April 6, 2018
Study: White House email domains at risk of being misused for phishing scams
Most of the White House’s email domains have yet to deploy an email authentication protocol known as DMARC that is designed to reduce the risk of attackers impersonating legitimate email addresses for distributing spam or phishing messages. The post Study: White House email domains at risk of being misused for phishing scams appeared first on […]
April 6, 2018
Email Fraud is a Top Business Risk for 2018
April 6, 2018
LinuxSecurity.com: Update to the latest upstream release, which fixes CVE-2017-14062.
April 6, 2018
LinuxSecurity.com: Fixes for CVE-2018-1002150.
April 6, 2018
LinuxSecurity.com: – spec cleanup, silent rpmlint – remove upstreamed patches, fixes rhbz #1507577 – update to 1.2.2
April 6, 2018
LinuxSecurity.com: Update to 3.6.5
April 6, 2018
LinuxSecurity.com: This update includes the latest upstream release of the Apache HTTP Server, version 2.4.33. A number of security vulnerabilities are fixed in this release: * *Low*: Possible out of bound read in mod_cache_socache (CVE-2018-1303) * *Low*: Possible out of bound access after failure in reading the HTTP request (CVE-2018-1301) * *Low*: Weak Digest auth […]
April 5, 2018
LinuxSecurity.com: This update includes the latest upstream release of mod_http2, version 1.10.16. This includes a security fix (CVE-2018-1302): When an HTTP/2 stream was destroyed after being handled, mod_http2 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerabilty hard to trigger in usual […]
April 5, 2018
LinuxSecurity.com: Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) SL6 x86_64 libvorbis-1.2.3-5.el6_9.1.i686.rpm libvorbis-1.2.3-5.el6_9.1.x86_64.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.x86_64.rpm libvorbis-devel-1.2.3-5.el6_9.1.i686.rpm libvorbis-devel-1.2.3-5.el6_9.1.x86_64.rpm i386 libvorbis-1.2.3 [More…]
April 5, 2018
LinuxSecurity.com: An update that solves 6 vulnerabilities and has one errata is now available.
April 5, 2018
security update
April 5, 2018
LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 5, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 5, 2018
LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 5, 2018
LinuxSecurity.com: An update for libvorbis is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 5, 2018
Reading Time: ~3 min.When WannaCry ransomware spread throughout the world last year by exploiting vulnerabilities for which there were patches, we security “pundits” stepped up the call to patch, as we always do. In a post on LinkedIn Greg Thompson, Vice President of Global Operational Risk & Governance at Scotiabank expressed his frustration with the […]
April 5, 2018
You are not alone; The Pirate Bay is down once again
April 5, 2018
Risk Level: Very Low. Type: Trojan.
April 5, 2018
Risk Level: Very Low. Type: Trojan.
April 5, 2018
Saks and Lord & Taylor stores suffer data breach exposing five million bank cards
Cybercriminals are believed to have stolen information for more than five million credit and debit cards that shoppers had used at dozens of Saks Fifth Avenue, Saks Off 5th and Lord & Taylor stores mainly in the United States between May 2017 and March 2018. The post Saks and Lord & Taylor stores suffer data […]
April 5, 2018
Beware ad slingers thinly disguised as security apps
ESET researchers have analyzed a newly discovered set of apps on Google Play, Google’s official Android app store, that pose as security applications. Instead of security, all they provide is unwanted ads and ineffective pseudo-security. The post Beware ad slingers thinly disguised as security apps appeared first on WeLiveSecurity
April 5, 2018
US spanks EU businesses in race to detect p0wned servers
April 5, 2018
Brain monitor had remote code execution and DoS flaw
April 5, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 5, 2018
Risk Level: Very Low. Type: Trojan.
April 5, 2018
Risk Level: Very Low. Type: Trojan.
April 5, 2018
LinuxSecurity.com: The package drupal before version 8.5.1-1 is vulnerable to arbitrary code execution.
April 4, 2018
security update
April 4, 2018
security update
April 4, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 4, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 4, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 4, 2018
Cyber security developments: Keeping safe and up to date
April 4, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
April 4, 2018
White House Lags Far Behind on Email Security Benchmark
April 4, 2018
No, Panera Bread Doesn’t Take Security Seriously
April 4, 2018
Google banishes cryptocurrency mining extensions from Chrome Web Store
The tech giant is taking the measure after a rise in malicious browser extensions that mine digital money by hijacking the processing power of users’ computers. The clampdown follows Google’s recent move to stop serving any and all adverts promoting virtual currencies and initial coin offerings. The post Google banishes cryptocurrency mining extensions from Chrome […]
April 4, 2018
The 5 IT security actions to take now based on 2018 Trends
Implementing the five actions described in this article can help reduce your organization’s cyber risk and bolster its security defenses The post The 5 IT security actions to take now based on 2018 Trends appeared first on WeLiveSecurity
April 4, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in glibc, the worst of which could allow remote attackers to execute arbitrary code.
April 4, 2018
LinuxSecurity.com: Multiple vulnerabilities were discovered in libxslt, the worst of which may allow a remote attacker to execute arbitrary code.
April 4, 2018
LinuxSecurity.com: Michal Kedzior found two vulnerabilities in LDAP Account Manager, a web front-end for LDAP directories. CVE-2018-8763
April 4, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
April 4, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service, unauthorized access, sandbox bypass or HTTP header injection.
April 3, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
April 3, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has two fixes is now available.
April 3, 2018
security update
April 3, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 3, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
April 3, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact
April 3, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 3, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 3, 2018
LinuxSecurity.com: Several security issues were fixed in the kernel.
April 3, 2018
Risk Level: Very Low. Type: Trojan.
April 3, 2018
Lazarus KillDisks Central American casino
The Lazarus Group gained notoriety especially after cyber-sabotage against Sony Pictures Entertainment in 2014. Fast forward to late 2017 and the group continues to deploy its malicious tools, including disk-wiping malware known as KillDisk, to attack a number of targets. The post Lazarus KillDisks Central American casino appeared first on WeLiveSecurity
April 3, 2018
Panera Bread’s half-baked security
April 3, 2018
LinuxSecurity.com: It was discovered that there was a local privilege escalation vulnerability in beep, an “advanced PC speaker beeper”. For Debian 7 “Wheezy”, this issue has been fixed in beep version
April 3, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
April 3, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
April 3, 2018