.
July 17, 2018
‘007’ code helps stop Spectre exploits before they exist
July 17, 2018
21-year-old woman charged with hacking Selena Gomez
July 16, 2018
LinuxSecurity.com: A timing attack was discovered in the function for CSRF token validation of the “Ruby rack protection” framework. For the stable distribution (stretch), this problem has been fixed in
July 16, 2018
No Evidence of GandCrab Leveraging SMB Exploit – Yet
July 16, 2018
security update
July 16, 2018
security update
July 16, 2018
LinuxSecurity.com: The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo
July 16, 2018
LinuxSecurity.com: – Security fix for CVE-2017-9258, CVE-2017-9259, CVE-2017-9260
July 16, 2018
DanaBot Trojan Targets Bank Customers In Phishing Scam
July 16, 2018
Who is the weakest link in software security?
July 16, 2018