March 21, 2018
LinuxSecurity.com: Various issues were discovered in exempi, a library to parse XMP metadata that may cause a denial-of-service or may have other unspecified impact via crafted files.
March 21, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0549
March 21, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0549
March 21, 2018
LinuxSecurity.com: An update for collectd is now available for RHEV 4.X RHEV-H and Agents for RHEL-7 and RHEV Engine version 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
March 21, 2018
Since inception in late 2016, the TrickBot banking trojan has continually undergone updates and changes in attempts to stay one step ahead of defenders. While TrickBot has not always been the stealthiest trojan, its authors have remained consistent in the use of new distribution vectors and development of new features for their product. On March […]
March 21, 2018
Risk Level: Very Low. Type: Trojan.
March 21, 2018
Orbitz Warns 880,000 Payment Cards Suspected Stolen
March 21, 2018
Pirate websites expose users to more malware, study finds
The research confirmed that the more time the users spent on pirate sites the higher the likelihood that some type of malware would compromise their computers. The post Pirate websites expose users to more malware, study finds appeared first on WeLiveSecurity
March 21, 2018
LinuxSecurity.com: An update for rh-mariadb101-mariadb and rh-mariadb101-galera is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
March 21, 2018
Easily Fund Open Source Projects With These Platforms
March 21, 2018
Administrator’s Password Bad Practice
March 21, 2018
Creaking Chromebooks getting Meltdown protection soon
March 21, 2018
Commonwealth Games are just the ticket for Facebook
March 21, 2018
In light of the publicity, panic, and lingering despair around Spectre and Meltdown, I thought this might be a good time to clear up the differences between vulnerabilities, exploits, and malware. Neither Spectre nor Meltdown are exploits or malware. They are vulnerabilities. Vulnerabilities don’t hurt people, exploits and malware do. To understand this distinction, witness […]
March 20, 2018
LinuxSecurity.com: Paramiko could be made to run programs if it received speciallycrafted network traffic.
March 20, 2018
LinuxSecurity.com: Paramiko could be made to run programs if it received speciallycrafted network traffic.
March 20, 2018
LinuxSecurity.com: This update upgrades Firefox to version 52.7.2 ESR. * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) SL6 x86_64 firefox-52.7.2-1.el6_9.x86_64.rpm firefox-debuginfo-52.7.2-1.el6_9.x86_64.rpm firefox-52.7.2-1.el6_9.i686.rpm firefox-debuginfo-52.7.2-1.el6_9.i686.rpm i386 firefox-52.7.2-1.el6_9.i686.rpm firefox-debuginfo-52.7.2-1.el6 [More…]
March 20, 2018
Brit police forces spend peanuts on cybercrime training
March 20, 2018
UK’s National Lottery urges millions of players to change their passwords
The lottery’s operator has found that attackers probably used an automated method known as ‘credential stuffing’ to access up to 150 customer accounts. The post UK’s National Lottery urges millions of players to change their passwords appeared first on WeLiveSecurity
March 20, 2018
You need an ‘I’ve been hacked’ plan for your cloud
March 20, 2018
Apple moves on HSTS abuse in Safari
March 20, 2018
LinuxSecurity.com: The package lib32-libcurl-gnutls before version 7.59.0-1 is vulnerable to multiple issues including denial of service and information disclosure.
March 20, 2018
LinuxSecurity.com: The package libcurl-gnutls before version 7.59.0-1 is vulnerable to multiple issues including denial of service and information disclosure.
March 20, 2018
LinuxSecurity.com: The package libcurl-compat before version 7.59.0-1 is vulnerable to multiple issues including denial of service and information disclosure.
March 20, 2018
LinuxSecurity.com: The package lib32-libcurl-compat before version 7.59.0-1 is vulnerable to multiple issues including denial of service and information disclosure.
March 20, 2018
LinuxSecurity.com: The package lib32-curl before version 7.59.0-1 is vulnerable to multiple issues including denial of service and information disclosure.
March 20, 2018
LinuxSecurity.com: The package curl before version 7.59.0-1 is vulnerable to multiple issues including denial of service and information disclosure.
March 20, 2018
LinuxSecurity.com: The package clamav before version 0.99.4-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.
March 20, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 20, 2018
security update
March 19, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 19, 2018
LinuxSecurity.com: An update that solves 7 vulnerabilities and has one errata is now available.
March 19, 2018
How to Keep Your Customers Safe Online – 2018
March 19, 2018
A Mirai Botnet Postscript: Lessons Learned
March 19, 2018
LinuxSecurity.com: The package firefox before version 59.0.1-1 is vulnerable to arbitrary code execution.
March 19, 2018
LinuxSecurity.com: The package libvorbis before version 1.3.6-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.
March 19, 2018
LinuxSecurity.com: An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
March 19, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in KDE Plasma Workspaces, the worst of which allows local attackers to execute arbitrary commands.
March 19, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.
March 19, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Gentoo’s JabberD 2.x ebuild, the worst of which allows local attackers to escalate privileges. [More…]
March 19, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Oracle’s JDK and JRE software suites, the worst of which may allow execution of arbitrary code. [More…]
March 19, 2018
LinuxSecurity.com: Multiple vulnerabilities were found in cURL, an URL transfer library: CVE-2018-1000120
March 18, 2018
LinuxSecurity.com: The package ntp before version 4.2.8.p11-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing and denial of service.
March 18, 2018
security update
March 18, 2018
security update
March 18, 2018
security update
March 18, 2018
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
March 18, 2018
security update
March 17, 2018
security update
March 17, 2018
The Pirate Bay is down – Here are its best alternatives
March 17, 2018
LinuxSecurity.com: Richard Zhu and Huzaifa Sidhpurwala discovered that an out-of-bounds memory write when playing Vorbis media files could result in the execution of arbitrary code.
March 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 17, 2018
LinuxSecurity.com: Huzaifa Sidhpurwala discovered that an out-of-bounds memory write in the codebook parsing code of the Libtremor multimedia library could result in the execution of arbitrary code if a malformed Vorbis file is opened.
March 16, 2018
security update
March 16, 2018
LinuxSecurity.com: Richard Zhu discovered that an out-of-bounds memory write in the codeboook parsing code of the Libvorbis multimedia library could result in the execution of arbitrary code.
March 16, 2018
The ‘Perfect Storm’ of Disinformation and Hacking
March 16, 2018