July 5, 2018
Thunderbird gets its EFAIL patch
Chrome, Firefox pull invasive browser extension
July 5, 2018
Top 7 Most Popular and Best Cyber Forensics Tools
July 4, 2018
security update
July 4, 2018
security update
July 4, 2018
LinuxSecurity.com: Several security issues were fixed in the kernel.
July 4, 2018
LinuxSecurity.com: Several security issues were fixed in Exiv2.
July 4, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
July 4, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
July 4, 2018
Welcome to a New Look for Threatpost
July 4, 2018
ThreatList: Top Summer DDoS Trends
July 4, 2018
LinuxSecurity.com: The package git-annex before version 6.20180626-1 is vulnerable to multiple issues including arbitrary filesystem access and information disclosure.
July 4, 2018
LinuxSecurity.com: The package gitlab before version 11.0.1-1 is vulnerable to multiple issues including cross-site scripting and insufficient validation.
July 4, 2018
Going on vacation? Five things to do before you leave
You’ve set up an out-of-office auto-responder and packed your stuff, but have you done all of your “homework” before you rush out the front door for that well-deserved time off? The post Going on vacation? Five things to do before you leave appeared first on WeLiveSecurity
July 4, 2018
NHS Developer Error Leads to Data Leak
July 4, 2018
Ransomware: Not dead, just getting a lot sneakier
July 4, 2018
Huawei enterprise comms kit has a TLS crypto bug
July 4, 2018
LinuxSecurity.com: Fabian Henneke discovered a cross-site scripting vulnerability in the password change form of GOsa, a web-based LDAP administration program. For the stable distribution (stretch), this problem has been fixed in
July 3, 2018
LinuxSecurity.com: Several vulnerabilites have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of service or the execution of arbitrary code if a malformed file is parsed.
July 3, 2018
LinuxSecurity.com: libsoup could be made to crash if it received a specially crafted input.
July 3, 2018
LinuxSecurity.com: Two vulnerabilities affecting the cups printing server were found which can lead to arbitrary IPP command execution and denial of service.
July 3, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2001
July 3, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:1979
July 3, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:1997
July 3, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:1965
July 3, 2018
Typeform data breach exposes users of many websites
July 3, 2018
Britain’s tax authority reports takedown of record 20,000 fake sites
Her Majesty’s Revenue & Customs (HMRC) is “consistently the most abused government brand”, according to the National Cyber Security Centre (NCSC) The post Britain’s tax authority reports takedown of record 20,000 fake sites appeared first on WeLiveSecurity
July 3, 2018
HMRC: 29% Increase in Malicious Site Deactivations
July 3, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 2, 2018
LinuxSecurity.com: glibc: Buffer overflow in glob with GLOB_TILDE (CVE-2017-15670) * glibc: Buffer overflow during unescaping of user names with the ~ operator (CVE-2017-15804) SL6 x86_64 glibc-2.12-1.212.el6.i686.rpm glibc-2.12-1.212.el6.x86_64.rpm glibc-common-2.12-1.212.el6.x86_64.rpm glibc-debuginfo-2.12-1.212.el6.i686.rpm glibc-debuginfo-2.12-1.212.el6.x86_64.rpm glibc-debuginfo- [More…]
July 2, 2018
LinuxSecurity.com: libvirt: Resource exhaustion via qemuMonitorIORead() method (CVE-2018-5748) * libvirt: Incomplete fix for CVE-2018-5748 triggered by QEMU guest agent (CVE-2018-1064) SL6 x86_64 libvirt-0.10.2-64.el6.x86_64.rpm libvirt-client-0.10.2-64.el6.i686.rpm libvirt-client-0.10.2-64.el6.x86_64.rpm libvirt-debuginfo-0.10.2-64.el6.i686.rpm libvirt-debuginfo-0.10.2-64.el6.x86_64.rpm [More…]
July 2, 2018
LinuxSecurity.com: samba: Null pointer indirection in printer server process (CVE-2018-1050) SL6 x86_64 libsmbclient-3.6.23-51.el6.i686.rpm libsmbclient-3.6.23-51.el6.x86_64.rpm samba-client-3.6.23-51.el6.x86_64.rpm samba-common-3.6.23-51.el6.i686.rpm samba-common-3.6.23-51.el6.x86_64.rpm samba-debuginfo-3.6.23-51.el6.i686.rpm samba-debuginfo-3.6.23-51.el6.x86_64.rpm samba-winb [More…]
July 2, 2018
LinuxSecurity.com: zsh: Stack-based buffer overflow in gen_matches_files() at compctl.c (CVE-2018-1083) * zsh: buffer overflow when scanning very long directory paths for symbolic links (CVE-2014-10072) * zsh: buffer overrun in symlinks (CVE-2017-18206) * zsh: buffer overflow in utils.c:checkmailpath() can lead to local arbitrary code execution (CVE-2018-1100) SL6 x86_64 zsh-4.3.11-8.el6.x86_64.rpm [More…]
July 2, 2018
Risk Level: Very Low.
July 2, 2018
The principle of least privilege: A strategy of limiting access to what is essential
The principle of least privilege is a security strategy applicable to different areas, which is based on the idea of only granting those permissions that are necessary for the performance of a certain activity The post The principle of least privilege: A strategy of limiting access to what is essential appeared first on WeLiveSecurity
July 2, 2018
Phishing Cited by SMBs as Top Attack Threat
July 2, 2018
Natural Language Processing Fights Social Engineers
July 2, 2018
security update
July 1, 2018
Bug Bounty Programs Turn Attention to Data Abuse
July 1, 2018
Adidas US Website Hit by Data Breach
July 1, 2018
The 6 Worst Insider Attacks of 2018 – So Far
July 1, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
June 30, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has two fixes is now available.
June 30, 2018
Gentoo Linux on Github hacked; repositories modified
June 30, 2018
Ticketmaster Breach Discovered in April, Says Bank
June 30, 2018
Cyber-Attacks Caused 18 Days of NHS Downtime
June 30, 2018
LinuxSecurity.com: CVE-2017-7651 fix to avoid extraordinary memory consumption by crafted CONNECT packet from unauthenticated client
June 29, 2018
LinuxSecurity.com: CVE-2017-12872 / CVE-2017-12868 The (1) Htpasswd authentication source in the authcrypt module and (2)
June 29, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
June 29, 2018
Reading Time: ~2 min.Weaponized USB Drives Targeting Japan and South Korea In an effort to target air-gapped internal systems, a new wave of weaponized USB drives has been found throughout Japanese and South Korean organizations. While these attacks are relatively uncommon, that only heightens the threat as most companies are ill-prepared for such an attack […]
June 29, 2018
Hundreds of Hotels Hit in FastBooking Breach
June 29, 2018
Cyber Risk at All-Time High for UK Financial Sector
June 29, 2018
How (over)sharing on social media can trip you up
Profuse recounting of details from your life via social media may come at a price The post How (over)sharing on social media can trip you up appeared first on WeLiveSecurity
June 29, 2018