February 12, 2018
BitGrail cryptocurrency exchange hacked; $160 million in Nano stolen
Risk Level: Very Low. Type: Trojan.
February 12, 2018
Until last week, you could pwn KDE Linux desktop with a USB stick
February 12, 2018
See that over Heathrow? It’s not an airliner – it’s a Predator drone
February 12, 2018
Washington State Marijuana Tracking System Hacked to Steal Route Data
February 12, 2018
US and UK government websites hijacked to mine cryptocurrency on visitors’ machines
If undetected by a user’s security solution or content- or ad-blocker, the script ran in the background unbeknown to the user until the webpage was closed. A number of the affected websites, including that of the ICO, were also offline for hours in the aftermath of the attack. The post US and UK government websites […]
February 12, 2018
Uh-oh. How just inserting a USB drive can pwn a Linux box
February 12, 2018
Cryakl ransomware antidote released after servers seized
February 12, 2018
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
February 12, 2018
All HTTP websites to soon be marked as ‘not secure’ by Google Chrome
February 12, 2018
LinuxSecurity.com: It was discovered that there was an input validation vulnerability in the librsvg renderer library that could result in data being leaked to remote attackers via a specially-crafted file.
February 12, 2018
LinuxSecurity.com: Chris Navarrete from Fortinet’s FortiGuard Labs discovered that Audacity, a multi-track audio editor, contains a vulnerability such that a .wav file with a crafted FORMATCHUNK structure (many channels) can result in
February 12, 2018
Government websites hijacked by cryptomining plugin
February 12, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in VirtualBox, the worst of which could allow an attacker to take control of VirtualBox.
February 11, 2018
Winter Olympics website downed by cyber attack
February 11, 2018
LinuxSecurity.com: Jonas Klempel discovered that, when parsing the AIA-Extension field of a client certificate, Apache Tomcat Native did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the
February 11, 2018
security update
February 11, 2018
Turns out Equifax breach was way bigger than initially thought
February 11, 2018
Apple’ iBoot Baseband Code for Various iPhone Models Leaked on GitHub
February 11, 2018
security update
February 11, 2018
LinuxSecurity.com: It was discovered that the uwsgi_expand_path function in utils.c in Unbit uWSGI, an application container server, has a stack-based buffer overflow via a large directory length that can cause a denial-of-service (application crash) or stack corruption.
February 10, 2018
Cyber Attack Disrupts Winter Olympics Website During Opening Ceremony
February 10, 2018
security update
February 10, 2018
LinuxSecurity.com: Meh Chang discovered a buffer overflow flaw in a utility function used in the SMTP listener of Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or potentially the execution of arbitrary code via a specially crafted
February 10, 2018
LinuxSecurity.com: Meh Chang discovered a buffer overflow flaw in a utility function used in the SMTP listener of Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or potentially the execution of arbitrary code via a specially crafted
February 10, 2018
LinuxSecurity.com: Security fix for CVE-2017-15698
February 10, 2018
LinuxSecurity.com: PostgreSQL could be made to expose sensitive information.
February 10, 2018
LinuxSecurity.com: The package clamav before version 0.99.3-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.
February 10, 2018
LinuxSecurity.com: An update that solves 9 vulnerabilities and has 70 fixes is now available.
February 10, 2018
Why Linux is better than Windows or macOS for security
February 10, 2018
Dark Web’s largest cybercrime group indicted after stealing $530M
February 10, 2018
NSA code backported, crims cuffed, leaky AWS S3 buckets, and more
February 10, 2018
LinuxSecurity.com: Lalith Rallabhandi discovered that OmniAuth, a Ruby library for implementing multi-provider authentication in web applications, mishandled and leaked sensitive information. An attacker with access to the callback environment, such as in the case of a crafted web
February 10, 2018
LinuxSecurity.com: The package plasma-workspace before version 5.12.0-1 is vulnerable to arbitrary command execution.
February 9, 2018
LinuxSecurity.com: The package plasma-workspace before version 5.12.0-1 is vulnerable to arbitrary command execution.
February 9, 2018
LinuxSecurity.com: The package go-pie before version 1.9.4-1 is vulnerable to arbitrary code execution.
February 9, 2018
LinuxSecurity.com: The package go before version 1.9.4-1 is vulnerable to arbitrary code execution.
February 9, 2018
LinuxSecurity.com: An update that solves 9 vulnerabilities and has 44 fixes is now available.
February 9, 2018
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
February 9, 2018
Type: Vulnerability. Microsoft Internet Information Services is prone to a security-bypass vulnerability; fixes are available.
February 9, 2018
Type: Vulnerability. Adobe Flash Player is prone to an unspecified remote code-execution vulnerability; fixes are available.
February 9, 2018
Cisco Confirms Critical Firewall Software Bug Is Under Attack
February 9, 2018
LinuxSecurity.com: Mailman could be made to run arbitrary code.
February 9, 2018
Risk Level: Very Low. Type: Trojan.
February 9, 2018
Risk Level: Very Low. Type: Trojan.
February 9, 2018
New Tech Support Scam Freezes Chrome, Firefox & Brave Browser
February 9, 2018
Apple’s iOS source code leak – what you need to know
February 9, 2018
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 9, 2018
LinuxSecurity.com: Security fix for CVE-2017-15698
February 9, 2018
How will WPA3 improve WiFi security?
This is aimed at improving security at the time of the handshake, which is when the key is being exchanged. As a result, WPA3 is poised to provide robust security even if short or weak passwords are used, i.e. those that don’t contain a combination of letters, numbers and symbols. The post How will WPA3 […]
February 9, 2018
LinuxSecurity.com: simplesamlphp, an authentication and federation application has been found vulnerable to Cross Site Scripting (XSS), signature validation byepass and using insecure connection charset.
February 9, 2018
LinuxSecurity.com: The mailman package has a Cross-site scripting (XSS) vulnerability in the web UI before 2.1.26 which allows remote attackers to inject arbitrary web script or HTML via a user-options URL
February 9, 2018
The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. New Variant of Scarab Ransomware With a few interesting changes to the original Scarab ransomware, Scarabey is […]
February 9, 2018
VMware sticks finger in Meltdown/Spectre dike for virtual appliances
February 9, 2018
LinuxSecurity.com: A regression was detected in the previously issued fix for CVE-2018-6360. The patch released with DSA 4105-1 broke the feature of invoking mpv with raw YouTube ids. This update fixes this functionality issue. For reference, the relevant part of the original advisory text follows.
February 9, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has 17 fixes is now available.
February 9, 2018
security update
February 9, 2018
Risk Level: Very Low. Type: Trojan.
February 9, 2018
Risk Level: Very Low. Type: Trojan.
February 9, 2018
Apple Downplays Impact of iBoot Source Code Leak
February 8, 2018
security update
February 8, 2018
security update
February 8, 2018
Now that’s taking the p… Sewage plant ‘hacked’ to craft crypto-coins
February 8, 2018
LinuxSecurity.com: An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
February 8, 2018
LinuxSecurity.com: An update that solves 9 vulnerabilities and has 68 fixes is now available.
February 8, 2018
LinuxSecurity.com: Several security issues were fixed in Django.
February 8, 2018
LinuxSecurity.com: Security fixes for CVE-2017-17485 and CVE-2018-5968.
February 8, 2018
From July, Chrome will name and shame insecure HTTP websites
February 8, 2018
Global cybercrime behemoth busted, 36 people indicted
According to US authorities, the enterprise aimed at becoming the premier destination for the buying and selling of stolen payment card data and forged identification documents. It is believed that the losses that the Infraud Organization had intended to cause were north of $2.2 billion. The post Global cybercrime behemoth busted, 36 people indicted appeared […]
February 8, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 8, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.
February 8, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.
February 8, 2018
12 Common Threat Intelligence Use Cases
February 8, 2018
Swisscom data breach exposes 800,000 customers
February 8, 2018
CyberThreat18: 2 days of bughunting, techie chat and code lockdown
February 8, 2018
Smashing Security #064: So just a ‘teeny tiny’ security issue then?
February 8, 2018
Google Expands Play Marketplace Bug Bounty Program
February 7, 2018
LinuxSecurity.com: It was discovered that the webhook validation of Anymail, a Django email backends for multiple ESPs, is prone to a timing attack. A remote attacker can take advantage of this flaw to obtain a WEBHOOK_AUTHORIZATION secret and post arbitrary email tracking events.
February 7, 2018
security update
February 7, 2018
LinuxSecurity.com: A vulnerabilities has been found in the PostgreSQL database system: CVE-2018-1053
February 7, 2018
Type: Vulnerability. Adobe Flash Player is prone to an remote code-execution vulnerability; fixes are available.
February 7, 2018