December 15, 2017
Russia could chop vital undersea web cables, warns Brit military chief
LinuxSecurity.com: An erlang TLS server configured with cipher suites using RSA key exchange, may be vulnerable to an Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) against RSA, which when exploited, may result in plaintext recovery of encrypted messages and/or a Man-in-the-middle (MiTM)
December 15, 2017
LinuxSecurity.com: An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.
December 15, 2017
Brit film board proposed as overlord of online pr0nz age checks
December 15, 2017
Is source code inspection a security risk? Maybe not, experts say
December 15, 2017
LinuxSecurity.com: Update to 0.18.6
December 15, 2017
LinuxSecurity.com: USN-3509-1 introduced a regression in the Linux kernel for Ubuntu 16.04 LTS.
December 15, 2017
LinuxSecurity.com: USN-3509-2 introduced a regression in the Linux HWE kernel for Ubuntu 14.04 LTS.
December 15, 2017
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any questions? Just ask. NC County Crippled by Ransomware Attack Recently, a county in North Carolina was the target of a […]
December 15, 2017
Risk Level: Very Low. Type: Trojan.
December 15, 2017
Risk Level: Very Low. Type: Trojan.
December 15, 2017
LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 14, 2017
LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 14, 2017
LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 14, 2017
LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 11.0 (Ocata). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 14, 2017
LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 9.0 (Mitaka). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 14, 2017
LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 8.0 (Liberty). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 14, 2017
Synaptics Says Claims of a Keylogger in HP Laptops are False
December 14, 2017
LinuxSecurity.com: An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.
December 14, 2017
Man gets friend kidnapped to steal $1.8 million worth of Ethereum
December 14, 2017
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 14, 2017
LinuxSecurity.com: An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8 and Red Hat Satellite 5.8 ELS. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 14, 2017
LinuxSecurity.com: libxml2 could be made to crash or run arbitrary code if it opened a specially crafted file.
December 14, 2017
Permissions Flaw Found on Azure AD Connect
December 14, 2017
Risk Level: Very Low. Type: Trojan.
December 14, 2017
Risk Level: Very Low. Type: Trojan.
December 14, 2017
85 Credential-Stealing Apps Found on Google Play Store
December 14, 2017
19-Year-Old ROBOT Flaw Resurfaces to Haunt Popular Websites
December 14, 2017
Fox-IT reveals hackers hijacked its DNS records, spied on clients’ files
December 14, 2017
Cybersecurity Trends 2018: The costs of connection
To help the reader navigate through the maze of such threats, ESET’s thought leaders have zeroed in on several areas that top the priority list in our exercise in looking forward. The post Cybersecurity Trends 2018: The costs of connection appeared first on WeLiveSecurity
December 14, 2017
LinuxSecurity.com: An update for go-toolset-7 and go-toolset-7-golang is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 14, 2017
NIST Releases New Cybersecurity Framework Draft
December 14, 2017
LinuxSecurity.com: The package quagga before version 1.2.2-1 is vulnerable to denial of service.
December 14, 2017
LinuxSecurity.com: The package qt5-webengine before version 5.10.0-1 is vulnerable to multiple issues including arbitrary code execution, cross-site scripting, access restriction bypass, content spoofing and information disclosure.
December 14, 2017
Risk Level: Very Low. Type: Trojan.
December 14, 2017
Risk Level: Very Low. Type: Trojan.
December 14, 2017
Risk Level: Very Low. Type: Trojan.
December 14, 2017
Risk Level: Very Low. Type: Trojan.
December 14, 2017
Risk Level: Very Low. Type: Trojan.
December 14, 2017
Risk Level: Very Low. Type: Trojan.
December 14, 2017
Risk Level: Very Low. Type: Trojan.
December 14, 2017
Risk Level: Very Low. Type: Trojan.
December 14, 2017
OK, OK, MIRA-I DID IT: Botnet-building compsci kid comes clean
December 13, 2017
LinuxSecurity.com: An update that solves three vulnerabilities and has three An update that solves three vulnerabilities and has three An update that solves three vulnerabilities and has three fixes is now available. fixes is now available.
December 13, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
December 13, 2017
Hackers behind Mirai botnet & DYN DDoS attacks plead guilty
December 13, 2017
19-Year-Old TLS Vulnerability Weakens Modern Website Crypto
December 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a remote security-bypass vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Internet Explorer are prone to a remote memory-corruption vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Internet Explorer are prone to an information-disclosure vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Office Outlook is prone to an information-disclosure vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Internet Explorer are prone to a remote memory-corruption vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Internet Explorer is prone to an information-disclosure vulnerability; fixes are available.
December 13, 2017
LinuxSecurity.com: An update for eap7-jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 6 and Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 7.
December 13, 2017
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 13, 2017
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 13, 2017
LinuxSecurity.com: A regression was added by the patch introduced in version 0.5.0-2+deb7u2 to fix CVE-2017-16927: xrdp-sesman started to segfault in libscp. For Debian 7 “Wheezy”, these problems have been fixed in version
December 13, 2017
LinuxSecurity.com: An update for rh-java-common-lucene5 is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 13, 2017
LinuxSecurity.com: An update for rh-java-common-lucene is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 13, 2017
LinuxSecurity.com: Fix to directory traversal attacks (CVE-2017-17042).
December 13, 2017
LinuxSecurity.com: Update to 2.1 —- Update to 2.0, Initial support for aarch64 images and associated SBCs
December 13, 2017
Barclays employee sentenced for aiding Dridex money launderers
December 13, 2017
Memes: the explanation of nearly everything – including computer viruses
We still don’t have a solid scientific theory of memes; nonetheless, they already allow us to understand why certain things happen the way they do. Memes are “alive”; they reproduce, mutate, and evolve according to Darwinian laws. The post Memes: the explanation of nearly everything – including computer viruses appeared first on WeLiveSecurity
December 13, 2017
File with 1.4 Billion Hacked and Leaked Passwords Found on the Dark Web
December 13, 2017
Newly Revealed Flaw in Intel Processors Allows Undetectable Malware
December 13, 2017
One per cent of all websites probably p0wned each year, say boffins
December 13, 2017
Up to ‘ONE BEEELLION’ vid-stream gawpers toil in crypto-coin mines
December 13, 2017
Put down the eggnog, it’s Patch Tuesday: Fix Windows boxes ASAP
December 13, 2017
Risk Level: Very Low. Type: Trojan.
December 13, 2017
What is the cyber kill chain?
December 12, 2017
Microsoft December Patch Tuesday Update Fixes 34 Bugs
December 12, 2017
Argy-bargy Argies barge into Starbucks Wi-Fi with alt-coin discharges
December 12, 2017
security update
December 12, 2017
Sophisticated ‘MoneyTaker’ group stole millions from Russian & US banks
December 12, 2017
New Spider Ransomware Comes With 96-Hour Deadline
December 12, 2017
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available.
December 12, 2017
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2017:3402
December 12, 2017
Bitfinex cryptocurrency exchange hit by massive DDoS attacks
December 12, 2017
Brrr! It’s a snow day and someone has pwned the chuffin’ school heating
December 12, 2017
Cryptocurrency in kilowatt hours: Counting the costs of anonymous transactions
The energy costs are not the only charges in a transaction: the bitcoin network itself levies a charge which, according to a blog from Valve, the gaming provider behind the Steam network, has skyrocketed from $0.20 in 2016 to $20 per transaction today The post Cryptocurrency in kilowatt hours: Counting the costs of anonymous transactions […]
December 12, 2017
This Fidget spinner app is sending other apps data to Chinese server
December 12, 2017
It has been a turbulent year of devastating ransomware attacks (e.g. NotPetya) and gut-wrenching breaches (e.g. Equifax). Undoubtedly, the question on everyone’s mind is, “what’s in store for us in the New Year?” Webroot’s top 10 cybersecurity predictions for 2018 covers everything from ransomware and breaches to mobile, cryptocurrency, and government.We’ve grouped our predictions to […]
December 12, 2017
Watch: How to Pick a Lock
December 12, 2017
Dyn Inc. DDoS anniversary, and the truth about the Reaper botnet
December 12, 2017
LinuxSecurity.com: Fix omapi SD leak (#1523547)
December 12, 2017