January 15, 2018
Inside Uber’s $100,000 Payment to a Hacker, and the Fallout
Customers reporting credit card fraud after using OnePlus webstore
January 15, 2018
CES 2018: Why doesn’t everyone use VR already?
One side effect of slower than expected uptake of VR is that virtual reality application developers have been slow to invest in creating content. In this sort of chicken-and-egg cycle, growth tends to be slow, not explosive. The post CES 2018: Why doesn’t everyone use VR already? appeared first on WeLiveSecurity
January 15, 2018
Meltdown/Spectre fixes made AWS CPUs cry, says SolarWinds
January 15, 2018
Hawaii’s ballistic missile false alarm and a user interface failure
January 15, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in PolarSSL, the worst of which may allow remote attackers to execute arbitrary code.
January 15, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Xen, the worst of which could allow for privilege escalation.
January 15, 2018
LinuxSecurity.com: Philip Huppert discovered the Shibboleth service provider is vulnerable to impersonation attacks and information disclosure due to mishandling of DTDs in the XMLTooling XML parsing library. For additional details please refer to the upstream advisory at
January 14, 2018
LinuxSecurity.com: The package qtpass before version 1.2.1-1 is vulnerable to private key recovery.
January 14, 2018
security update
January 14, 2018
LinuxSecurity.com: Tavis Ormandy discovered a vulnerability in the Transmission BitTorrent client; insecure RPC handling between the Transmission daemon and the client interface(s) may result in the execution of arbitrary code if a user visits a malicious website while Transmission is running.
January 14, 2018
How to Protect Your Personal Data in 3 Simple Ways
January 14, 2018
LinuxSecurity.com: Rebased to 1.37.0.
January 13, 2018
Hacker demands ransom in Bitcoin after taking over hospital servers
January 13, 2018
security update
January 13, 2018
Cisco’s new tool will detect malware in encrypted traffic
January 13, 2018
Lenovo removes backdoor present in networking switches since 2004
January 13, 2018
60 Android apps for kids found infected with Pornographic malware
January 13, 2018
Fruitfly malware spied on Mac users for 13 years – man charged
January 13, 2018
LinuxSecurity.com: Philip Huppert discovered the Shibboleth service provider is vulnerable to impersonation attacks and information disclosure due to mishandling of DTDs in the XMLTooling XML parsing library. For additional details please refer to the upstream advisory at
January 12, 2018
Attackers Exploit Oracle WebLogic Flaw to Mine $266K in Monero
January 12, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 12, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 12, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 12, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 12, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has 5 fixes is now available.
January 12, 2018
Boffins split on whether Spectre fix needs tweaked hardware
January 12, 2018
Critical Intel AMT Flaw Lets Attackers Hack Laptops in Mere Seconds
January 12, 2018
Intel AMT security locks bypassed on corp laptops – research
January 12, 2018
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst with a passion for all things security. Any questions? Just ask. Exploitable Backdoor Found in Western Digital NAS Drives Western Digital has recently released numerous patches for the vulnerabilities that were […]
January 12, 2018
Data protection is best managed from the centre
January 12, 2018
Apps Exposing Children to Porn Ads Booted From Google Play
January 12, 2018
WhatsApp Vulnerability Lets Anyone Spy on Group Chats
January 12, 2018
‘Mummy, what’s felching?’ Tot gets smut served by Android app
January 12, 2018
Malware infected fake Telegram Messenger app found in Play Store
January 12, 2018
LinuxSecurity.com: It was discovered that gifsicle, a tool for manipulating GIF image files, contained a flaw that could lead to arbitrary code execution. For the oldstable distribution (jessie), this problem has been fixed
January 12, 2018
Let’s Encrypt disables TLS-SNI-01 validation
January 12, 2018
FBI chief claims encryption is an ‘urgent public safety issue’
January 12, 2018
Security event in Taiwan ‘rewards’ quiz winners with malware-laden USB drives
The distribution of the USB sticks was halted on December 12 after some of the quiz’s successful entrants reported that their rewards had been flagged by their security software as containing malware. The post Security event in Taiwan ‘rewards’ quiz winners with malware-laden USB drives appeared first on WeLiveSecurity
January 12, 2018
Intel’s Meltdown fix freaked out some Broadwells, Haswells
January 12, 2018
LinuxSecurity.com: Security fix for CVE-2017-1000501
January 12, 2018
security update
January 12, 2018
LinuxSecurity.com: A vulnerability in PySAML2 might allow remote attackers to bypass authentication.
January 11, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in TigerVNC, the worst of which may lead to arbitrary code execution.
January 11, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in icoutils, the worst of which may lead to arbitrary code execution.
January 11, 2018
LinuxSecurity.com: The package intel-ucode before version 20180108-1 is vulnerable to access restriction bypass.
January 11, 2018
Man used Fruitfly Mac malware to spy on US citizens for 13 years
January 11, 2018
House Votes to Reauthorize Controversial Spy Provision, Section 702
January 11, 2018
WhatsApp Downplays Damage of a Group Invite Bug
January 11, 2018
LinuxSecurity.com: Multiple vulnerabilities have been discovered in Ming: CVE-2017-11732
January 11, 2018
FBI supports & blames encryption for 7,800 devices it can’t unlock
January 11, 2018
Fedora 28 Looking To Replace Glibc’s libcrypt With libxcrypt
January 11, 2018
Adobe patches information leak vulnerability
January 11, 2018
CES 2018: The price of tech is dropping, kids can do this!
Row after row of startup tech here has tiny modules designed to be mashed up into the next big thing if their founders have anything to say about it, and the trend continues. The post CES 2018: The price of tech is dropping, kids can do this! appeared first on WeLiveSecurity
January 11, 2018
LinuxSecurity.com: Stephan Zeisberg discovered that poco, a collection of open source C++ class libraries, did not correctly validate file paths in ZIP archives. An attacker could leverage this flaw to create or overwrite arbitrary files.
January 11, 2018
security update
January 11, 2018
Risk Level: Very Low. Type: Trojan.
January 11, 2018
Android Malware written in Kotlin found on Play Store stealing data
January 10, 2018
security update
January 10, 2018
Type: Vulnerability. Microsoft Office is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Outlook is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Word is prone to a memory-corruption vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Office is prone to a memory-corruption vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Access is prone to a cross-site scripting vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Outlook is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Excel is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Risk Level: Very Low. Type: Trojan.
January 10, 2018
Netgear’s New Gaming Router Offers Protection Against DDoS Attacks
January 10, 2018
Tank-traps versus trappings in virtual currencies: A cybersecurity minefield
Bitcoin, the progenitor of the entire cryptocurrency boom and still the most popular virtual currency, experienced a truly heady run-up in value. Its price surge was punctuated with a crescendo midway through December, when a single bitcoin approached $20,000. The post Tank-traps versus trappings in virtual currencies: A cybersecurity minefield appeared first on WeLiveSecurity
January 10, 2018
Best Encrypted Email Services for 2018
January 10, 2018
LinuxSecurity.com: An update that fixes 16 vulnerabilities is now available.
January 10, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 10, 2018
Russia claims it repelled home-grown drone swarm in Syria
January 10, 2018
LinuxSecurity.com: The system could be made to expose sensitive information.
January 10, 2018
IBM’s complete Meltdown fix won’t land until mid-February
January 10, 2018
Intel, Microsoft confess: Meltdown, Spectre may slow your servers
January 10, 2018
LinuxSecurity.com: The system could be made to expose sensitive information.
January 10, 2018