December 8, 2017
The Most Exciting Linux Kernel Stories Of 2017
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any questions? Just ask. PayPal Plagued by Phishing Emails Recently, many PayPal users have received emails about a fake transaction failure […]
December 8, 2017
LinuxSecurity.com: It was discovered that the TLS server in Erlang is vulnerable to an adaptive chosen ciphertext attack against RSA keys. For the oldstable distribution (jessie), this problem has been fixed
December 8, 2017
VMware and Carbon Black: you complete me, no you complete me
December 8, 2017
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
December 8, 2017
LinuxSecurity.com: An update for rh-postgresql95-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 8, 2017
LinuxSecurity.com: An update for rh-postgresql96-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 8, 2017
LinuxSecurity.com: An update for postgresql is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 8, 2017
LinuxSecurity.com: An update for rh-postgresql94-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 8, 2017
LinuxSecurity.com: Several security issues were fixed in the kernel.
December 8, 2017
security update
December 8, 2017
Security industry needs to be less trusting to get more secure
December 7, 2017
More than 5,000 WordPress websites plagued with Keylogger
December 7, 2017
Banking Apps Found Vulnerable to MITM Attacks
December 7, 2017
LinuxSecurity.com: An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 7, 2017
Risk Level: Very Low. Type: Trojan.
December 7, 2017
Risk Level: Very Low. Type: Trojan, Worm.
December 7, 2017
HMS Queen Lizzie formally joins the Royal Navy
December 7, 2017
Virtual keyboard app exposes personal data of 31 million users
The developer’s keyboard apps boast 40 million users across Android and iOS, but “only” Android users were affected by the security lapse. The post Virtual keyboard app exposes personal data of 31 million users appeared first on WeLiveSecurity
December 7, 2017
Toucan play that game: Talking toy bird hacked
December 7, 2017
LinuxSecurity.com: George Shuklin from servers.com discovered that Nova, a cloud computing fabric controller, did not correctly enforce its image- or hosts-filters. This allowed an authenticated user to bypass those filters by simply rebuilding an instance.
December 7, 2017
LinuxSecurity.com: Michael Eder and Thomas Kittel discovered that Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos, did not correctly handle ASN.1 data. This would allow an unauthenticated remote attacker to cause a denial of service (crash of
December 7, 2017
LinuxSecurity.com: An update is now available for Red Hat OpenShift Container Platform 3.4, Red Hat OpenShift Container Platform 3.5, and Red Hat OpenShift Container Platform 3.6. Red Hat Product Security has rated this update as having a security impact
December 7, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
December 7, 2017
Cryptocurrency mining market NiceHash hacked; $67m might be stolen
December 7, 2017
NiceHash diced up by hackers, thousands of Bitcoin pilfered
December 6, 2017
Ashley Madison Found Leaking Private & Explicit Photos of Users
December 6, 2017
LinuxSecurity.com: An update that solves two vulnerabilities and has one An update that solves two vulnerabilities and has one An update that solves two vulnerabilities and has one errata is now available. errata is now available.
December 6, 2017
LinuxSecurity.com: An update that solves two vulnerabilities and has one An update that solves two vulnerabilities and has one An update that solves two vulnerabilities and has one errata is now available. errata is now available.
December 6, 2017
Google Patches Critical Encryption Bug Impacting Pixel, Nexus Phones
December 6, 2017
LinuxSecurity.com: curl could be made to crash if it received specially crafted input.
December 6, 2017
LinuxSecurity.com: An update for liblouis is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 6, 2017
LinuxSecurity.com: libxml2 could be made to crash if it opened a specially craftedfile.
December 6, 2017
As the holiday season kicks into high gear, keep in mind that shoppers are at an even higher risk of cyberattacks during this time of year. Salesforce projects that mobile users will account for 60 percent of traffic to retail sites around the globe this year. With the increased popularity of shopping on the go, […]
December 6, 2017
Intel Management Engine pwned by buffer overflow
December 6, 2017
Satori botnet rears its head, exploiting IoT vulnerabilities
December 6, 2017
Cryptocurrency exchange Bitfinex plagued by DDoS attacks
The cast of characters behind the attacks, or their motives, are unclear. However, the onslaughts come at a time when the bitcoin price hits new highs, possibly triggering efforts on the part of cybercriminals to manipulate and cash in on the price. The post Cryptocurrency exchange Bitfinex plagued by DDoS attacks appeared first on WeLiveSecurity
December 6, 2017
TeamViewer Vulnerability Lets Attackers Take Full Control of PCs
December 6, 2017
Six things to consider before implementing an ISMS
These factors can be key to the success or failure of the ISMS implementation, due to the day-to-day activities in the organization and the resources required for system operation. The post Six things to consider before implementing an ISMS appeared first on WeLiveSecurity
December 6, 2017
Build a Privacy-respecting and Threat-blocking DNS Server
December 6, 2017
Deception: Why It’s Not Just Another Honeypot
December 6, 2017
LinuxSecurity.com: Several security issues were fixed in linux-firmware.
December 6, 2017
Beware the IDEs of Android: three biggies have vulnerabilities
December 6, 2017
LinuxSecurity.com: An update that fixes 7 vulnerabilities is now available. An update that fixes 7 vulnerabilities is now available. An update that fixes 7 vulnerabilities is now available.
December 6, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
December 6, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
December 5, 2017
LinuxSecurity.com: An update that fixes three vulnerabilities is now available. An update that fixes three vulnerabilities is now available. An update that fixes three vulnerabilities is now available.
December 5, 2017
LinuxSecurity.com: An update that solves four vulnerabilities and has two An update that solves four vulnerabilities and has two An update that solves four vulnerabilities and has two fixes is now available. fixes is now available.
December 5, 2017
TeamViewer Rushes Fix for Permissions Bug
December 5, 2017
Data-slurping keyboard app makes Mongo mistake with user data
December 5, 2017
What if cybercriminals could generate money from victims without ever delivering malware to their systems? That’s exactly what a new phenomenon called “cryptojacking” entails, and it’s been gaining momentum since CoinHive first debuted the mining JavaScript a few months ago. The intended purpose: whenever a user visits a site that is running this script, the […]
December 5, 2017
Developers Targeted in ‘ParseDroid’ PoC Attack
December 5, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 5, 2017
ISF predicts increasing impact of data breaches next year
The association expects the increased costs incurred in security breaches to come both from traditional areas, such as network cleanup and customer notification, and newer areas such as litigation. The post ISF predicts increasing impact of data breaches next year appeared first on WeLiveSecurity
December 5, 2017
Once again, UK doesn’t rule out buying F-35A fighter jets
December 5, 2017
How a hack almost sprung a prisoner out of jail
December 5, 2017
Google prepares 47 Android bug fixes, ten of them rated Critical
December 5, 2017
LinuxSecurity.com: An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 5, 2017
Infosys names a new CEO: welcome to the hot-seat Salil S. Parekh
December 5, 2017
Dentist-turned bug-biter given a taste of freedom
December 5, 2017
LinuxSecurity.com: An update for sssd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 5, 2017
Man hacks prison computers & alters records for pal’s early release
December 5, 2017
International team takes down virus-spewing Andromeda botnet
December 5, 2017
SEC’s cyber-cops cyber-file cyber-first cyber-fraud cyber-charges
December 5, 2017
LinuxSecurity.com: This is the final notification for the retirement of Red Hat Enterprise Linux 7.2 Extended Update Support (EUS). This notification applies only to those customers subscribed to the Extended Update Support (EUS) channel for Red Hat Enterprise Linux 7.2.
December 4, 2017
Malware display fake BSOD to sell phony Windows anti-virus for $25
December 4, 2017
LinuxSecurity.com: Security fix for CVE-2017-1000158
December 4, 2017
Prison hacker who tried to free friend now likely to join him inside
December 4, 2017
Google Cracks Down On Nosy Android Apps
December 4, 2017
security update
December 4, 2017
LinuxSecurity.com: Update to latest releases
December 4, 2017
LinuxSecurity.com: Update to latest releases
December 4, 2017
ESET helps law enforcement worldwide to disrupt Gamarue botnet
Throughout its monitoring of the threat, ESET found dozens of C&C servers every month. The bulk of ESET’s research was conducted late last year, with the peak of Wauchos’s activity going back approximately to that time. The post ESET helps law enforcement worldwide to disrupt Gamarue botnet appeared first on WeLiveSecurity
December 4, 2017
ESET takes part in global operation to disrupt Gamarue
Wauchos is an extensible bot that allows its owner to create and use custom plugins. However, there are some plugins that are widely available and that are used by many different botnets. The post ESET takes part in global operation to disrupt Gamarue appeared first on WeLiveSecurity
December 4, 2017
PayPal’s TIO Networks breach affects millions of customers
December 4, 2017
Ursnif Trojan Adopts New Code Injection Technique
December 4, 2017
Data Breach Index Website “Leakbase” Shut Down
December 4, 2017
Office 365 phishing examples | Salted Hash Ep 10
December 4, 2017