LinuxSecurity.com: Two vulnerabilities were discovered in Libtasn1, a library to manage ASN.1 structures, allowing a remote attacker to cause a denial of service against an application using the Libtasn1 library.
February 7, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has 17 fixes is now available.
February 7, 2018
LinuxSecurity.com: Security fix for CVE-2017-17969 (from Debian)
February 7, 2018
LinuxSecurity.com: Security fix for CVE-2018-6381
February 7, 2018
LinuxSecurity.com: This update includes a rebase from 8.0.47 to 8.0.49.
February 7, 2018
LinuxSecurity.com: This is a security fix release that fixes a sandbox escape in the flatpak dbus proxy. This issue was found by Gabriel Campana of The Google Security Team. Major changes in 0.10.3 * Fix dbus proxy vulnerability in authentication phase * Make permission handling ignore unknown permissions for forwards compatibility * Removed incorrect error […]
February 7, 2018
Risk Level: Very Low. Type: Trojan.
February 7, 2018
UK-led police operation quashes Luminosity Link RAT
The investigation showed that the tool, which required little technical knowledge to deploy, had over 8,600 users in 78 countries. Victims are believed to be in the thousands. The post UK-led police operation quashes Luminosity Link RAT appeared first on WeLiveSecurity
February 7, 2018
LinuxSecurity.com: Security fixes for CVE-2017-17485 and CVE-2018-5968.
February 7, 2018
Abusing X.509 Digital Certificates for Covert Data Exchange
February 7, 2018
Australian cops to enter kindergartens to teach kids not to cyber
February 7, 2018
Malware Exploiting Spectre, Meltdown Flaws Emerges
February 7, 2018
Beware the looming Google Chrome HTTPS certificate apocalypse!
February 7, 2018
Uber quits GitHub for in-house code after 2016 data breach
February 7, 2018
LinuxSecurity.com: New kernel packages are available for Slackware 14.2 to mitigate the speculative side channel attack known as Spectre variant 2.
February 7, 2018
Web analytics outfit Mixpanel slurped surfers’ passwords
February 7, 2018
LinuxSecurity.com: It was discovered that mpv, a media player, was vulnerable to remote code execution attacks. An attacker could craft a malicious web page that, when used as an argument in mpv, could execute arbitrary code in the host of the mpv user.
February 7, 2018
Who doesn’t like a good mobile game? Especially a free one! They allow you to blow off steam while fine-tuning your skills, competing with others or maybe even winning bragging rights among friends. Free games can be fun to play, yet there are some common-sense guidelines to make sure these apps don’t surprise you with […]
February 7, 2018
Risk Level: Very Low.
February 7, 2018
Risk Level: Very Low. Type: Trojan.
February 7, 2018
Adobe: Two critical Flash security bugs fixed for the price of one
February 6, 2018
All Ledger hardware wallets vulnerable to man in the middle attack
February 6, 2018
MacUpdate Hacked to Distribute Mac Cryptocurrency Miner
February 6, 2018
One year later, the UK’s Active Cyber Defence is seeing good results
February 6, 2018
FBI warns of email scams claiming to be from Bureau
Another template attempts to scare, rather than thrill, the recipients. Upon learning that “your IP address and other identifying information were used to commit multiple online crimes”, the mark is urged to contact the sender by phone immediately. The post FBI warns of email scams claiming to be from Bureau appeared first on WeLiveSecurity
February 6, 2018
Spectre and Meltdown | Salted Hash Ep 17
February 6, 2018
How I Got Paid $0 From the Uber Security Bug Bounty
February 6, 2018
Open source turns 20 years old, looks to attract normal people
February 6, 2018
Think you have a tracker on your phone? Learn how to make your device more resilient
While it certainly doesn’t hurt to ask for help from local law enforcement, know that even major cities may not have the expertise or the bandwidth to investigate compromised mobile devices. The most important objective is to take steps to make sure you’re safe. Ask for help, but do not wait for others to help […]
February 6, 2018
LinuxSecurity.com: ClamAV 0.99.3 recommended for all ClamAV users. Please see details below: 1. ClamAV UAF (use-after-free) Vulnerabilities (CVE-2017-12374) ————————————————————— The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could
February 6, 2018
LinuxSecurity.com: This is a security fix release that fixes a sandbox escape in the flatpak dbus proxy. This issue was found by Gabriel Campana of The Google Security Team. Major changes in 0.10.3 * Fix dbus proxy vulnerability in authentication phase * Make permission handling ignore unknown permissions for forwards compatibility * Removed incorrect error […]
February 6, 2018
LinuxSecurity.com: Security fix for CVE-2017-17969 (from Debian)
February 6, 2018
X.509 metadata can carry information through the firewall
February 6, 2018
Grammarly Patches Chrome Extension Bug That Exposed Users’ Docs
February 5, 2018
Authorities shut down Luminosity RAT used by buyers in 78 countries
February 5, 2018
security update
February 5, 2018
Covert Data Channel in TLS Dodges Network Perimeter Protection
February 5, 2018
New Monero Crypto Mining Botnet Leverages Android Debugging Tool
February 5, 2018
LinuxSecurity.com: It was discovered that an XHR/AJAX call did not properly encode user input in the “dokuwiki” wiki platform. This resulted in a reflected file download vulnerability.
February 5, 2018
Risk Level: Very Low. Type: Trojan.
February 5, 2018
Risk Level: Very Low. Type: Trojan.
February 5, 2018
LinuxSecurity.com: An update that solves one vulnerability and has two fixes is now available.
February 5, 2018
LinuxSecurity.com: An update that fixes 11 vulnerabilities is now available.
February 5, 2018
Accused Brit hacker Lauri Love will NOT be extradited to America
February 5, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 5, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 5, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 5, 2018
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 5, 2018
Vulnerabilities reached a historic peak in 2017
In 2017, the number of vulnerabilities smashed records set in previous years. According to CVE Details, more than 14,600 vulnerabilities were reported in 2017, compared to 6447 in 2016. The post Vulnerabilities reached a historic peak in 2017 appeared first on WeLiveSecurity
February 5, 2018
Russian-monitoring Shetlands radar station was nearly sold off
February 5, 2018
Knock, knock. Who’s there? Another Amazon Key door-lock hack
February 5, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
February 5, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
February 5, 2018
LinuxSecurity.com: ‘landave’ discovered a heap-based buffer overflow vulnerability in the NCompress::NShrink::CDecoder::CodeReal method in p7zip, a 7zr file archiver with high compression ratio. A remote attacker can take advantage of this flaw to cause a denial-of-service or, potentially the
February 4, 2018
LinuxSecurity.com: New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
February 4, 2018
BeeToken’s ICO Hit by Phishing Scam; $1M worth of Ethereum Stolen
February 3, 2018
Spectre shenanigans, Nork hackers upgrade, bad WD drives and more
February 3, 2018
Japanese boy arrested for developing cryptocurrency stealing malware
February 2, 2018
JenX Botnet Has Grand Theft Auto Hook
February 2, 2018
139 Malware Samples Identified that Exploit Meltdown & Spectre Flaws
February 2, 2018
Get 3 Years of NordVPN Service for Just $2.75 Per Month
February 2, 2018
The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. Multiple Dutch Banks Fall Victim to Week-long Cyberattack String Over the last week, several of the largest […]
February 2, 2018
Bluetooth ‘Panty Buster’ smart mock-cock fails penetration test
February 2, 2018
Fileless WannaMine Cryptojacking Malware Using NSA Exploit
February 2, 2018
Critical Infrastructure More Vulnerable Than Ever Before
February 2, 2018
GDPR: These are the organisations which are least prepared
February 2, 2018
Meltdown-Spectre: Malware is already being tested by attackers
February 2, 2018
A giant botnet is forcing Windows servers to mine cryptocurrency
February 2, 2018
How to eliminate the default route for greater security
February 2, 2018
Smart, Smarter… Dumbest…
While the evolution of new smartphones creates more possibilities for the user, these new devices also creates more possibilities for hackers. The post Smart, Smarter… Dumbest… appeared first on WeLiveSecurity
February 2, 2018
Venture into the security thickets at CyberThreat18
February 2, 2018
New Monero mining malware infected 500K PCs by using 2 NSA exploits
February 2, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
February 2, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
February 2, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
February 2, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
February 2, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0262
February 1, 2018