December 21, 2017
How To Tell If Your Linux Server Has Been Compromised
Massive leak exposes data on 123 million US households
December 21, 2017
What does revoking Net Neutrality mean for security?
Imagine the scenario where an Internet Service Provider (ISP) allows a security company providing malware protection the option to pay for their traffic to be prioritized and a lower the priority level imposed on all other providers. The post What does revoking Net Neutrality mean for security? appeared first on WeLiveSecurity
December 21, 2017
How much will Britain’s next F-35s cost? Not telling, says MoD
December 21, 2017
Fooling Windows 10 facial authentication with a photo
December 21, 2017
Euro ransomware probe: Five Romanians cuffed
December 21, 2017
EMC admin? Plug this hole before the holidays
December 21, 2017
Infosec controls relaxed a little after latest Wassenaar meeting
December 21, 2017
Hackers leak personal videos of WWE Diva Paige
December 21, 2017
Risk Level: Very Low. Type: Trojan.
December 21, 2017
LinuxSecurity.com: Francesco Sirocco discovered a flaw in otrs2, the Open Ticket Request System, which could result in session information disclosure when cookie support is disabled. A remote attacker can take advantage of this flaw to take over an agent’s session if the agent is tricked into clicking a
December 20, 2017
LinuxSecurity.com: Marcin Noga discovered two vulnerabilities in LibreOffice, which could result in the execution of arbitrary code if a malformed PPT or DOC document is opened.
December 20, 2017
LinuxSecurity.com: CVE-2017-17432 It was discovered that malformed jumbogram packets could result in denial of service against OpenAFS, an implementation of the Andrew
December 20, 2017
Sensitive Data of 123 Million American Households Exposed
December 20, 2017
LinuxSecurity.com: Francesco Sirocco discovered a flaw in otrs2, the Open Ticket Request System, which could result in session information disclosure when cookie support is disabled. A remote attacker can take advantage of this flaw to take over an agent’s session if the agent is tricked into clicking a
December 20, 2017
CHM Help Files Deliver Brazilian Banking Trojan
December 20, 2017
LinuxSecurity.com: An update that solves 32 vulnerabilities and has one errata An update that solves 32 vulnerabilities and has one errata An update that solves 32 vulnerabilities and has one errata is now available. is now available.
December 20, 2017
LinuxSecurity.com: An update that fixes 26 vulnerabilities is now available. An update that fixes 26 vulnerabilities is now available. An update that fixes 26 vulnerabilities is now available.
December 20, 2017
Once your home WiFi network is up and running and your family’s devices are connected, it’s normal to turn a blind eye to your router. After all, it’s mostly out of sight and out of mind. Unfortunately, that small, seemingly harmless box isn’t as secure as you may think. Your router is your gateway to […]
December 20, 2017
UK teen dodges jail time for role in DDoSes on Natwest, Amazon and more
December 20, 2017
AnubisSpy Malware: Stealing photos, videos & spying on Android users
December 20, 2017
Bolt Will Tackle Thunderbolt 3 Security on Linux
December 20, 2017
Linux Privilege Escalation – Tradecraft Security Weekly
December 20, 2017
LinuxSecurity.com: New ruby packages are available for Slackware 14.2 and -current to fix a security issue.
December 20, 2017
Ghostery, uBlock lead the anti-track pack
December 20, 2017
Windows 10 Hello face recognition can be fooled with photos
December 20, 2017
WordPress captcha plugin on 300,000 sites had a sneaky backdoor
December 20, 2017
Youbit Bitcoin exchange quits operation after 2 hacks in 8 months
December 19, 2017
U.S. Government Blames North Korea for WannaCry
December 19, 2017
Risk Level: Very Low. Type: Trojan.
December 19, 2017
Adventures in cybersecurity research: risk, cultural theory, and the white male effect – part 1
Again and again we have seen security breaches occur because people did not heed advice that we and other people with expertise in security have been disseminating for years, advice about secure system design, secure system operation, and appropriate security strategy. The post Adventures in cybersecurity research: risk, cultural theory, and the white male effect […]
December 19, 2017
TalkTalk banbans TeamTeamviewerviewer againagain
December 19, 2017
Project Zero Chains Bugs for ‘aPAColypse Now’ Attack on Windows 10
December 19, 2017
New Android Malware Loapi Attacks Phones in Five Different Ways
December 19, 2017
Foreign Office confirms WannaCry culprit: It woz the Norks wot done it
December 19, 2017
Why we should fight for Net Neutrality
Granting ISPs the right to shape traffic, allowing for some traffic to be prioritized due to a commercial agreement, may have a negative effect on the outcome of using the service for both the consumer and the company providing the service. The post Why we should fight for Net Neutrality appeared first on WeLiveSecurity
December 19, 2017
HMS Queen Elizabeth has sprung a leak and everyone’s all a-tizzy
December 19, 2017
LinuxSecurity.com: An update that fixes 15 vulnerabilities is now available. An update that fixes 15 vulnerabilities is now available. An update that fixes 15 vulnerabilities is now available.
December 19, 2017
LinuxSecurity.com: An update for rh-ruby24-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 19, 2017
Android trojan has miner so aggressive it can bork your battery
December 19, 2017
Hackers using Google Adwords & Google Sites to spread malware
December 19, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 19, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 19, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 19, 2017
SCOLD WAR: Kaspersky drags Uncle Sam into court to battle AV ban
December 18, 2017
LinuxSecurity.com: Fix for CVE-2017-1000158
December 18, 2017
security update
December 18, 2017
security update
December 18, 2017
security update
December 18, 2017
LinuxSecurity.com: An update for cfme, cfme-appliance, and cfme-gemset is now available for CloudForms Management Engine 5.7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 18, 2017
Bitcoin FOMO or FOJI?
December 18, 2017
Two critical and unpatched flaws identified in vBulletin
December 18, 2017
30% off APC 1500VA Compact UPS Battery Backup & Surge Protector
December 18, 2017
Zero Trust networks and enterprise security strategy | Salted Hash Ep 12
December 18, 2017
Bitfinex cryptocurrency exchange hit by “heavy DDoS” attack again
December 18, 2017
Malware Decompiler Tool Goes Open Source
December 18, 2017
LinuxSecurity.com: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 18, 2017
Windows 10 bundles a briefly vulnerable password manager
December 18, 2017
No hack needed: Anonymisation beaten with a dash of SQL
December 18, 2017
Chinese woman unlocks colleague’s iPhone X through Face ID
December 17, 2017
LinuxSecurity.com: It was discovered that there was a command-injection vulnerability in kildclient, a “MUD” multiplayer real-time virtual world game. For Debian 7 “Wheezy”, this issue has been fixed in kildclient version
December 17, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
December 17, 2017
LinuxSecurity.com: An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.
December 17, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
December 17, 2017
Lazarus group conducting malware attacks to steal Bitcoins
December 17, 2017
security update
December 17, 2017
Russian oil pipeline computer hacked to mine Monero coins
December 16, 2017
LinuxSecurity.com: The package tor before version 0.3.1.9-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and denial of service.
December 16, 2017
LinuxSecurity.com: The package openssl-1.0 before version 1.0.2.m-1 is vulnerable to multiple issues including information disclosure and denial of service.
December 16, 2017
LinuxSecurity.com: The package chromium before version 63.0.3239.108-1 is vulnerable to cross-site scripting.
December 16, 2017
Dune! Game App Leaking Sensitive Data of Millions of Android Users
December 16, 2017
Keeper Password Manager in Windows 10 Exposed Saved Passwords
December 16, 2017
Everything you need to know about virtual private networks (VPN)
December 16, 2017
LinuxSecurity.com: An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.
December 16, 2017
LinuxSecurity.com: An update is now available for JBoss Core Services on RHEL 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
December 15, 2017
LinuxSecurity.com: An update is now available for JBoss Core Services on RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
December 15, 2017
LinuxSecurity.com: An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
December 15, 2017
Merry Xmas, fellow code nerds: Avast open-sources decompiler
December 15, 2017
LinuxSecurity.com: An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.
December 15, 2017
LinuxSecurity.com: An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.
December 15, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
December 15, 2017
LinuxSecurity.com: An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.
December 15, 2017
IDG Contributor Network: 3 predictions for devsecops in 2018
December 15, 2017
New OSX.Pirrit Malware floods Mac devices with ads; spies on users
December 15, 2017
LinuxSecurity.com: Reportbug, a tool designed to make the reporting of bugs in Debian easier, was further enhanced to automatically detect bug reports for potential regressions caused by a security update. After user confirmation an additional email with a copy of the report will be
December 15, 2017
LinuxSecurity.com: It was discovered that there was a vulnerability in sensible-browser, a utility to start the most suitable web browser based on your environment or configuration.
December 15, 2017
Triton Malware Targets Industrial Control Systems in Middle East
December 15, 2017
Hackers Deploy Triton Malware to Shut Down Power Station
December 15, 2017
New tool exposes websites that have suffered data breaches
December 15, 2017
We need to talk about mathematical backdoors in encryption algorithms
December 15, 2017
Business Email Compromise scammer sentenced to 41 months in prison
December 15, 2017
Russia could chop vital undersea web cables, warns Brit military chief
December 15, 2017
LinuxSecurity.com: An erlang TLS server configured with cipher suites using RSA key exchange, may be vulnerable to an Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) against RSA, which when exploited, may result in plaintext recovery of encrypted messages and/or a Man-in-the-middle (MiTM)
December 15, 2017
LinuxSecurity.com: An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.
December 15, 2017