April 19, 2018
IoT Security Concerns Peaking – With No End In Sight
Cloud Credentials: New Attack Surface for Old Problem
April 19, 2018
Use of ‘StegWare’ Increases in Stealth Malware Attacks
April 19, 2018
RSA 2018: Hacking the grid
The challenges facing critical infrastructure systems The post RSA 2018: Hacking the grid appeared first on WeLiveSecurity
April 19, 2018
Rough patch, or how to shut the window of (unpatched) opportunity
Simply throwing more staff at the patching problem won’t cut it, a study suggests. The post Rough patch, or how to shut the window of (unpatched) opportunity appeared first on WeLiveSecurity
April 19, 2018
LinuxSecurity.com: New gd packages are available for Slackware 14.2 and -current to fix security issues.
April 19, 2018
LinuxSecurity.com: New upstream release with security fix for CVE-2018-1084
April 19, 2018
Flash! Ah-ahhh! WebEx pwned for all of us!
April 19, 2018
LinuxSecurity.com: Security fix for CVE-2018-1086 and CVE-2018-1079
April 19, 2018
LinuxSecurity.com: It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities that could result in infinite loops in different dissectors. Other issues are related to crash in dissectors that are
April 18, 2018
LinuxSecurity.com: Two vulnerabilities were found in OpenCV, the “Open Computer Vision Library”. CVE-2018-5268
April 18, 2018
iOS Sync Glitch Lets Attackers Control Devices
April 18, 2018
Gold Galleon Hacking Group Plunders Shipping Industry
April 18, 2018
RSA 2018: Untangling the enterprise security mess
Securely keeping track of data and security applications The post RSA 2018: Untangling the enterprise security mess appeared first on WeLiveSecurity
April 18, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
April 18, 2018
LinuxSecurity.com: An update for glusterfs is now available for Native Client for Red Hat Enterprise Linux 7 for Red Hat Storage and Red Hat Gluster Storage 3.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact
April 18, 2018
LinuxSecurity.com: An update for glusterfs is now available for Native Client for Red Hat Enterprise Linux 6 for Red Hat Storage and Red Hat Gluster Storage 3.3 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact
April 18, 2018
My letter urging Georgia governor to veto anti-hacking bill
April 18, 2018
Trends 2018: Democracy hack
Can the electoral processes be protected? The post Trends 2018: Democracy hack appeared first on WeLiveSecurity
April 18, 2018
Hop to it, bunnies: TaskRabbit breach means new passwords
April 18, 2018
LinuxSecurity.com: Wojciech Regula discovered an XML External Entity vulnerability in the XML Parser of the mindmap loader in freeplane, a Java program for working with mind maps, resulting in potential information disclosure if a malicious mind map file is opened.
April 18, 2018
LinuxSecurity.com: Version 2.1.3 (March 5th, 2018) ——————————- **Security fixes** * Attributes that have URI values weren’t properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed that would slide through unsanitized. This security issue was introduced in Bleach 2.1. […]
April 18, 2018
security update
April 18, 2018
Millions of Apps Leak Private User Data Via Leaky Ad SDKs
April 17, 2018
Woman who hacked airline network busted through VPN logs
April 17, 2018
security update
April 17, 2018
RSAC 2018: Tech Giants Form Cybersecurity Tech Accord
April 17, 2018
Risk Level: Very Low. Type: Trojan.
April 17, 2018
Risk Level: Very Low. Type: Trojan, Worm.
April 17, 2018
Automated Bots Growing Tool For Hackers
April 17, 2018
Fake or not fake – that is the question
An interview with ESET’s Lukáš Štefanko on the thin line between what deserves the name “security app” and what can be called fake. The post Fake or not fake – that is the question appeared first on WeLiveSecurity
April 17, 2018
Build up your security credentials at SANS London June 2018
April 17, 2018
Security Trends to Watch Out for in 2018
April 17, 2018
Quarterly cybercrime digest: Extraditions and more
As Internet crime knows no borders, mutual legal assistance involving various nations and, by extension, requests for extraditing suspected cyber-offenders are sometimes part and parcel of prosecution efforts. The post Quarterly cybercrime digest: Extraditions and more appeared first on WeLiveSecurity
April 17, 2018
LinuxSecurity.com: The Citrix Security Response Team discovered that corosync, a cluster engine implementation, allowed an unauthenticated user to cause a denial-of-service by application crash.
April 17, 2018
Facebook admits it does track non-users, for their own good
April 17, 2018
LinuxSecurity.com: – update to the latest upstream release (fixes CVE-2018-1000168)
April 17, 2018
LinuxSecurity.com: Update to new upstream release 2.0.50. * fix a security issue in .apkg imports * fix a problem with plugin download * use python send2trash module from system * use correct shebang for python2 * upstream changelog: https://apps.ankiweb.net/docs/changes.html
April 17, 2018
LinuxSecurity.com: Update to latest upstream version.
April 17, 2018
LinuxSecurity.com: New upstream release with security fix for CVE-2018-1084
April 17, 2018
LinuxSecurity.com: update to latest upstream release, which fixes the following vulnerabilities: – CVE-2018-1100 – stack-based buffer overflow in utils.c:checkmailpath() – CVE-2018-1083 – stack-based buffer overflow in compctl.c:gen_matches_files() – CVE-2018-1071 – stack-based buffer overflow in exec.c:hashcmd()
April 17, 2018
LinuxSecurity.com: Removing dependency on wireshark metapackage from wireshark-cli —- Added wireshark-qt to wireshark metapackage —- – New version 2.4.5 – Contains fixes for CVE-2018-7419, CVE-2018-7418, CVE-2018-7417, CVE-2018-7420, CVE-2018-7320, CVE-2018-7336, CVE-2018-7337, CVE-2018-7334, CVE-2018-7335, CVE-2018-6836, CVE-2018-5335, CVE-2018-5334, CVE-2017-6014, CVE-2017-9616,
April 17, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
April 17, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
April 17, 2018
security update
April 17, 2018
LinuxSecurity.com: This update doesn’t fix a vulnerability in linux-tools, but provides support for building Linux kernel modules with the “retpoline” mitigation for CVE-2017-5715 (Spectre variant 2).
April 16, 2018
Threatpost RSA Conference 2018 Preview
April 16, 2018
LinuxSecurity.com: Marcin Noga discovered multiple vulnerabilities in readxl, a GNU R package to read Excel files (via the integrated libxls library), which could result in the execution of arbitrary code if a malformed spreadsheet is processed.
April 16, 2018
LinuxSecurity.com: Several security issues were fixed in Ruby.
April 16, 2018
LinuxSecurity.com: Minor update from upstream with fix for CVE-2018-9234 and other bug fixes.
April 16, 2018
UK spy agency warns Brit telcos to flee from ZTE gear
April 16, 2018
LinuxSecurity.com: Several security issues were fixed in Patch.
April 16, 2018
Quarterly cybercrime digest: Sentencing
The long arm of the law caught up with a number of cybercriminals in the first three months of this year. The post Quarterly cybercrime digest: Sentencing appeared first on WeLiveSecurity
April 16, 2018
LinuxSecurity.com: It was discovered that there was an input validation vulnerability in the patch(1) utility where an ed(1) script embedded in a regular input file could result in arbitrary code execution. This was reported by Rachel Kroll [0] et al.
April 16, 2018
Nation-State Attacks Take 500% Longer to Find
April 16, 2018
Allscripts: Ransomware, recovery, and frustrated customers
April 16, 2018
Security bods liberate EITest malware slaves
April 16, 2018
LinuxSecurity.com: A NULL Pointer Dereference was discovered in the TIFFPrintDirectory function (tif_print.c) when using the tiffinfo tool to print crafted TIFF information. This vulnerability could be leveraged by remote attackers to cause a crash of the application.
April 16, 2018
LinuxSecurity.com: A NULL Pointer Dereference was discovered in the TIFFPrintDirectory function (tif_print.c) when using the tiffinfo tool to print crafted TIFF information. This vulnerability could be leveraged by remote attackers to cause a crash of the application.
April 16, 2018