February 27, 2018
GDPR deadline looms: The price and penalties | Salted Hash Ep 20
Fender’s ‘smart’ guitar amp has no Bluetooth pairing controls
February 27, 2018
Opt-in cryptomining script Coinhive ‘barely used’ say researchers
February 27, 2018
RAT king thrown in the slammer for peddling NanoCore PC nasty
February 27, 2018
Developer of NanoCore RAT that targeted Canada, US & Steam jailed
February 26, 2018
LinuxSecurity.com: A flaw was found in the AWT component of OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions. (CVE-2018-2641) * It was discovered that the LDAPCertStore class in the JNDI component of OpenJDK failed to securely handle LDAP referrals. An attacker could possibly use this flaw […]
February 26, 2018
LinuxSecurity.com: An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 26, 2018
LinuxSecurity.com: An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
February 26, 2018
LinuxSecurity.com: An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
February 26, 2018
LinuxSecurity.com: gcab: Extracting malformed .cab files causes stack smashing potentially leading to arbitrary code execution (CVE-2018-5345) SL7 x86_64 gcab-debuginfo-0.7-4.el7_4.i686.rpm gcab-debuginfo-0.7-4.el7_4.x86_64.rpm libgcab1-0.7-4.el7_4.i686.rpm libgcab1-0.7-4.el7_4.x86_64.rpm gcab-0.7-4.el7_4.x86_64.rpm libgcab1-devel-0.7-4.el7_4.i686.rpm libgcab1-devel-0.7-4.el7_4.x86 [More…]
February 26, 2018
Revamp of ‘Pwned Passwords’ Boosts Privacy and Size of Database
February 26, 2018
LinuxSecurity.com: An update for gcab is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 26, 2018
LinuxSecurity.com: It was discovered that there was an arbitrary command execution vulnerability in the Go programming language. The “go get” implementation did not correctly validate “import path”
February 26, 2018
Chrome OS Will Soon Start Supporting Linux Applications
February 26, 2018
Teen Exposes T-Mobile Flaw Allowing Mass Hijacking of User Accounts
February 26, 2018
NanoCore’s author didn’t hack anyone, but he was imprisoned anyway
February 26, 2018
Form W-2 data thefts are rocketing, warns FBI
February 26, 2018
Over 40% of online login attempts are attackers trying to invade accounts
Bots that traverse the internet on behalf of their human operators can fulfill both legitimate and malicious automated tasks. Statistics indicate that bot-driven internet traffic, by helper and harmful bots combined, surpasses human traffic. The post Over 40% of online login attempts are attackers trying to invade accounts appeared first on WeLiveSecurity
February 26, 2018
LinuxSecurity.com: An update that fixes 12 vulnerabilities is now available.
February 26, 2018
LinuxSecurity.com: An update that fixes 12 vulnerabilities is now available.
February 26, 2018
Privacy by Design: Can you create a safe smart home?
The Internet of Things (IoT) can be a network of connected convenience but this should not come at the expense of safeguarding your privacy and the personal data that connected devices collect and share. The post Privacy by Design: Can you create a safe smart home? appeared first on WeLiveSecurity
February 26, 2018
Private browsing isn’t: Boffins say smut-mode can’t hide your tracks
February 26, 2018
Cisco NFV controller is a bit too elastic: It has an empty password bug
February 26, 2018
LinuxSecurity.com: New upstream version Security fix for upstream issue 35 https://github.com/milkytracker/MilkyTracker/issues/35
February 25, 2018
LinuxSecurity.com: This update updates QtWebEngine to the 5.10.1 bugfix and security release. QtWebEngine 5.10.1 is part of the Qt 5.10.1 release, but only the QtWebEngine component is included in this update. This update includes: * Security fixes from Chromium up to version 64.0.3282.140. Including: CVE-2017-15407, CVE-2017-15409, CVE-2017-15410, CVE-2017-15411, CVE-2017-15415, CVE-2017-15416,
February 25, 2018
LinuxSecurity.com: New upstream version Security fix for upstream issue 35 https://github.com/milkytracker/MilkyTracker/issues/35
February 25, 2018
LinuxSecurity.com: CVE-2017-13194 Fix for a flaw in libvpx related to odd frame width, which may lead to a denial of service.
February 25, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 25, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in the Drupal content management framework. For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2018-001
February 25, 2018
Russia hacked Winter Olympics & framed N.Korea in false-flag attack: US
February 25, 2018
LinuxSecurity.com: It was discovered that there was a remote denial of service vulnerability in the imagemagick graphics library via a specially- crafted TIFF file.
February 25, 2018
Top The Pirate Bay Alternatives – Best Torrent Download Sites (2018)
February 25, 2018
LinuxSecurity.com: This update includes the changes in tzdata 2018c for the Perl bindings. For the list of changes, see DLA-1291-1. For Debian 7 “Wheezy”, these problems have been fixed in version
February 24, 2018
LinuxSecurity.com: This update includes the changes in tzdata 2018c. Notable changes are: – S?o Tom? and Pr?ncipe switched from +00 to +01. – Brazil’s DST will now start on November’s first Sunday.
February 24, 2018
Use 1Password’ ‘pwned password’ to verify if your password was leaked
February 24, 2018
LinuxSecurity.com: The package unixodbc before version 2.3.5-1 is vulnerable to arbitrary code execution.
February 24, 2018
LinuxSecurity.com: The package lib32-wavpack before version 5.1.0-2 is vulnerable to arbitrary code execution.
February 24, 2018
LinuxSecurity.com: The package wavpack before version 5.1.0-2 is vulnerable to arbitrary code execution.
February 24, 2018
LinuxSecurity.com: The package phpmyadmin before version 4.7.8-1 is vulnerable to cross- site scripting.
February 24, 2018
security update
February 24, 2018
LA Times website hacked to mine Monero cryptocurrency
February 23, 2018
Drupal Patches Critical Bug That Leaves Platform Open to XSS Attack
February 23, 2018
security update
February 23, 2018
security update
February 23, 2018
Man Sues Feds For Installing Surveillance Camera on his Property
February 23, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2017-5715
February 23, 2018
LinuxSecurity.com: It was discovered that there was an issue in the CUPS printer framework where remote attackers could execute arbitrary commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding.
February 23, 2018
LinuxSecurity.com: Several security issues were fixed in WavPack.
February 23, 2018
LinuxSecurity.com: This update doesn’t fix a vulnerability in GCC itself, but instead provides support for building retpoline-enabled Linux kernel updates. For the stable distribution (stretch), this problem has been fixed in
February 23, 2018
2,000 Colorado DOT computers infected with SamSam Ransomware
February 23, 2018
FBI Warns of Spike in W-2 Phishing Campaigns
February 23, 2018
Hacking these IoT baby monitors is child’s play, researchers reveal
February 23, 2018
Supporters of Net Neutrality Vow to Fight Rule Changes
February 23, 2018
3,000 Databases with 200 Million Unique accounts found on Dark Web
February 23, 2018
Six tips to help you avoid targeted marketing
If you get sick of shopping sites sending you “I see you stared at this item, here’s some similar stuff” messages, you may be able to modify your subscriptions or notifications to make this stop. The post Six tips to help you avoid targeted marketing appeared first on WeLiveSecurity
February 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 23, 2018
The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. Hackers Run Linux OS On Nintendo Switch When gaming consoles get hacked, it’s usually by someone who […]
February 23, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 23, 2018
OpenBSD releases Meltdown patch
February 23, 2018
LinuxSecurity.com: On February 22, fixes for CVE-2017-5715 were released into the Ubuntu Xenialkernel version 4.4.0-116.140. This CVE, also known as “Spectre,” is caused by flaws in the design of speculative execution hardware in the computer’sCPU, and could be used to access sensitive information in kernel memory. [More…]
February 23, 2018
LinuxSecurity.com: An update that solves 6 vulnerabilities and has one errata is now available.
February 23, 2018
security update
February 23, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in Squid3, a fully featured web proxy cache. The Common Vulnerabilities and Exposures project identifies the following issues:
February 22, 2018
Hackers spread Android spyware through Facebook using Fake profiles
February 22, 2018
LinuxSecurity.com: It was discovered that there where a number of vulnerabilities in irssi, the terminal based IRC client: – CVE-2018-7050: Null pointer dereference for an “empty” nick.
February 22, 2018
LinuxSecurity.com: An update that solves 8 vulnerabilities and has 19 fixes is now available.
February 22, 2018
Cryptojacking Attack Found on Los Angeles Times Website
February 22, 2018
How to protect your browser from Unicode domain phishing attacks
February 22, 2018
LinuxSecurity.com: The package libmspack before version 1:0.6alpha-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.
February 22, 2018
Over 50,000 baby monitors can be hacked but its vendor is AWOL
February 22, 2018
Survey shows sloppy password habits among young Brits
Young people were singled out as increasingly likely victims of internet-borne fraud, including because of their penchant for liberal sharing of personal information. The post Survey shows sloppy password habits among young Brits appeared first on WeLiveSecurity
February 22, 2018
LA Times homicide website throttles cryptojacking attack
February 22, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 22, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 22, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 22, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 22, 2018
LinuxSecurity.com: An update for rh-maven35-jackson-databind is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 22, 2018
uTorrent file-swappers urged to upgrade after PC hijack flaws fixed
February 22, 2018
Smashing Security #066: Passwords, pirates, and postcards
February 22, 2018
LinuxSecurity.com: The package strongswan before version 5.6.2-1 is vulnerable to denial of service.
February 22, 2018
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
February 22, 2018
uTorrent Users Warned of Remote Code Execution Vulnerability
February 21, 2018
Intel Issues Updated Spectre Firmware Fixes For Newer Processors
February 21, 2018
Life-saving Pacemakers, Defibrillators Can Be Hacked and Turned Off
February 21, 2018
New BEC Spam Campaign Targets Fortune 500 Businesses
February 21, 2018
Coldroot Mac Malware Silently Performs System-Wide Keylogging
February 21, 2018
LinuxSecurity.com: Security fix for CVE-2018-6942.
February 21, 2018
LinuxSecurity.com: New upstream release, including security fixes for CVE-2016-10713, CVE-2018-6951, CVE-2018-6952.
February 21, 2018
“Wire bank transfer” malware phishing scam hits SWIFT banking system
February 21, 2018
Intel hurls Spectre 2 microcode patch fix at world
February 21, 2018