Zebrocy heavily used by the Sednit group over last two years The post Sednit update: Analysis of Zebrocy appeared first on WeLiveSecurity
April 24, 2018
Sednit update: Analysis of Zebrocy
Ransomware runs rampant in 2017, Verizon report finds
Social engineering attacks that involve pretexting nearly tripled on an annual basis while phishing simulations show that curiosity gets the better of 4% of people. The post Ransomware runs rampant in 2017, Verizon report finds appeared first on WeLiveSecurity
April 24, 2018
Mingis on Tech: The lowdown on Android security
April 24, 2018
LinuxSecurity.com: An update for python-paramiko is now available for Red Hat Ansible Engine 2.4 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which
April 24, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 24, 2018
LinuxSecurity.com: The system could be made to crash or run programs as an administrator.
April 24, 2018
Massive cyber attack targets mid-Atlantic nation ‘Berylia’
April 24, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 24, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 24, 2018
LinuxSecurity.com: The system could be made to crash under certain conditions.
April 24, 2018
LinuxSecurity.com: The system could be made to crash under certain conditions.
April 24, 2018
LinuxSecurity.com: An update that fixes 13 vulnerabilities is now available.
April 24, 2018
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
April 24, 2018
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
April 24, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the execution of arbitrary code.
April 24, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
April 24, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
April 24, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
April 24, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
April 24, 2018
security update
April 24, 2018
Muhstik Botnet Exploits Highly Critical Drupal Bug
April 23, 2018
Reading Time: ~4 min.According to the Identity Theft Research Center, in 2017 alone, nearly 158 million social security numbers were stolen as a result of 1579 data breaches. Once a cybercriminal has access to your personal info, they can open credit cards, take out loans that quickly ruin your credit, or leave you with a […]
April 23, 2018
Join us in San Francisco at the 2018 Red Hat Summit
April 23, 2018
Prick up your ears! There’s a new biometric in town
April 23, 2018
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 23, 2018
Firms using WebEx at risk of poisoned Flash attacks
April 23, 2018
5 Tips to Make your Online Business Secure from Hackers
April 23, 2018
LinuxSecurity.com: Multiple vulnerabilities were found in the interpreter for the Ruby language. The Common Vulnerabilities and Exposures project identifies the following issues:
April 23, 2018
LinuxSecurity.com: Multiple vulnerabilities were found in the interpreter for the Ruby language. The Common Vulnerabilities and Exposures project identifies the following issues:
April 23, 2018
LinuxSecurity.com: An update for rh-perl524-perl is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
April 23, 2018
Single single-sign-on SNAFU threatens three Cisco products
April 23, 2018
Brains behind seL4 secure microkernel begin RISC-V chip port
April 23, 2018
LinuxSecurity.com: A vulnerability has been found in librelp that may allow a remote attacker to execute arbitrary code.
April 22, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in unADF that may allow a remote attacker to execute arbitrary code.
April 22, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in mbed TLS, the worst of which could allow remote attackers to execute arbitrary code.
April 22, 2018
LinuxSecurity.com: Gentoo’s tenshi ebuild is vulnerable to privilege escalation due to the way pid files are handled.
April 22, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Quagga, the worst of which could allow remote attackers to execute arbitrary code.
April 22, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in ClamAV, the worst of which may allow remote attackers to execute arbitrary code.
April 22, 2018
Cybercrime Economy Generates $1.5 Trillion a Year
April 22, 2018
Email attacks continue to cause headaches for companies
April 22, 2018
LinuxSecurity.com: It was discovered that there was an issue in the gunicorn HTTP server for Python applicatons where CRLF sequences could result in an attacker tricking the server into returning arbitrary headers.
April 22, 2018
LinuxSecurity.com: Security fix for CVE-2018-1000115, which disables the UDP port by default.
April 22, 2018
LinuxSecurity.com: Updated to securityupdate u171
April 22, 2018
security update
April 21, 2018
security update
April 21, 2018
LinuxSecurity.com: An update that solves four vulnerabilities and has one errata is now available.
April 21, 2018
LinuxSecurity.com: Security fix for CVE-2017-18197
April 21, 2018
LinuxSecurity.com: Upstream announcement: **Version 1.3.6** This is a security update to the stable version 1.3. It primarily fixes a recently discovered IMAP command injection vulnerability caused by insufficient input validation within the archive plugin. Details about the vulnerability are published under CVE-2018-9846. Additionally, we back-ported some minor fixes from the master
April 21, 2018
LinuxSecurity.com: – update to the latest upstream release (fixes CVE-2018-1000168)
April 21, 2018
LinuxSecurity.com: This release provides Perl 5.24.4 that fixes a heap buffer overflow in the pack() function and two overflows in the regular expression engine.
April 21, 2018
LinuxSecurity.com: This release provides Perl 5.24.4 that fixes a heap buffer overflow in the pack() function and two overflows in the regular expression engine.
April 21, 2018
LinuxSecurity.com: Security fix for CVE-2017-18197
April 21, 2018
LinuxSecurity.com: Upstream announcement: **Version 1.3.6** This is a security update to the stable version 1.3. It primarily fixes a recently discovered IMAP command injection vulnerability caused by insufficient input validation within the archive plugin. Details about the vulnerability are published under CVE-2018-9846. Additionally, we back-ported some minor fixes from the master
April 21, 2018
LinuxSecurity.com: An update that fixes 33 vulnerabilities is now available.
April 21, 2018
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
April 21, 2018
LinuxSecurity.com: Two vulnerabilities were discovered in LibreOffice’s code to parse MS Word and Structured Storage files, which could result in denial of service and potentially the execution of arbitrary code if a malformed file is opened.
April 20, 2018
British teen who hacked CIA chief gets two years in prison
April 20, 2018
LinuxSecurity.com: Multiple vulnerabilities have been discovered in the image loading library for Simple DirectMedia Layer 2, which could result in denial of service or the execution of arbitrary code if malformed image files are opened.
April 20, 2018
Reading Time: ~2 min.The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. Russia Blocks Millions of IPs to Halt Use of Telegram Recently, Russia has been […]
April 20, 2018
LinuxSecurity.com: An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
April 20, 2018
LinuxSecurity.com: An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
April 20, 2018
LinuxSecurity.com: New upstream release with security fix for CVE-2018-1084
April 20, 2018
Podcast: How Millions of Apps Leak Private Data
April 20, 2018
RSA 2018: IoT security comes of age
IoT security may have finally turned the corner towards a more secure future. The post RSA 2018: IoT security comes of age appeared first on WeLiveSecurity
April 20, 2018
HackerOne CEO Talks Bug Bounty Programs at RSA Conference
April 20, 2018
What’s the deal with session-replay scripts?
Some aspects of online tracking go beyond just website analytics The post What’s the deal with session-replay scripts? appeared first on WeLiveSecurity
April 20, 2018
LinkedIn Fixes User Data Leak Bug
April 20, 2018
Certificate Transparency and HTTPS
April 20, 2018
IBM introduces open-source library for protecting AI systems
April 20, 2018
Gold Galleon hackers target maritime shipping industry
April 20, 2018
Honeypots and the evolution of botnets | Salted Hash Ep 23
April 20, 2018
LinuxSecurity.com: Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5.5.60, which includes additional changes. Please see the MySQL 5.5 Release Notes and Oracle’s Critical Patch Update advisory for
April 20, 2018
security update
April 20, 2018
LinuxSecurity.com: Fuzzing by the OSS-Fuzz project found two memory safety issues in LibreOffice, which could result in an application crash or possibly other unspecified impact.
April 19, 2018
LinuxSecurity.com: OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025) (CVE-2018-2814) * OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997) (CVE-2018-2794) * OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977) (CVE-2018-2795) * OpenJDK: unbounded memory allocation during deserializati [More…]
April 19, 2018
LinuxSecurity.com: Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5.5.60, which includes additional changes. Please see the MySQL 5.5 Release Notes and Oracle’s Critical Patch Update advisory for
April 19, 2018
Is it time to kill the pen test? | Salted Hash Ep 22
April 19, 2018
Yahoo! Hacker! Faces! Nearly! Eight! Years! In! Prison!
April 19, 2018
Risk Level: Very Low. Type: Trojan.
April 19, 2018
Risk Level: Very Low. Type: Trojan.
April 19, 2018
A Facebook malware has compromised thousands of accounts
April 19, 2018