March 28, 2018
Northern Irish Parliament Hit by Brute Force Attack
March 28, 2018
World Backup Day: Saving the day by saving data
World Backup Day, celebrated annually on March 31, is a timely reminder of the importance of taking effective measures that can make all the difference when a data loss incident strikes. It is also a good time to pause and reflect on the rising tide of threats that organizations, notably those operating in critical industries, […]
March 28, 2018
Cyberattack disrupted Baltimore emergency responders
March 28, 2018
Monero cryptocurrency: Malware’s rising star
Bitcoin gets all the press these days when it comes to cryptocurrency but the gap in market capitalization is narrowing. The post Monero cryptocurrency: Malware’s rising star appeared first on WeLiveSecurity
March 28, 2018
Be wary when scanning QR codes with iOS 11’s camera app
Boobytrapped QR code can trick iOS 11 into taking you to a malicious website The post Be wary when scanning QR codes with iOS 11’s camera app appeared first on WeLiveSecurity
March 28, 2018
LinuxSecurity.com: Jesse Schwartzentruber discovered a use-after-free vulnerability in Firefox, which could be exploited to trigger an application crash or arbitrary code execution.
March 28, 2018
security update
March 28, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues:
March 27, 2018
LinuxSecurity.com: It was discovered that a use-after-free in the compositor of Firefox can result in the execution of arbitrary code. For the oldstable distribution (jessie), this problem has been fixed
March 27, 2018
Alleged Mastermind Behind Carbanak Crime Gang Arrested
March 27, 2018
LinuxSecurity.com: An update that solves 9 vulnerabilities and has four fixes is now available.
March 27, 2018
LinuxSecurity.com: An update that fixes three vulnerabilities is now available.
March 27, 2018
security update
March 27, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0592
March 27, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 27, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 27, 2018
LinuxSecurity.com: A vulnerability in PLIB may allow remote attackers to execute arbitrary code.
March 27, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in BusyBox, the worst of which could allow remote attackers to execute arbitrary code.
March 27, 2018
LinuxSecurity.com: It was discovered that there was an issue in the irssi IRC client where certain nick names could result in out-of-bounds access when printing theme strings.
March 27, 2018
LinuxSecurity.com: It was discovered that there was a heap corruption vulnerability in the net-snmp framework which exchanges server management information in a network.
March 27, 2018
LinuxSecurity.com: An update for python-paramiko is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
March 27, 2018
LinuxSecurity.com: The package bchunk before version 1.2.2-4 is vulnerable to denial of service.
March 27, 2018
US Cops Using Dead Suspects’ Fingerprints to Unlock iPhones
March 27, 2018
The Last Windows XP Security White Paper
Using the strategies and procedures we present in our paper could help prevent an attacker from taking control of your computer The post The Last Windows XP Security White Paper appeared first on WeLiveSecurity
March 27, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
March 27, 2018
Why IoT security should keep you up at night
March 27, 2018
Oil & gas industry in Middle East found lagging in security
The oil and gas industry is the target of as much as one-half of all cyberattacks in the Middle East The post Oil & gas industry in Middle East found lagging in security appeared first on WeLiveSecurity
March 27, 2018
Police arrest members of cybercrime gang
ATM jackpot gang is thought to have infiltrated over 100 financial firms in 40 countries costing banks more than one billion dollars. The post Police arrest members of cybercrime gang appeared first on WeLiveSecurity
March 27, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 27, 2018
LinuxSecurity.com: Richard Zhu and Huzaifa Sidhpurwala discovered that an out-of-bounds memory write when playing Vorbis media files could result in the execution of arbitrary code.
March 27, 2018
LinuxSecurity.com: slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088) SL7 noarch slf4j-1.7.4-4.el7_4.noarch.rpm slf4j-javadoc-1.7.4-4.el7_4.noarch.rpm slf4j-manual-1.7.4-4.el7_4.noarch.rpm – Scientific Linux Development Team
March 26, 2018
Sanny Malware Updates Delivery Method
March 26, 2018
LinuxSecurity.com: Bas van Schaik and Kevin Backhouse discovered a stack-based buffer overflow vulnerability in librelp, a library providing reliable event logging over the network, triggered while checking x509 certificates from a peer. A remote attacker able to connect to rsyslog can take
March 26, 2018
LinuxSecurity.com: An update for slf4j is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 26, 2018
LinuxSecurity.com: The package thunderbird before version 52.7.0-1 is vulnerable to multiple issues including arbitrary code execution and access restriction bypass.
March 26, 2018
Facebook Woes Continue as FTC Opens Data Privacy Probe
March 26, 2018
Mozilla Tests DNS over HTTPS: Meets Some Privacy Pushback
March 26, 2018
Critical Infrastructure Interview with David Harley
WeLiveSecurity sat down with David Harley to get a better understanding of Critical Infrastructure and the role he has played in the area throughout his career. The post Critical Infrastructure Interview with David Harley appeared first on WeLiveSecurity
March 26, 2018
LinuxSecurity.com: An update for rh-ruby23-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 26, 2018
LinuxSecurity.com: An update for rh-mysql57-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 26, 2018
YouTube isn’t for kids
March 26, 2018
LinuxSecurity.com: An update for rh-mysql56-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 26, 2018
LinuxSecurity.com: An update for rh-ruby24-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 26, 2018
Why Spectre demands more elegantly coded software
March 26, 2018
LinuxSecurity.com: An update for rh-ruby22-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 26, 2018
LinuxSecurity.com: An update for rh-maven35-slf4j is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 26, 2018
Hey Siri! Read me this locked iPhone’s hidden messages…
March 26, 2018
Tumblr troll-ban follows February indictments
March 26, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
March 26, 2018
Risk Level: Very Low. Type: Trojan.
March 26, 2018
LinuxSecurity.com: Daniel P. Berrange and Peter Krempa of Red Hat discovered a flaw in libvirt, a virtualization API. A lack of restriction for the amount of data read by QEMU Monitor socket can lead to a denial of service by exhaustion of memory resources.
March 25, 2018
security update
March 24, 2018
LinuxSecurity.com: Wojciech Regu?a discovered that Freeplane, a program for working with mind maps, was affected by a XML External Entity (XXE) vulnerability in its mindmap loader that could compromise a user’s machine by opening a specially crafted mind map file.
March 24, 2018
LinuxSecurity.com: Samba could be made to crash if it received specially crafted input.
March 24, 2018
LinuxSecurity.com: An update that solves 10 vulnerabilities and has 70 fixes is now available.
March 24, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 24, 2018
security update
March 23, 2018
security update
March 23, 2018
LinuxSecurity.com: Sharutils could be made to execute arbitrary code if it opened a specially crafted file.
March 23, 2018
LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available.
March 23, 2018
LinuxSecurity.com: It was discovered that there was a server-side request forgery exploit in adminer, a web-based database administration tool. Adminer allowed unauthenticated connections to be initiated to arbitrary
March 23, 2018
A Closer Look at APT Group Sofacy’s Latest Targets
March 23, 2018
Ransomware Attack Cripples Several Atlanta City Systems
March 23, 2018
LinuxSecurity.com: Cure53 discovered that in SimpleSAMLphp, in rare circumstances an invalid signature on the SAML 2.0 HTTP Redirect binding could be considered valid.
March 23, 2018
City of Atlanta computers held hostage in ransomware attack
City officials confirm that Atlanta is dealing with a cyberattack that has locked down some internal systems and is holding them hostage using ransomware The post City of Atlanta computers held hostage in ransomware attack appeared first on WeLiveSecurity
March 23, 2018