Menu

Category Archives: Security

Articles about security

Microsoft Outlook bug expose Windows credentials to hackers

LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 10.0 (Newton), Red Hat OpenStack Platform 11.0 (Ocata), Red Hat OpenStack Platform 12.0 (Pike), Red Hat OpenStack Platform 8.0 (Liberty), and Red Hat OpenStack Platform 9.0 (Mitaka).

LinuxSecurity.com: An update for sensu is now available for Red Hat OpenStack Platform 11.0 Operational Tools for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: This updates LibOFX to fix assorted CVEs.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Worm.

Risk Level: Very Low. Type: Worm.

Avoiding the Ransomware Mistakes that Crippled Atlanta
GCHQ boss calls out Russia for ‘industrial scale disinformation’
Hackers can takeover & control emergency alarm system with a $35 radio
New ‘Early Bird’ Code Injection Technique Helps APT33 Evade Detection

LinuxSecurity.com: It was discovered that the poppler upload for the oldstable distribution (jessie), released as DSA-4079-1, did not correctly address CVE-2017-9776 and additionally caused regressions when rendering PDFs embedding JBIG2 streams. Updated packages are now available to correct

Using Outlook? You should probably do some patching
Fake Chrome & Firefox browser update lead users to malware infection
Where’s my free monitoring service, One Plus? – hacked-off customers
How many Linux users are there anyway?
Top Ten Ways to Detect Phishing
UK defines Cyber DEFCON 1, 2 and 3, though of course doesn’t call it that
Kemi Badenoch MP, self-confessed website hacker
Data exfiltrators send info over PCs’ power supply cables
Smashing Security #073: Rick Astley: Never gonna hack you up

LinuxSecurity.com: This update upgrades Firefox to version 52.7.3 ESR. * firefox: Use-after-free in compositor potentially allows code execution (CVE-2018-5148) SL6 x86_64 firefox-52.7.3-1.el6_9.x86_64.rpm firefox-debuginfo-52.7.3-1.el6_9.x86_64.rpm firefox-52.7.3-1.el6_9.i686.rpm firefox-debuginfo-52.7.3-1.el6_9.i686.rpm i386 firefox-52.7.3-1.el6_9.i686.rpm firefox-debuginfo-52.7.3-1 [More…]

Boffins pull off quantum leap in true random number generation

LinuxSecurity.com: Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.

Type: Vulnerability. Adobe Flash Player is prone to multiple security vulnerabilities; fixes are available.

Type: Vulnerability. Microsoft Office is prone to an information-disclosure vulnerability; fixes are available.

LinuxSecurity.com: This updates LibOFX to fix assorted CVEs.

LinuxSecurity.com: Fixes for CVE-2018-1002150.

17-year-old finds screen lock bypass vulnerability in Signal app for iOS

LinuxSecurity.com: Several security issues were fixed in Patch.

LinuxSecurity.com: An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update that solves 5 vulnerabilities and has one errata is now available.

Rudd-y hell, dark web! Amber alert! UK Home Sec is on the war path for stealthy cyber-crims
AMD Rolls Out Spectre Fixes
New ransomware locks files & asks victims to play PUBG game

LinuxSecurity.com: An update that solves three vulnerabilities and has 7 fixes is now available.

An apology to my Facebook followers
Ransomware, hackers, insider threats and human error featured in data breach report
As legal threats rise, this new report aims to guide ethical hackers
Cyber-Criminals Could Earn CEO-Level Salary: Report

LinuxSecurity.com: C?dric Buissart from Red Hat discovered an information disclosure bug in pcs, a pacemaker command line interface and GUI. The REST interface normally doesn’t allow passing –debug parameter to prevent information leak, but the check wasn’t sufficient.

Breach at UK’s Great Western Railway: Commuters told to reset passwords
Imagine you’re having a CT scan and malware alters the radiation levels – it’s doable
While Zuck squirmed, Reddit revealed it found and killed 944 Russian troll factory accounts
No password? No worries! Two new standards aim to make logins an API experience
SAP’s Business Client can own entire apps, DDOS them into dust
Want to terrify a city with an emergency broadcast? All you need is a laptop and $30

security update

Microsoft Fixes 66 Bugs in April Patch Tuesday Release
How to know if your Facebook data was shared with Cambridge Analytica?
It’s April 2018 – and Patch Tuesday shows Windows security is still foiled by fiendish fonts

security update

LinuxSecurity.com: – https://www.drupal.org/SA-CORE-2018-002 – https://www.drupal.org/SA- CORE-2018-001

Vulnerability in San Francisco’s Public Safety Warning Sirens Fixed

LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: – https://www.drupal.org/SA-CORE-2018-002 – https://www.drupal.org/SA- CORE-2018-001

Ransomware Dominates Verizon DBIR
Students fell prey to phishing attacks conducted by their universities

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Worm.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan, Worm.

Adobe Patches Four Critical Bugs in Flash, InDesign
Fraudsters intercept corporate debit cards and swap out chips in new scam

Criminals have devised a new scheme that aims to drain the bank accounts of large corporations. The post Fraudsters intercept corporate debit cards and swap out chips in new scam appeared first on WeLiveSecurity

Quant Loader Trojan Spreads Via Microsoft URL Shortcut Files
Mind-Reader Headset Transfers Your Thoughts On Screen with 90% Accuracy
China forces spyware onto Muslim’s Android phones, complete with security holes
The world’s most popular YouTube video has been hacked

Hackers have managed to deface an array of popular YouTube music videos, changing titles and thumbnail images. The post The world’s most popular YouTube video has been hacked appeared first on WeLiveSecurity

Looking ahead to RSA 2018: An interview with ESET Security Evangelist Tony Anscombe

ESET sat down with Tony Anscombe, Global Security Evangelist and Industry Ambassador, to talk about RSA 2018, his talk at the conference, and what to expect. The post Looking ahead to RSA 2018: An interview with ESET Security Evangelist Tony Anscombe appeared first on WeLiveSecurity

Vevo YouTube account hacked; popular celebs affected – Despacito video deleted
What are the advantages of open source software?
Red Hat looks beyond Linux

LinuxSecurity.com: Kubernetes and its dependencies have been deprecated in the Red Hat Enterprise Linux 7 Extras channel. 2. Description: The kubernetes packages provide utilities for container cluster management.

LinuxSecurity.com: Ansible and its dependencies have been deprecated in the Red Hat Enterprise Linux 7 Extras channel. 2. Description: Ansible and its dependencies will no longer be updated through the Extras

Death in paradise: ‘Cyber attack’ takes out national government’s IT

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update for libvncserver is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

LinuxSecurity.com: An update for libvorbis is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update for pcs is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

LinuxSecurity.com: An update for openssh is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

LinuxSecurity.com: An update for xdg-user-dirs is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: An update for krb5 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

LinuxSecurity.com: An update for policycoreutils is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: An update for ntp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

Company insiders behind 1 in 4 data breaches – study
Gmail is secure. Netflix is secure. Together they’re a phishing threat

Reading Time: ~2 min.The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. Panera Ignores Security Flaw for Months This week it was revealed that Panera failed […]

Sorry spooks: Princeton boffins reckon they can hide DNS queries

Risk Level: Very Low. Type: Trojan.

Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Wireless Keyboard is prone to a local security-bypass vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a denial-of-service vulnerability; fixes are available.

Type: Vulnerability. Microsoft Visual Studio is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.