February 17, 2018
Hands up who HASN’T sued Intel over Spectre, Meltdown chip flaws
February 17, 2018
security update
February 17, 2018
security update
February 17, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in Quagga, a routing daemon. The Common Vulnerabilities and Exposures project identifies the following issues:
February 16, 2018
LinuxSecurity.com: Krzysztof Sieluzycki discovered that the notifier for removable devices in the KDE Plasma workspace performed insufficient sanitisation of FAT/VFAT volume labels, which could result in the execution of arbitrary shell commands if a removable device with a malformed disk label is
February 16, 2018
LinuxSecurity.com: BIND, a DNS server implementation, was found to be vulnerable to a denial of service flaw was found in the handling of DNSSEC validation. A remote attacker could use this flaw to make named exit unexpectedly with an
February 16, 2018
119,000 FedEx users passports, security ID & driving licenses exposed
February 16, 2018
security update
February 16, 2018
Apple Rushes Fix for Latest ‘Text Bomb’ Bug As Abuse Spreads
February 16, 2018
LinuxSecurity.com: The package irssi before version 1.1.1-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and denial of service.
February 16, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.
February 16, 2018
LinuxSecurity.com: Talosintelligence discovered a command injection vulnerability in the gplotMakeOutput function of leptonlib. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary
February 16, 2018
New IoT Botnet DoubleDoor Bypass Firewall to Drop Backdoor
February 16, 2018
Hackers who stole $300 million, hacked Citibank & Nasdaq are jailed
February 16, 2018
PM urged to protect data flows post-Brexit ahead of Munich speech
February 16, 2018
US forms dedicated office to help avert cyberattacks at infrastructure
The vulnerability of critical infrastructure, including energy grids, to cyberattacks has been a growing concern worldwide. Many nations have been scrambling to improve their defenses vis-à-vis threats faced by services that are critical to the continuity of our daily lives. The post US forms dedicated office to help avert cyberattacks at infrastructure appeared first on […]
February 16, 2018
UK.gov: Psst. Belgium. Buy these Typhoon fighter jets from us, will you?
February 16, 2018
LinuxSecurity.com: An update that solves 10 vulnerabilities and has three fixes is now available.
February 16, 2018
LinuxSecurity.com: An update that solves 16 vulnerabilities and has 12 fixes is now available.
February 16, 2018
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
February 16, 2018
The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. Winter Olympics Disrupted by Malware Attack The Winter Olympics are in full swing, and cybercriminals seem to […]
February 16, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
February 16, 2018
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
February 16, 2018
LinuxSecurity.com: New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
February 16, 2018
Russians behind bars in US after nicking $300m+ in credit-card hacks
February 16, 2018
Techno-senator tells Tinder to hook up its app with better security
February 16, 2018
LinuxSecurity.com: Several security issues were fixed in Quagga.
February 16, 2018
Facebook wants you to install a VPN app accused of spying on users
February 15, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in Quagga, a routing daemon. The Common Vulnerabilities and Exposures project identifies the following issues:
February 15, 2018
Intel Expands Bug Bounty Program Post-Spectre and Meltdown
February 15, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 15, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 15, 2018
security update
February 15, 2018
security update
February 15, 2018
That terrifying ‘unfixable’ Microsoft Skype security flaw: THE TRUTH
February 15, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
February 15, 2018
LinuxSecurity.com: – CVE-2018-1055 Remote arbitrary file disclosure vulnerability via WEBSERVICE formula
February 15, 2018
LinuxSecurity.com: Updated AppStream metadata
February 15, 2018
LinuxSecurity.com: This is an update to Mozilla’s CA certificates list version 2.22, which has been published as part of Mozilla NSS 3.35. For additional details, please refer to the NSS 3.35 release notes: https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.35_release_notes
February 15, 2018
Reported Critical Vulnerabilities In Microsoft Software On the Rise
February 15, 2018
Word-based Malware Attack Doesn’t Use Macros
February 15, 2018
Hackers use Google Ads to steal $50 million of Bitcoin
February 15, 2018
Dell EMC squashes pair of VMAX virtual appliance bugs
February 15, 2018
Smashing Security #065: Cryptominomania, Poppy, and your Amazon Alexa
February 15, 2018
Essex black hat behind Cryptex and reFUD gets two years behind bars
February 15, 2018
Concerns about data breaches hitting all-time high
A record-high proportion of organizations worldwide (67%) said that they had been breached at some point, up from 56% in the report’s previous edition. The post Concerns about data breaches hitting all-time high appeared first on WeLiveSecurity
February 15, 2018
Unsecured server exposed thousands of FedEx customer records
February 15, 2018
Hack the Air Force 2.0 uncovers over 100 vulnerabilities
February 15, 2018
Adding Encryption To printk()
February 15, 2018
Managing open-source mobile security and privacy for activists worldwide
February 15, 2018
Android ransomware in 2017: Innovative infiltration and rougher extortion
Ransomware in 2017 saw users and businesses across the globe trying to cope with campaigns such as Petya and WannaCryptor. Not to be outdone, Android ransomware had a year full of innovative infiltration and rougher extortion as highlighted by the latest ESET research whitepaper. The post Android ransomware in 2017: Innovative infiltration and rougher extortion […]
February 15, 2018
UK names and shames Russia as source of NotPetya
February 15, 2018
PCI Council and X9 Committee to combine PIN security standards
February 15, 2018
LinuxSecurity.com: It was discovered that jackson-databind, a Java library used to parse JSON and other data formats, did not properly validate user input before attempting deserialization. This allowed an attacker to perform code execution by providing maliciously crafted input.
February 15, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 15, 2018
security update
February 15, 2018
LinuxSecurity.com: Two vulnerabilities were discovered in the libraries of the Vorbis audio compression codec, which could result in denial of service or the execution of arbitrary code if a malformed media file is processed.
February 14, 2018
LinuxSecurity.com: Multiple vulnerabilities have been discovered in the Xen hypervisor: CVE-2017-17563
February 14, 2018
Dell EMC Patches Critical Flaws in VMAX Enterprise Storage Systems
February 14, 2018
Hua-no-wei! NSA, FBI, CIA bosses put Chinese mobe makers on blast
February 14, 2018
Researchers Find New Twists In ‘Olympic Destroyer’ Malware
February 14, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Fuse and Red Hat JBoss A-MQ. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 14, 2018
Three in hospital after NSA cops open fire on campus ram-raid SUV
February 14, 2018
Type: Vulnerability. Microsoft Excel is prone to a remote code-execution vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Office is prone to an information-disclosure vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Outlook is prone to a remote memory-corruption vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Office is prone to a memory-corruption vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Outlook is prone to a remote privilege-escalation vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Edge is prone to an information disclosure vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
February 14, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
February 14, 2018