April 17, 2018
RSAC 2018: Tech Giants Form Cybersecurity Tech Accord
Risk Level: Very Low. Type: Trojan.
April 17, 2018
Risk Level: Very Low. Type: Trojan, Worm.
April 17, 2018
Automated Bots Growing Tool For Hackers
April 17, 2018
Fake or not fake – that is the question
An interview with ESET’s Lukáš Štefanko on the thin line between what deserves the name “security app” and what can be called fake. The post Fake or not fake – that is the question appeared first on WeLiveSecurity
April 17, 2018
Build up your security credentials at SANS London June 2018
April 17, 2018
Security Trends to Watch Out for in 2018
April 17, 2018
Quarterly cybercrime digest: Extraditions and more
As Internet crime knows no borders, mutual legal assistance involving various nations and, by extension, requests for extraditing suspected cyber-offenders are sometimes part and parcel of prosecution efforts. The post Quarterly cybercrime digest: Extraditions and more appeared first on WeLiveSecurity
April 17, 2018
LinuxSecurity.com: The Citrix Security Response Team discovered that corosync, a cluster engine implementation, allowed an unauthenticated user to cause a denial-of-service by application crash.
April 17, 2018
Facebook admits it does track non-users, for their own good
April 17, 2018
LinuxSecurity.com: – update to the latest upstream release (fixes CVE-2018-1000168)
April 17, 2018
LinuxSecurity.com: Update to new upstream release 2.0.50. * fix a security issue in .apkg imports * fix a problem with plugin download * use python send2trash module from system * use correct shebang for python2 * upstream changelog: https://apps.ankiweb.net/docs/changes.html
April 17, 2018
LinuxSecurity.com: Update to latest upstream version.
April 17, 2018
LinuxSecurity.com: New upstream release with security fix for CVE-2018-1084
April 17, 2018
LinuxSecurity.com: update to latest upstream release, which fixes the following vulnerabilities: – CVE-2018-1100 – stack-based buffer overflow in utils.c:checkmailpath() – CVE-2018-1083 – stack-based buffer overflow in compctl.c:gen_matches_files() – CVE-2018-1071 – stack-based buffer overflow in exec.c:hashcmd()
April 17, 2018
LinuxSecurity.com: Removing dependency on wireshark metapackage from wireshark-cli —- Added wireshark-qt to wireshark metapackage —- – New version 2.4.5 – Contains fixes for CVE-2018-7419, CVE-2018-7418, CVE-2018-7417, CVE-2018-7420, CVE-2018-7320, CVE-2018-7336, CVE-2018-7337, CVE-2018-7334, CVE-2018-7335, CVE-2018-6836, CVE-2018-5335, CVE-2018-5334, CVE-2017-6014, CVE-2017-9616,
April 17, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
April 17, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
April 17, 2018
security update
April 17, 2018
LinuxSecurity.com: This update doesn’t fix a vulnerability in linux-tools, but provides support for building Linux kernel modules with the “retpoline” mitigation for CVE-2017-5715 (Spectre variant 2).
April 16, 2018
Threatpost RSA Conference 2018 Preview
April 16, 2018
LinuxSecurity.com: Marcin Noga discovered multiple vulnerabilities in readxl, a GNU R package to read Excel files (via the integrated libxls library), which could result in the execution of arbitrary code if a malformed spreadsheet is processed.
April 16, 2018
LinuxSecurity.com: Several security issues were fixed in Ruby.
April 16, 2018
LinuxSecurity.com: Minor update from upstream with fix for CVE-2018-9234 and other bug fixes.
April 16, 2018
UK spy agency warns Brit telcos to flee from ZTE gear
April 16, 2018
LinuxSecurity.com: Several security issues were fixed in Patch.
April 16, 2018
Quarterly cybercrime digest: Sentencing
The long arm of the law caught up with a number of cybercriminals in the first three months of this year. The post Quarterly cybercrime digest: Sentencing appeared first on WeLiveSecurity
April 16, 2018
LinuxSecurity.com: It was discovered that there was an input validation vulnerability in the patch(1) utility where an ed(1) script embedded in a regular input file could result in arbitrary code execution. This was reported by Rachel Kroll [0] et al.
April 16, 2018
Nation-State Attacks Take 500% Longer to Find
April 16, 2018
Allscripts: Ransomware, recovery, and frustrated customers
April 16, 2018
Security bods liberate EITest malware slaves
April 16, 2018
LinuxSecurity.com: A NULL Pointer Dereference was discovered in the TIFFPrintDirectory function (tif_print.c) when using the tiffinfo tool to print crafted TIFF information. This vulnerability could be leveraged by remote attackers to cause a crash of the application.
April 16, 2018
LinuxSecurity.com: A NULL Pointer Dereference was discovered in the TIFFPrintDirectory function (tif_print.c) when using the tiffinfo tool to print crafted TIFF information. This vulnerability could be leveraged by remote attackers to cause a crash of the application.
April 16, 2018
Android apps prove a goldmine for dodgy password practices
April 16, 2018
LinuxSecurity.com: A vulnerability in Go allows remote attackers to execute arbitrary commands.
April 15, 2018
LinuxSecurity.com: The package lib32-openssl before version 1:1.1.0.h-1 is vulnerable to private key recovery.
April 15, 2018
LinuxSecurity.com: The package zsh before version 5.5-1 is vulnerable to arbitrary code execution.
April 15, 2018
security update
April 15, 2018
LinuxSecurity.com: An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
April 15, 2018
LinuxSecurity.com: Multiple vulnerabilities were discovered in the implementation of the Perl programming language. The Common Vulnerabilities and Exposures project identifies the following problems:
April 15, 2018
How Netflix Deploys Open Source AI to Reveal Your Favorites
April 15, 2018
LinuxSecurity.com: * Rebase to Ruby 2.5.1. * Several CVE fixes. * Conflict requirement needs to generate dependency. * Stop using –with-setjmp-type=setjmp on aarch64.
April 15, 2018
LinuxSecurity.com: Minor update from upstream with fix for CVE-2018-9234 and other bug fixes.
April 15, 2018
LinuxSecurity.com: Security fix for CVE-2018-1086 and CVE-2018-1079 Rebased to latest upstream sources
April 15, 2018
LinuxSecurity.com: harden the binaries (rhbz#1548670)
April 15, 2018
LinuxSecurity.com: Fixes several heap-buffer-overflows, see related Bugzilla tickets!
April 15, 2018
LinuxSecurity.com: Fix CVE-2017-11550 and CVE-2004-2779
April 15, 2018
LinuxSecurity.com: GwanYeong Kim reported that ‘pack()’ could cause a heap buffer write overflow with a large item count. For Debian 7 “Wheezy”, these problems have been fixed in version
April 15, 2018
security update
April 14, 2018
LinuxSecurity.com: python-paramiko: Authentication bypass in transport.py (CVE-2018-7750) SL6 noarch python-paramiko-1.7.5-4.el6_9.noarch.rpm – Scientific Linux Development Team
April 14, 2018
New malware mine cryptocurrency without open browser session
April 14, 2018
Critical Vulnerability in Drupal CMS Used for Cryptomining
April 14, 2018
Q1 Cyber-Attacks on UK Firms Jump 27%
April 14, 2018
USING OPEN SOURCE DESIGNS TO CREATE MORE SPECIALIZED CHIPS
April 14, 2018
Don’t Trust Android OEM Patching, Claims Researcher
April 13, 2018
LinuxSecurity.com: USN-3621-1 caused a regression in Ruby.
April 13, 2018
LinuxSecurity.com: The package apache before version 2.4.33-1 is vulnerable to multiple issues including session hijacking, access restriction bypass, content spoofing and denial of service.
April 13, 2018
Someone stole $3 million from Coinsecure Bitcoin exchange
April 13, 2018
This ransomware wants you to play, not pay
Unlike its much more malicious counterparts, this ransomware has a rather benign demand. It also provides two curious ways of recovering one’s files. The post This ransomware wants you to play, not pay appeared first on WeLiveSecurity
April 13, 2018
Anti-Malware testing needs standards, and testers need to adopt them
A closer look at Anti-Malware tests and the somewhat unreliable nature of the process. The post Anti-Malware testing needs standards, and testers need to adopt them appeared first on WeLiveSecurity
April 13, 2018
Story of a ransomware victim
April 13, 2018
What Facebook and the CLOUD Act mean for cloud privacy
April 13, 2018
Quarterly cybercrime digest: Part 1
In Part 1, our roundup of some of the most notable law enforcement actions against computer crime in the first quarter of 2018 will focus on arrests and charges involving suspected cyber-crooks. The post Quarterly cybercrime digest: Part 1 appeared first on WeLiveSecurity
April 13, 2018
Reading Time: ~2 min.The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. Music-Oriented YouTube Channels Hacked Within the last week, hackers have defaced multiple YouTube music […]
April 13, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has 7 fixes is now available.
April 13, 2018
LinuxSecurity.com: An update for python-paramiko is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
April 12, 2018
LinuxSecurity.com: An update for python-paramiko is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat Enterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux 6.6 Advanced Update Support, Red Hat Enterprise Linux 6.6 Telco Extended Update Support, and Red Hat Enterprise
April 12, 2018
Type: Vulnerability. Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability; fixes are available.
April 12, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
April 12, 2018
Calls For Regulation Build After Facebook Privacy Fallout
April 12, 2018