December 29, 2017
2018 Security Predictions – Double Up on Linux Attacks
December 29, 2017
Introduction to GPG Encryption and git-crypt
December 29, 2017
One Small Step to Harden USB Over IP on Linux
December 29, 2017
Best practices when running Node.js with port 80 (Ubuntu / Linode)
December 29, 2017
How to Generate CSR (Certificate Signing Request) in Linux
December 29, 2017
The state of Linux security in 2017
December 29, 2017
Gaps in software slowing down security professionals
December 29, 2017
The hacks that left us exposed in 2017
December 29, 2017
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any questions? Just ask. WordPress Backdoor Found on Over 300,000 Machines Recently, researchers found a WordPress plugin containing a backdoor that […]
December 29, 2017
My Twitter was hacked, claims John McAfee
December 29, 2017
Sound Waves can Help Hackers Disrupt Functions of Hard Disk Drives
December 28, 2017
Code Used in Zero Day Huawei Router Attack Made Public
December 28, 2017
LinuxSecurity.com: An update that fixes 16 vulnerabilities is now available. An update that fixes 16 vulnerabilities is now available. An update that fixes 16 vulnerabilities is now available.
December 28, 2017
LinuxSecurity.com: An update that fixes 14 vulnerabilities is now available. An update that fixes 14 vulnerabilities is now available. An update that fixes 14 vulnerabilities is now available.
December 28, 2017
Bose & Sonos Smart Speakers can be Hacked to Play Disturbing Sounds
December 28, 2017
Risk Level: Very Low. Type: Trojan.
December 28, 2017
Risk Level: Very Low. Type: Trojan.
December 28, 2017
Risk Level: Very Low. Type: Trojan.
December 28, 2017
Cybersecurity review of 2017: The year of wake-up calls – part 2
Courtesy of its highly customizable nature – along with its ability to persist in the system and to provide valuable information for fine-tuning the highly configurable payloads – the malware can be adapted for attacks against any environment, making it extremely dangerous. The post Cybersecurity review of 2017: The year of wake-up calls – part […]
December 28, 2017
LinuxSecurity.com: This update fixes several vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed image files are processed.
December 28, 2017
LinuxSecurity.com: Patch for CVE-2016-6328
December 28, 2017
LinuxSecurity.com: This update addresses the following vulnerabilities: * [CVE-2017-13866](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13866), [CVE-2017-13870](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13870), [CVE-2017-7156](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7156), [CVE-2017-13856](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13856)
December 28, 2017
LinuxSecurity.com: Update to upstream 14.7.4 release to address AST-2017-012 security issue —- Update to upstream 14.7.3 release for security alert AST-2017-013 —- Update to upstream 14.7.2 release for bug fixes
December 28, 2017
LinuxSecurity.com: Update to version 0.0.11, see http://metadata.ftp- master.debian.org/changelogs/main/s/sensible-utils/sensible- utils_0.0.11_changelog for details.
December 28, 2017
LinuxSecurity.com: Disable SSHv1 options.
December 28, 2017
Leaky RootsWeb Server Exposes Some Ancestry.com User Data
December 27, 2017
LinuxSecurity.com: Update to 0.8.3, fixing CVE-2017-15612 and CVE-2017-16876
December 27, 2017
Ancestry.com’ RootsWeb breach: 300,000 plaintext accounts leaked
December 27, 2017
LinuxSecurity.com: Multiple security issues have been found in the Mozilla Thunderbird mail client including information leaks, unintended JavaScript execution and sender address spoofing.
December 27, 2017
LinuxSecurity.com: Update to version 0.0.11, see http://metadata.ftp- master.debian.org/changelogs/main/s/sensible-utils/sensible- utils_0.0.11_changelog for details.
December 27, 2017
LinuxSecurity.com: Update to upstream 13.18.4 release to address AST-2017-012/CVE-2017-17664 security issue
December 27, 2017
LinuxSecurity.com: – update to the latest upstream pre-release (fixes CVE-2017-1000211)
December 27, 2017
LinuxSecurity.com: Disable SSHv1 options.
December 27, 2017
Software used in FBI’s biometric database contains Russian code: Report
December 27, 2017
The worst passwords of the year revealed
Need a New Year’s resolution? How about this one? Start taking password security more seriously. The post The worst passwords of the year revealed appeared first on WeLiveSecurity
December 27, 2017
Cybersecurity review of 2017: The year of wake-up calls – part 1
Ransomware and data breaches remain major thorns in the sides of users and organizations across the world, often piercing their defenses without too much effort. The post Cybersecurity review of 2017: The year of wake-up calls – part 1 appeared first on WeLiveSecurity
December 27, 2017
5 Best mobile security apps in Android & iOS, Free Download
December 26, 2017
Mozilla Patches Critical Bug in Thunderbird
December 26, 2017
LinuxSecurity.com: Several vulnerabilities have been discovered in the interpreter for the Ruby language. The Common Vulnerabilities and Exposures project identifies the following problems:
December 26, 2017
LinuxSecurity.com: Several vulnerabilities have been discovered in the interpreter for the Ruby language. The Common Vulnerabilities and Exposures project identifies the following problems:
December 26, 2017
Catelites Android Malware Poses as 2,200 Bank Apps
December 26, 2017
US Navy Tweets about Julian Assange after his account disappeared
December 25, 2017
Opera 50 Beta Version to Come with Cryptocurrency Mining Blocker
December 25, 2017
Man Arrested for Threatening Firm with Cyber Attacks for Not Hiring Him
December 25, 2017
LinuxSecurity.com: An update that fixes four vulnerabilities is now available. An update that fixes four vulnerabilities is now available. An update that fixes four vulnerabilities is now available.
December 25, 2017
LinuxSecurity.com: An update that fixes four vulnerabilities is now available. An update that fixes four vulnerabilities is now available. An update that fixes four vulnerabilities is now available.
December 25, 2017
security update
December 24, 2017
Holiday and Christmas scams users should be aware of
December 24, 2017
LinuxSecurity.com: Hanno B?ck found several buffer overflows in GIMP, the GNU Image Manipulation Program, which could lead to application crash or other unspecified behaviour if a user opened untrusted input files.
December 24, 2017
LinuxSecurity.com: Multiple vulnerabilities have been discovered in Irssi, a terminal based IRC client, which may lead to denial of service or other unspecified impact.
December 24, 2017
The 5 Common network channels used by malware
December 24, 2017
Edward Snowden’s Haven app turns your laptop into a security system
December 23, 2017
LinuxSecurity.com: Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
December 23, 2017
Lizard Squad & PoodleCorp Founder Pleads Guilty to DDoS Attacks
December 23, 2017
LinuxSecurity.com: An update that fixes 17 vulnerabilities is now available. An update that fixes 17 vulnerabilities is now available. An update that fixes 17 vulnerabilities is now available.
December 23, 2017
LinuxSecurity.com: Multiple vulnerabilities were discovered in Enigmail, an OpenPGP extension for Thunderbird, which could result in a loss of confidentiality, faked signatures, plain text leaks and denial of service. Additional information can be found under
December 23, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
December 23, 2017
LinuxSecurity.com: Several vulnerabilities were discovered in rsync, a fast, versatile, remote (and local) file-copying tool, allowing a remote attacker to bypass intended access restrictions or cause a denial of service.
December 23, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
December 23, 2017
Nissan Canada cyber attack; millions of customer accounts stolen
December 22, 2017
Huawei Router Vulnerability Used to Spread Mirai Variant
December 22, 2017
LinuxSecurity.com: New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix a security issue.
December 22, 2017
LinuxSecurity.com: An update that contains security fixes can now be installed. An update that contains security fixes can now be installed. An update that contains security fixes can now be installed.
December 22, 2017
LinuxSecurity.com: An update that solves 32 vulnerabilities and has one errata An update that solves 32 vulnerabilities and has one errata An update that solves 32 vulnerabilities and has one errata is now available. is now available.
December 22, 2017
LinuxSecurity.com: An update that contains security fixes can now be installed. An update that contains security fixes can now be installed. An update that contains security fixes can now be installed.
December 22, 2017
security update
December 22, 2017
security update
December 22, 2017
security update
December 22, 2017
Two arrested for Hacking DC Security Cameras Before Trump Inauguration
December 22, 2017
Nissan Canada Finance Notifies 1.1 Million of Data Breach
December 22, 2017
Hackers Spreading Digmine Monero Mining Malware via Facebook
December 22, 2017
Detecting ROBOT and other vulnerabilities using Red Hat testing tools.
December 22, 2017
Braking news: Nissan Canada hacked, up to 1.1m Canucks exposed
December 22, 2017
LinuxSecurity.com: Hanno Boeck, Juraj Somorovsky and Craig Young discovered that the TLS implementation in Bouncy Castle is vulnerable to an adaptive chosen ciphertext attack against RSA keys.
December 21, 2017
Crooks Switch from Ransomware to Cryptocurrency Mining
December 21, 2017
Fake Bitcoin Wallet Apps Found on Google Play Store
December 21, 2017
LinuxSecurity.com: Several vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following issues.
December 21, 2017
LinuxSecurity.com: Gabriel Corona reported that sensible-browser from sensible-utils, a collection of small utilities used to sensibly select and spawn an appropriate browser, editor or pager, does not validate strings before launching the program specified by the BROWSER environment variable,
December 21, 2017
LinuxSecurity.com: Multiple vulnerabilities were discovered in Enigmail, an OpenPGP extension for Thunderbird, which could result in a loss of confidentiality, faked signatures, plain text leaks and denial of service. Additional information can be found under
December 21, 2017
security update
December 21, 2017
LinuxSecurity.com: This is the One-Year notification for the retirement of Red Hat Enterprise Linux 6.7 Extended Update Support (EUS). This notification applies only to those customers subscribed to the Extended Update Support (EUS) channel for Red Hat Enterprise Linux 6.7.
December 21, 2017
Google Play Boots 3 Fake Bitcoin Wallet Apps
December 21, 2017
Risk Level: Very Low. Type: Trojan.
December 21, 2017
EtherDelta cryptocurrency exchange hacked in fake website scam
December 21, 2017
Adventures in cybersecurity research: risk, cultural theory, and the white male effect – part 2
Armed with the cultural theory described in part one as a possible explanation for why some people do not heed expert advice, we fielded a survey that queried US adults about their attitudes to 15 different technology hazards, including six that were cyber-related. The post Adventures in cybersecurity research: risk, cultural theory, and the white […]
December 21, 2017
WordPress Captcha Plugin Contains Backdoor- 300,000 Websites at Risk
December 21, 2017
Sednit update: How Fancy Bear Spent the Year
Over the past few years the Sednit group has used various techniques to deploy their various components on targets computers. The attack usually starts with an email containing either a malicious link or malicious attachment. The post Sednit update: How Fancy Bear Spent the Year appeared first on WeLiveSecurity
December 21, 2017