LinuxSecurity.com: New release (1:12.2.2-1), security fix for CVE-2017-16818
December 12, 2017
LinuxSecurity.com: Update to latest version. Contains security fixes for CVE-2017-15090, CVE-2017-15092, CVE-2017-15093 and CVE-2017-15094
December 12, 2017
LinuxSecurity.com: Upstream annoucement: [WordPress 4.9.1 Security and Maintenance Release](https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and- maintenance-release/)
December 12, 2017
LinuxSecurity.com: This is an update fixing denial of service (CVE-2017-16944). —- This is an update fixing use-after-free (CVE-2017-16943).
December 12, 2017
LinuxSecurity.com: Fix to directory traversal attacks (CVE-2017-17042).
December 12, 2017
LinuxSecurity.com: * CVE-2017-1000256: libvirt: TLS certificate verification disabled for clients (bz #1503687) * Fix qemu image locking with shared disks (bz #1513447)
December 12, 2017
LinuxSecurity.com: * Ver. 19.3.6.4
December 12, 2017
LinuxSecurity.com: The simplesamlphp package in wheezy is vulnerable to multiple attacks on authentication-related code, leading to unauthorized access and information disclosure.
December 12, 2017
LinuxSecurity.com: Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-15407
December 12, 2017
Enterprise security spend to continue to trend higher
A breakdown of the ‘spending pie’ shows that the ‘security services’ segment is projected to make up nearly 60% of the total IT security budgets, followed by the ‘infrastructure protection’ segment on a little over 18%. The post Enterprise security spend to continue to trend higher appeared first on WeLiveSecurity
December 12, 2017
LinuxSecurity.com: An update for org.ovirt.engine-root is now available for Red Hat Virtualization Manager version 4.1. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which
December 12, 2017
Google’s Project Zero reveals Apple jailbreak exploit
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
security update
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft PowerPoint is prone to an information-disclosure vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Exchange Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft SharePoint is prone to a privilege-escalation vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer are prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Excel is prone to a remote code-execution vulnerability; fixes are available.
December 12, 2017
Vulnerability Found in Two Keyless Entry Locks
December 11, 2017
In-Store WiFi Provider Used Starbucks Website to Generate Monero Coins
December 11, 2017
security update
December 11, 2017
security update
December 11, 2017
As 2017 comes to a close, we’re looking back at the 10 most significant (or simply the most devastating) cybersecurity stories of the year. Read through the list below to see which attacks, data breaches, and other events left a lasting impact on both the security industry and the global online community overall. Which story […]
December 11, 2017
Leftover Debugger Doubles as a Keylogger on Hundreds of HP Laptop Models
December 11, 2017
Vietnamese man hacked Australian airport computers; stole security data
December 11, 2017
Banking malware on Google Play targets Polish banks
Besides delivering the promised functionalities, the malicious apps can display fake notifications and login forms seemingly coming from legitimate banking applications, harvest credentials entered into the fake forms, as well as intercept text messages to bypass SMS-based 2-factor authentication. The post Banking malware on Google Play targets Polish banks appeared first on WeLiveSecurity
December 11, 2017
Blighty flogs Qatar a bunch of missiles and Typhoon fighter jets
December 11, 2017
Happy holidays, scam spotters!
Businesses are often sent fake invoices and waybills which install ransomware. Teach staff to avoid these. If questionable, ask your IT dept to look at it. E-cards have been a target in the past and may be used again in holiday-themed attacked. The post Happy holidays, scam spotters! appeared first on WeLiveSecurity
December 11, 2017
Language bugs infest downstream software, fuzzer finds
December 11, 2017
Leftover Synaptics debugger puts a keylogger on HP laptops
December 11, 2017
Dynamics 365 sandbox leaked TLS certificates
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
LinuxSecurity.com: It discovered that the Private Browsing mode in the Mozilla Firefox web browser allowed to fingerprint a user across multiple sessions via IndexedDB.
December 10, 2017
LinuxSecurity.com: Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. For the oldstable distribution (jessie), these problems have been fixed
December 10, 2017
Someone hacked this traffic sign with anti-Trump messages
December 10, 2017
A Trove of 1.4 Billion Clear Text Credentials File Found on Dark Web
December 10, 2017
LinuxSecurity.com: – fix NTLM buffer overflow via integer overflow (CVE-2017-8816) – fix FTP wildcard out of bounds read (CVE-2017-8817)
December 10, 2017
LinuxSecurity.com: Update to latest upstream version.
December 10, 2017
security update
December 9, 2017
security update
December 9, 2017
Researcher finds pre-installed keylogger in hundreds of HP laptops
December 9, 2017
LinuxSecurity.com: It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for CIP Safety, IWARP_MPA, NetBIOS, Profinet I/O and AMQP, which result in denial of dervice or the execution of arbitrary code.
December 9, 2017
LinuxSecurity.com: An update that solves three vulnerabilities and has two An update that solves three vulnerabilities and has two An update that solves three vulnerabilities and has two fixes is now available. fixes is now available.
December 9, 2017
Security Vulnerabilities in Certificate Pinning
December 9, 2017
10 useful ncat (nc) Command Examples for Linux Systems
December 9, 2017
WordPress hit with keylogger, 5,400 sites infected
December 9, 2017
LinuxSecurity.com: This is a cumulative update to the Mozilla CA certificates trust list version 2.20, which has been published as part of Mozilla NSS 3.34.1. It also includes the changes that were previously released as version 2.18 as part of NSS 3.34. For additional details, please refer to the release notes of NSS 3.34.1 https://developer.mozilla.org/en-
December 9, 2017
LinuxSecurity.com: Patch CVE-2017-16927.
December 9, 2017
LinuxSecurity.com: Upstream released new version. See https://collectd.org/news.shtml#news106 for the list of changes. Fixes CVE-2017-16820 (double free in snmp plugin)
December 9, 2017
LinuxSecurity.com: New openssl packages are available for Slackware 14.2 and -current to fix security issues.
December 9, 2017
security update
December 9, 2017
Bitcoin investors targeted by Orcus RAT in new phishing campaign
December 8, 2017
Android Flaw Poisons Signed Apps with Malicious Code
December 8, 2017
Android flaw lets attack code slip into signed apps
December 8, 2017
security update
December 8, 2017
security update
December 8, 2017
Man who threw away $121m of Bitcoin wants to dig up landfill site
December 8, 2017
Apple Fixes Flaw Impacting HomeKit Devices
December 8, 2017
UK.gov law resources now untrustworthy, according to browsers
December 8, 2017
StrongPity2 spyware replaces FinFisher in MitM campaign – ISP involved?
As we reported in September, in campaigns we detected in two different countries, man-in-the-middle attacks had been used to spread FinFisher, with the “man” in both cases most likely operating at the ISP level. The post StrongPity2 spyware replaces FinFisher in MitM campaign – ISP involved? appeared first on WeLiveSecurity
December 8, 2017
Next-gen telco protocol Diameter has last-gen security – researchers
December 8, 2017
LinuxSecurity.com: An update that fixes 18 vulnerabilities is now available. An update that fixes 18 vulnerabilities is now available. An update that fixes 18 vulnerabilities is now available.
December 8, 2017
LinuxSecurity.com: An update that fixes 41 vulnerabilities is now available. An update that fixes 41 vulnerabilities is now available. An update that fixes 41 vulnerabilities is now available.
December 8, 2017
LinuxSecurity.com: An update that solves 5 vulnerabilities and has three fixes An update that solves 5 vulnerabilities and has three fixes An update that solves 5 vulnerabilities and has three fixes is now available. is now available.
December 8, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
December 8, 2017
LinuxSecurity.com: An update that solves 5 vulnerabilities and has three fixes An update that solves 5 vulnerabilities and has three fixes An update that solves 5 vulnerabilities and has three fixes is now available. is now available.
December 8, 2017
Quantum Computing Is the Next Big Security Risk
December 8, 2017