June 5, 2018
Drupalgeddon 2.0 Still Haunting 115K+ Sites
June 5, 2018
The cyberattack on banks in Mexico: The challenges posed to cybersecurity
Following the massive cyberattack on banks in Mexico, we consider what can cybersecurity can do to help the industry The post The cyberattack on banks in Mexico: The challenges posed to cybersecurity appeared first on WeLiveSecurity
June 5, 2018
LinuxSecurity.com: **Version 3.4.11** (2018-05-25) * bug #27364 [DI] Fix bad exception on uninitialized references to non-shared services (nicolas-grekas) * bug #27359 [HttpFoundation] Fix perf issue during MimeTypeGuesser intialization (nicolas- grekas) * security #cve-2018-11408 [SecurityBundle] Fail if security.http_utils cannot be configured * security #cve-2018-11406 clear CSRF tokens when the user
June 5, 2018
Microsoft to buy GitHub for $7.5 billion
June 4, 2018
security update
June 4, 2018
security update
June 4, 2018
LinuxSecurity.com: Several security issues were fixed in Liblouis.
June 4, 2018
Reading Time: ~4 min.Nearly 50% of Americans don’t use antivirus software That’s right; something as basic as installing internet security software (which we all know we’re supposed to use) is completely ignored by about half the US. You’d be amazed how common this and other risky online behaviors are. We did a survey of people’s […]
June 4, 2018
Router reboot: How to, why to, and what not to do
The FBI say yes but should you follow this advice? And if you do follow it, do you know how to do so safely? The post Router reboot: How to, why to, and what not to do appeared first on WeLiveSecurity
June 4, 2018
LinuxSecurity.com: CVE-2016-9396
June 4, 2018
LinuxSecurity.com: An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
June 4, 2018
LinuxSecurity.com: An update for rh-java-common-xmlrpc is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 4, 2018
False contest to win jersey of the Brazilian team found on WhatsApp
The scam circulated through WhatsApp aimed at users in Brazil claiming that Nike will give away the jersey that the team will wear at Russia 2018. The post False contest to win jersey of the Brazilian team found on WhatsApp appeared first on WeLiveSecurity
June 4, 2018
security update
June 3, 2018
security update
June 3, 2018
LinuxSecurity.com: It was discovered that Wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for PCP, ADB, NBAP, UMTS MAC, IEEE 802.11, SIGCOMP, LDSS, GSM A DTAP and Q.931, which result in denial of service or the execution of arbitrary code.
June 3, 2018
LinuxSecurity.com: The redmine security update announced as DSA-4191-1 caused regressions with multi-value fields while doing queries on project issues due to an bug in the patch to address CVE-2017-15569. Updated packages are now available to correct this issue.
June 3, 2018
LinuxSecurity.com: CVE-2016-9396
June 2, 2018
LinuxSecurity.com: Security fix for CVE-2016-5003, CVE-2016-5002
June 2, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:1780
June 2, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:1779
June 2, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:1777
June 2, 2018
LinuxSecurity.com: Man Yue Mo, Lars Krapf and Pierre Ernst discovered that Batik, a toolkit for processing SVG images, did not properly validate its input. This would allow an attacker to cause a denial-of-service, mount cross-site scripting attacks, or access restricted files on the
June 2, 2018
LinuxSecurity.com: It was discovered that Zookeeper, a service for maintaining configuration information, enforced no authentication/authorisation when a server attempts to join a Zookeeper quorum.
June 1, 2018
LinuxSecurity.com: New git packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues.
June 1, 2018
Researchers Warn of Microsoft Zero-Day RCE Bug
June 1, 2018
Visa card payment network goes down across Europe
June 1, 2018
An acoustic attack can bluescreen your Windows computer
Security researchers have demonstrated how attackers could cause physical damage to hard drives, and cause PCs to crash, just by playing sounds through a computer’s speaker. The post An acoustic attack can bluescreen your Windows computer appeared first on WeLiveSecurity
June 1, 2018
Trends 2018: Critical infrastructure attacks on the rise
Healthcare sectors, critical manufacturing, food production and transportation also said to be targets for cybercriminals The post Trends 2018: Critical infrastructure attacks on the rise appeared first on WeLiveSecurity
June 1, 2018
LinuxSecurity.com: xmlrpc: Deserialization of untrusted Java object through tag (CVE-2016-5003) SL7 noarch xmlrpc-client-3.1.3-9.el7_5.noarch.rpm xmlrpc-common-3.1.3-9.el7_5.noarch.rpm xmlrpc-javadoc-3.1.3-9.el7_5.noarch.rpm xmlrpc-server-3.1.3-9.el7_5.noarch.rpm – Scientific Linux Development Team
June 1, 2018
LinuxSecurity.com: Upstream security fixes related to .gitmodules handling. From the [upstream announcement](https://public-inbox.org/git/xmqqy3g2flb6.fsf@gitster- ct.c.googlers.com/): “` * Submodule “names” come from the untrusted .gitmodules file, but we blindly append them to $GIT_DIR/modules to create our on-disk repo paths. This means you can do bad things by putting “../” into the
June 1, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service. CVE-2018-1093
June 1, 2018
LinuxSecurity.com: Upstream security fixes related to .gitmodules handling. From the [upstream announcement](https://public-inbox.org/git/xmqqy3g2flb6.fsf@gitster- ct.c.googlers.com/): “` * Submodule “names” come from the untrusted .gitmodules file, but we blindly append them to $GIT_DIR/modules to create our on-disk repo paths. This means you can do bad things by putting “../” into the
June 1, 2018
World Cup scams: how to avoid an own goal
Whether travelling to enjoy the matches in person, or watching from home, fans should be on the lookout for foul play The post World Cup scams: how to avoid an own goal appeared first on WeLiveSecurity
June 1, 2018
Europol sets up EU-wide team to fight dark web crime
Embedded within the agency’s European Cybercrime Centre (EC3), the new team will also work together with law enforcement globally in an effort to reduce the size of the underground illegal economy The post Europol sets up EU-wide team to fight dark web crime appeared first on WeLiveSecurity
June 1, 2018
More curious, less cautious: Protecting kids online
How we can help protect a generation for which digital is the way of the world? The post More curious, less cautious: Protecting kids online appeared first on WeLiveSecurity
June 1, 2018
An advert against online privacy
June 1, 2018
Reading Time: ~2 min.The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. Mercedes Keyless Entry Leads to Car Theft It was discovered this week that criminals […]
June 1, 2018
LinuxSecurity.com: An update that fixes 24 vulnerabilities is now available.
June 1, 2018
LinuxSecurity.com: An update that fixes 24 vulnerabilities is now available.
June 1, 2018
LinuxSecurity.com: Applications using Oslo middleware could be made to expose sensitiveinformation.
June 1, 2018
LinuxSecurity.com: Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service: CVE-2017-11613
June 1, 2018
LinuxSecurity.com: The Qualys Research Labs discovered multiple vulnerabilities in procps, a set of command line and full screen utilities for browsing procfs. The Common Vulnerabilities and Exposures project identifies the following problems:
May 31, 2018
LinuxSecurity.com: Several security issues were fixed in libytnef.
May 31, 2018
LinuxSecurity.com: An update for xmlrpc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 31, 2018
Paris Police Arrests Alleged Vevo Hackers
May 31, 2018
Huawei Patches Four Server Bugs Rated High Severity
May 31, 2018
LinuxSecurity.com: xmlrpc: Deserialization of untrusted Java object through tag (CVE-2016-5003) SL6 noarch xmlrpc3-client-3.0-4.17.el6_9.noarch.rpm xmlrpc3-common-3.0-4.17.el6_9.noarch.rpm xmlrpc3-client-devel-3.0-4.17.el6_9.noarch.rpm xmlrpc3-common-devel-3.0-4.17.el6_9.noarch.rpm xmlrpc3-javadoc-3.0-4.17.el6_9.noarch.rpm xmlrpc3-server-3.0-4.17.el6_9.noarch.rpm [More…]
May 31, 2018
Podcast: How Cities Can Be Security Smart
May 31, 2018
LinuxSecurity.com: An update for procps is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 31, 2018
security update
May 30, 2018
security update
May 30, 2018
Bug In Git Opens Developer Systems Up to Attack
May 30, 2018
LinuxSecurity.com: Several security issues were fixed in the kernel.
May 30, 2018