Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Internet Explorer is prone to an information-disclosure vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Edge is prone to a security-bypass vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Edge is prone to an information disclosure vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Word is prone to a memory-corruption vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Edge is prone to an information disclosure vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Edge is prone to an information disclosure vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
November 14, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
November 14, 2017
NSA rocked after The Shadow Brokers Breach
November 13, 2017
Thousand-dollar iPhone X’s Face ID wrecked by ‘$150 3D-printed mask’
November 13, 2017
Phishing Biggest Threat to Google Account Security
November 13, 2017
New IcedID Trojan Targets US Banks
November 13, 2017
You can soon securely unlock smartphone with your “body sweat”
November 13, 2017
Homeland Security Hackers Remotely Hack Boeing 757
November 13, 2017
The Daily Mail whisks up Kaspersky fears – but where’s the meat?
November 13, 2017
New Vulnerability Exploits Antivirus Programs to Install Malware
November 13, 2017
Transparency of machine-learning algorithms is a double-edged sword
Unless companies processing citizens’ personal data fully understand the reasoning behind the decisions made based on their machine-learning models, they will find themselves between a rock and a hard place. The post Transparency of machine-learning algorithms is a double-edged sword appeared first on WeLiveSecurity
November 13, 2017
Ransomware marketplaces and the future of malware | Salted Hash Ep 6
November 13, 2017
Stop your moaning, says maker of buggy Bluetooth sex toy
November 13, 2017
LinuxSecurity.com: An update for rh-eclipse46-jackson-databind is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 13, 2017
LinuxSecurity.com: An update for rh-eclipse47-jackson-databind is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 13, 2017
Ride-share upstart ‘Fasten’ revealed as Hive of insecurity
November 13, 2017
Risk Level: Very Low. Type: Trojan.
November 13, 2017
Amazon moves to stop S3 buckets leaking business data
November 12, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in eGroupWare, the worst of which allows remote attackers to execute arbitrary code.
November 12, 2017
LinuxSecurity.com: A vulnerability was discovered in VDE which may allow local users to gain root privileges.
November 12, 2017
CopperheadOS stops updates to thwart knock-off phone floggers
November 12, 2017
security update
November 12, 2017
All it took for researchers was a mask to bypass iPhone X Face ID
November 12, 2017
LinuxSecurity.com: An update that fixes 19 vulnerabilities is now available. An update that fixes 19 vulnerabilities is now available. An update that fixes 19 vulnerabilities is now available.
November 12, 2017
LinuxSecurity.com: This update includes a rebase from 8.0.46 up to 8.0.47 which resolves a single CVE along with various other bugs/features: rhbz#1497682 CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615
November 12, 2017
LinuxSecurity.com: This update fixes several vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed GIF, TTF, SVG, TIFF, PCX, JPG or SFW files
November 12, 2017
security update
November 12, 2017
Muslim Hacktivists Hack ISIS website; expose 20,000 subscribers list
November 11, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Cacti, the worst of which could lead to the remote execution of arbitrary code.
November 11, 2017
Someone Hacked Swedish Radio Station to Play Pro-ISIS Song
November 11, 2017
26,000 blockchain projects launched in 2016, 92 percent are now dead
November 11, 2017
LinuxSecurity.com: * Fix ppc64 KVM failure (bz #1501936) * CVE-2017-15038: 9p: information disclosure when reading extended attributes (bz #1499111) * CVE-2017-15268: potential memory exhaustion via websock connection to VNC (bz #1496882) —- qemu-pr-helper didn’t work due to a change in the libmultipath/libmpathpersist APIs exposed by device-mapper-multipath-devel. This has been fixed now. Other
November 11, 2017
LinuxSecurity.com: 1.6, multiple security fixes.
November 11, 2017
LinuxSecurity.com: – Update to 1.1.26 – CVE-2017-15194 Release notes: https://www.cacti.net/release_notes.php?version=1.1.26
November 11, 2017
LinuxSecurity.com: Security fix for CVE-2017-12629
November 11, 2017
LinuxSecurity.com: For changes see: https://www.mozilla.org/en-US/thunderbird/52.4.0/releasenotes/
November 11, 2017
Cyberhitmen hired for sustained DDoS attacks against mans ex-employer
November 10, 2017
security update
November 10, 2017
security update
November 10, 2017
security update
November 10, 2017
security update
November 10, 2017
LinuxSecurity.com: Wen Bin discovered that bchunk, an application that converts a CD image in bin/cue format into a set of iso and cdr/wav tracks files, did not properly check its input. This would allow malicious users to crash the application or potentially execute arbitrary code.
November 10, 2017
Microsoft president says the world needs a digital Geneva Convention
November 10, 2017
“Eavesdropper” Flaw Exposes Millions of Call, Texts and Recordings
November 10, 2017
AutoIt Scripting Used By Overlay Malware to Bypass AV Detection
November 10, 2017
Intel’ Management Engine Tech Just Got Exposed Through USB Ports
November 10, 2017
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. UK-Based Cryptocurrency Hit By Cyberattack Prior to the official launch of Electroneum, a UK-based cryptocurrency that […]
November 10, 2017
Threatpost News Wrap Podcast for Nov. 10
November 10, 2017
Experts share perspective on the state of journalists’ cybersafety
These days, journalists and publishers are increasingly concerned about protecting themselves, their work, and their sources. Rightfully so, for we live in a time when nearly every aspect of publishing occurs online. The post Experts share perspective on the state of journalists’ cybersafety appeared first on WeLiveSecurity
November 10, 2017
WikiLeaks drama alert: CIA forged digital certs imitating Kaspersky Lab
November 10, 2017
What to consider when deploying a next-generation firewall
November 10, 2017
Fighting persistent malware with a UEFI scanner
The biggest news in malware so far this year has been WannaCryptor a.k.a. WannaCry, and one reason that particular ransomware spread so fast was because it used a “top secret” exploit developed by the NSA, an agency known to have dabbled in UEFI compromise. The post Fighting persistent malware with a UEFI scanner appeared first […]
November 10, 2017
LinuxSecurity.com: An update that solves 29 vulnerabilities and has two fixes An update that solves 29 vulnerabilities and has two fixes An update that solves 29 vulnerabilities and has two fixes is now available. is now available.
November 10, 2017
LinuxSecurity.com: An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is now available. now available.
November 10, 2017
LinuxSecurity.com: An update that solves 23 vulnerabilities and has 6 fixes is An update that solves 23 vulnerabilities and has 6 fixes is An update that solves 23 vulnerabilities and has 6 fixes is now available. now available.
November 10, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in libxml2, the worst of which could result in the execution of arbitrary code.
November 10, 2017
WikiLeaks’ Vault 8 Leaks Show CIA Impersonated Kaspersky Lab
November 10, 2017
Risk Level: Very Low. Type: Trojan.
November 10, 2017
LinuxSecurity.com: It was discovered that the pg_ctlcluster, pg_createcluster and pg_upgradecluster commands handled symbolic links insecurely which could result in local denial of service by overwriting arbitrary files.
November 9, 2017
LinuxSecurity.com: Several vulnerabilities have been found in the PostgreSQL database system: CVE-2017-15098
November 9, 2017
LinuxSecurity.com: A vulnerabilitiy has been found in the PostgreSQL database system: Denial of service and potential memory disclosure in the json_populate_recordset() and jsonb_populate_recordset() functions.
November 9, 2017
US government seizes Texas gun mass murder to demand backdoors
November 9, 2017
security update
November 9, 2017
Google just can not get rid of BankBot malware from Play Store
November 9, 2017
Eavesdropper Vulnerability Exposes Mobile Call, Text Data
November 9, 2017
LinuxSecurity.com: An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.
November 9, 2017
Google Chrome will automatically block forced website redirects
November 9, 2017
Uni staffer’s health info blabbed in email list snafu
November 9, 2017
Microsoft Provides Guidance on Mitigating DDE Attacks
November 9, 2017
Windows Movie Maker Scam spreads massively due to high Google ranking
ESET detected a modified version of Windows Movie Maker that aims to collect money from unaware users. The spread has been boosted by SEO. The post Windows Movie Maker Scam spreads massively due to high Google ranking appeared first on WeLiveSecurity
November 9, 2017
Microsoft issues advisory to users after macro-less malware attacks
November 9, 2017
Evil pixels: researcher demos data-theft over screen-share protocols
November 9, 2017
Microsoft pals up with partners for threat-hunting
November 9, 2017