May 17, 2018
security update
May 17, 2018
LinuxSecurity.com: The package zathura-pdf-mupdf before version 0.3.3-3 is vulnerable to multiple issues including arbitrary code execution and denial of service.
May 17, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 5 for Red Hat Enterprise Linux 5 and Red Hat JBoss Enterprise Application Platform 5 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact
May 17, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 5 for Red Hat Enterprise Linux 5 and Red Hat JBoss Enterprise Application Platform 5 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact
May 17, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
May 17, 2018
LinuxSecurity.com: The package runc before version 1.0.0rc5+19+g69663f0b-1 is vulnerable to privilege escalation.
May 17, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Data Grid. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 17, 2018
Podcast: The Evolution of Deception Technology
May 17, 2018
Phishing Spy Campaign Targets Top Mideast Officials
May 17, 2018
LinuxSecurity.com: New upstream bugfix release, includes security fix for CVE-2017-18266
May 17, 2018
Suspected member of The Dark Overlord arrested in Serbia
The Dark Overlord, known for a number of breaches and cyber-extortion campaigns in the last two years, is believed to have made US$275,000 from various schemes The post Suspected member of The Dark Overlord arrested in Serbia appeared first on WeLiveSecurity
May 17, 2018
LinuxSecurity.com: New upstream bugfix release, includes security fix for CVE-2017-18266
May 17, 2018
Last call for GDPR
With the deadline fast approaching SMBs are reminded of what is required to become compliant The post Last call for GDPR appeared first on WeLiveSecurity
May 17, 2018
US Government Cybersecurity at a Crossroads
May 17, 2018
Rail Europe data breach lasted almost three months
May 17, 2018
LinuxSecurity.com: New php packages are available for Slackware 14.0, 14.1, and 14.2 to fix security issues.
May 17, 2018
LinuxSecurity.com: New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
May 17, 2018
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
May 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
May 17, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has three fixes is now available.
May 17, 2018
LinuxSecurity.com: OSS-fuzz, assisted by Max Dymond, discovered that cURL, an URL transfer library, could be tricked into reading data beyond the end of a heap based buffer when parsing invalid headers in an RTSP response.
May 16, 2018
LinuxSecurity.com: It was discovered that there was an issue in the curl a command-line tool for downloading (eg.) data over HTTP. curl could have be tricked into reading data beyond the end of a heap
May 16, 2018
security update
May 16, 2018
LinuxSecurity.com: Several security issues were fixed in PHP.
May 16, 2018
EFAIL Opens Up Encrypted Email to Prying Eyes
May 16, 2018
Chili’s Doesn’t Leave Data Breach on the Back Burner
May 16, 2018
Google to require Android device-makers to roll out OS security patches regularly
The move is intended to help address the mobile platform’s perennial problem – that many manufacturers of Android-powered devices are slow to get software updates out the door The post Google to require Android device-makers to roll out OS security patches regularly appeared first on WeLiveSecurity
May 16, 2018
Seven out of ten see criminal hacking as big risk to health, safety, prosperity
Recent survey shows that adults in the US view computer hacking as a major threat to their quality of life The post Seven out of ten see criminal hacking as big risk to health, safety, prosperity appeared first on WeLiveSecurity
May 16, 2018
Mexican Banks Lose Millions in SWIFT-like Attacks
May 16, 2018
Chili’s Suffers Data Breach
May 16, 2018
Ex-CIA man named as suspect in Vault 7 leak
May 15, 2018
security update
May 15, 2018
Reading Time: ~2 min.Smartphone apps make life easier, more productive, and more entertaining. But can you trust every app you come across? Malicious mobile apps create easy access to your devices for Android and iOS malware to wreak havoc. And there are many untrusted and potentially dangerous apps lurking around in app stores determined to […]
May 15, 2018
Attackers Use UPnP to Sidestep DDoS Defenses
May 15, 2018
Researchers reveal flaws that may expose encrypted emails to prying eyes
A team of academics says that, if exploited, the vulnerabilities can reveal the plain text of encrypted emails, including those sent years ago The post Researchers reveal flaws that may expose encrypted emails to prying eyes appeared first on WeLiveSecurity
May 15, 2018
LinuxSecurity.com: Several security issues were fixed in PHP.
May 15, 2018
A tale of two zero-days
Double zero-day vulnerabilities fused into one. A mysterious sample enables attackers to execute arbitrary code with the highest privileges on intended targets The post A tale of two zero-days appeared first on WeLiveSecurity
May 15, 2018
White Hat Spoofs 2FA, Sends User to Phishing Page
May 15, 2018
NCA: Organized Cybercrime Continues to Rise
May 15, 2018
LinuxSecurity.com: A vulnerability has been found in mpv that may allow a remote attacker to execute arbitrary code.
May 14, 2018
LinuxSecurity.com: The package firefox before version 60.0-1 is vulnerable to multiple issues including arbitrary code execution, same-origin policy bypass, access restriction bypass, content spoofing, denial of service, information disclosure and sandbox escape.
May 14, 2018
LinuxSecurity.com: The package webkit2gtk before version 2.20.2-1 is vulnerable to arbitrary code execution.
May 14, 2018
LinuxSecurity.com: The package llpp before version 27-2 is vulnerable to multiple issues including arbitrary code execution and denial of service.
May 14, 2018
LinuxSecurity.com: Fabian Vogt discovered that incorrect permission handling in the PAM module of the KDE Wallet could allow an unprivileged local user to gain ownership of arbitrary files.
May 14, 2018
LinuxSecurity.com: Security fix for CVE-2018-10380
May 14, 2018
LinuxSecurity.com: Security fix for CVE-2018-10380
May 14, 2018
Despite Efail, the sky is not falling
May 14, 2018
Navy names new attack sub HMS Agincourt
May 14, 2018
WannaCryptor: The curious tale of a ravenous cryptoworm
Do you still remember how WannaCryptor ran its – winding – course? It was a tale that revealed a number of intriguing plot lines amid the ransomworm’s numerous twists and turns. The post WannaCryptor: The curious tale of a ravenous cryptoworm appeared first on WeLiveSecurity
May 14, 2018