July 16, 2018
DanaBot Trojan Targets Bank Customers In Phishing Scam
July 16, 2018
Who is the weakest link in software security?
July 16, 2018
Irishman extradited to the US to face charges relating to Silk Road
Gary Davis accused of working as an administrator for the notorious dark web marketplace appears in a federal court in New York The post Irishman extradited to the US to face charges relating to Silk Road appeared first on WeLiveSecurity
July 16, 2018
Western E-Tailers Set to Lose Nearly $19bn to Fraud
July 16, 2018
LinuxSecurity.com: CVE-2015-1854 A flaw was found while doing authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to
July 15, 2018
LinuxSecurity.com: It was discovered that there were two issues in znc, a modular IRC bouncer: * There was insufficient validation of lines coming from the network
July 15, 2018
Australia’s Airport Security Threatened by Hack
July 15, 2018
FBI: Email Account Compromise Losses Reach $12B
July 15, 2018
Russian intelligence officers indicted in DNC hacking
July 15, 2018
LinuxSecurity.com: Update to 4.9.7 security release. https://wordpress.org/news/2018/07/wordpress-4-9-7-security-and-maintenance- release/
July 15, 2018
LinuxSecurity.com: Security fix for CVE-2018-8009 —- Version update to 2.7.6. Fixes many open CVEs and bugs.
July 15, 2018
LinuxSecurity.com: Update to Sprockets 3.7.2. Fixes CVE-2018-3760: https://access.redhat.com/security/cve/cve-2018-3760
July 15, 2018
security update
July 14, 2018
LinuxSecurity.com: Several vulnerabilities were discovered in CUPS, the Common UNIX Printing System. These issues have been identified with the following CVE ids: CVE-2018-4180
July 14, 2018
LinuxSecurity.com: Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or attacks on encrypted emails.
July 14, 2018
Timehop Reveals More Personal Data Was Breached
July 14, 2018
WordPress Sites Targeted in World Cup-Themed Spam Scam
July 14, 2018
LinuxSecurity.com: Multiple vulnerabilities were found in the interpreter for the Ruby language. The Common Vulnerabilities and Exposures project identifies the following issues:
July 14, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.
July 14, 2018
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
July 14, 2018
LinuxSecurity.com: An update that fixes 15 vulnerabilities is now available.
July 14, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
July 14, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
July 14, 2018
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
July 14, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
July 14, 2018
LinuxSecurity.com: Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or attacks on encrypted emails.
July 13, 2018
You are not alone; Instagram is down for many
July 13, 2018
Reading Time: ~2 min.Ticketmaster Snafu Only Tip of the Iceberg After last month’s Ticketmaster breach, a follow-up investigation found it to be part of a larger payment card compromising campaign affecting more than 800 online retail sites worldwide. The cause of the breach appears to stem from the third-party breaches of several Ticketmaster suppliers, which […]
July 13, 2018
LinuxSecurity.com: gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification (CVE-2018-12020) SL6 x86_64 gnupg2-2.0.14-9.el6_10.x86_64.rpm gnupg2-debuginfo-2.0.14-9.el6_10.x86_64.rpm gnupg2-smime-2.0.14-9.el6_10.x86_64.rpm i386 gnupg2-2.0.14-9.el6_10.i686.rpm gnupg2-debuginfo-2.0.14-9.el6_10.i686.rpm gnupg2-smim [More…]
July 13, 2018
LinuxSecurity.com: Red Hat JBoss Core Services Pack Apache Server 2.4.29 packages are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score,
July 13, 2018
LinuxSecurity.com: Red Hat JBoss Core Services Pack Apache Server 2.4.29 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score,
July 13, 2018
LinuxSecurity.com: Red Hat JBoss Core Services Pack Apache Server 2.4.29 packages are now available. Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score,
July 13, 2018
Indian iPhone Spy Campaign Used Fake MDM Platform
July 13, 2018
Risk Level: Very Low. Type: Trojan.
July 13, 2018
LinuxSecurity.com: It was discovered that there was a symlink attack in the Cinnamon desktop environment. An attacker could overwrite an arbitrary file on the filesystem via
July 13, 2018
Risk Level: Very Low. Type: Trojan.
July 13, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2112
July 12, 2018
Cisco Patches High-Severity Bug in VoIP Phones
July 12, 2018
Timehop data breach is worse than they initially said
July 12, 2018
LinuxSecurity.com: Update to upstream version 9.4.11. Fixes CVE-2017-7656, CVE-2017-7657, CVE-2017-7658, CVE-2018-12538.
July 12, 2018
Insights Security Hardening Rules
July 12, 2018
LinuxSecurity.com: An update is now available for CloudForms Management Engine 5.9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
July 12, 2018
Facebook fined over data privacy scandal
Social media giant fined in the UK for failing to protect users’ personal information and for a lack of transparency The post Facebook fined over data privacy scandal appeared first on WeLiveSecurity
July 12, 2018
Not All Hacks Are Created Equal
July 12, 2018
This Is How Much a ‘Mega Breach’ Really Costs
July 12, 2018
Trends 2018: Doing time for cybercrime
Law enforcement and malware research join forces to take down cybercriminals The post Trends 2018: Doing time for cybercrime appeared first on WeLiveSecurity
July 12, 2018
Who’s Reading Your Gmail Messages?
July 12, 2018
Stolen Taiwanese Certs Used in Malware Campaign
July 12, 2018
Asian Countries Frequent Targets of APT Attacks
July 12, 2018
Cost of UK Data Breaches Rises to ?2.7m
July 12, 2018
LinuxSecurity.com: It was discovered that there was a discovered a path traversal flaw in ruby-sprockets, a Rack-based asset packaging system. A remote attacker could take advantage of this flaw to read arbitrary files outside an application’s root directory via “file://” requests.
July 12, 2018
LinuxSecurity.com: New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
July 12, 2018
LinuxSecurity.com: New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
July 12, 2018
Timehop admits to more data leakage, details GDPR danger
July 12, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2113
July 11, 2018
LinuxSecurity.com: An update for gnupg2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 11, 2018
LinuxSecurity.com: An update for gnupg2 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 11, 2018
Type: Vulnerability. Microsoft Access is prone to a remote code-execution vulnerability; fixes are available.
July 11, 2018
Type: Vulnerability. Microsoft Edge is prone to an information disclosure vulnerability; fixes are available.
July 11, 2018
Type: Vulnerability. Microsoft Windows is prone to a local security-bypass vulnerability; fixes are available.
July 11, 2018