security update
October 29, 2017
security update
October 29, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in X.Org Server the worst of which could allow a local attacker to replace shared memory segments.
October 29, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Asterisk, the worst of which allows remote execution of arbitrary shell commands.
October 29, 2017
LinuxSecurity.com: Antti Levomaeki, Christian Jalio, Joonas Pihlaja and Juhani Eronen discovered two buffer overflows in the HTTP protocol handler of the Wget download tool, which could result in the execution of arbitrary code when connecting to a malicious HTTP server.
October 29, 2017
The Dark Overlord hacks plastic surgery clinic; demands ransom
October 29, 2017
LinuxSecurity.com: An update that fixes 21 vulnerabilities is now available. An update that fixes 21 vulnerabilities is now available. An update that fixes 21 vulnerabilities is now available.
October 29, 2017
Risky online dating apps putting your privacy in danger
October 28, 2017
Ships Are Vulnerable to Cyber Attacks Due To Maritime Platform Flaw
October 28, 2017
LinuxSecurity.com: Security fix for [CVE-2017-12173]
October 28, 2017
LinuxSecurity.com: An update that solves 9 vulnerabilities and has two fixes An update that solves 9 vulnerabilities and has two fixes An update that solves 9 vulnerabilities and has two fixes is now available. is now available.
October 28, 2017
Google slides DNS privacy into ‘Droid developer stream
October 28, 2017
The Little Black Box That Took Over Piracy
October 28, 2017
Apache OpenOffice Update Patches Four Vulnerabilities
October 28, 2017
LinuxSecurity.com: An update that fixes 14 vulnerabilities is now available. An update that fixes 14 vulnerabilities is now available. An update that fixes 14 vulnerabilities is now available.
October 28, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
October 28, 2017
LinuxSecurity.com: An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.
October 28, 2017
LinuxSecurity.com: Brian Carpenter, Geeknik Labs and 0xd34db347 discovered that cURL, an URL transfer library, incorrectly parsed an IMAP FETCH response with size 0, leading to an out-of-bounds read.
October 27, 2017
LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available. An update that fixes 9 vulnerabilities is now available. An update that fixes 9 vulnerabilities is now available.
October 27, 2017
LinuxSecurity.com: New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
October 27, 2017
LinuxSecurity.com: New wget packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues.
October 27, 2017
LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available. An update that fixes 9 vulnerabilities is now available. An update that fixes 9 vulnerabilities is now available.
October 27, 2017
LinuxSecurity.com: An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.
October 27, 2017
LinuxSecurity.com: An update that solves 13 vulnerabilities and has two fixes An update that solves 13 vulnerabilities and has two fixes An update that solves 13 vulnerabilities and has two fixes is now available. is now available.
October 27, 2017
LinuxSecurity.com: An update for wget is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 27, 2017
Researchers hack vacuum cleaner; turn it into perfect spying device
October 27, 2017
Google Patches ‘High Severity’ Browser Bug
October 27, 2017
Rockwell Automation Patches Wireless Access Point against Krack
October 27, 2017
Slack Plugs ‘Severe’ SAML User Authentication Hole
October 27, 2017
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. Fake Crypto Exchange Apps Found on Google Play Store After being available on the Google Play […]
October 27, 2017
The Cybersecurity Skills Gap: Educating the next generation
A long-term strategy focused on training and educating the next generation will help to ensure enough people have the right skills for the future. The post The Cybersecurity Skills Gap: Educating the next generation appeared first on WeLiveSecurity
October 27, 2017
This malware turns itself into ransomware if you try to remove it
October 26, 2017
jQuery Blog Gets Hacked – Hackers Compromise CoinHive’s DNS
October 26, 2017
LinuxSecurity.com: An update that solves 8 vulnerabilities and has one errata An update that solves 8 vulnerabilities and has one errata An update that solves 8 vulnerabilities and has one errata is now available. is now available.
October 26, 2017
EternalRomance Exploit Found in Bad Rabbit Ransomware
October 26, 2017
Ursnif Banking Trojan Spreading In Japan
October 26, 2017
The U.S. electrical grid is in “imminent danger” from cyberattacks according to a report from the U.S. Energy Department released earlier this year. Such an attack would put much of the infrastructure that we rely on for public safety and basic services in jeopardy—electricity, water, healthcare, and communications systems, among others. Just last week, an […]
October 26, 2017
Bad Rabbit ransomware spreading like wildfire but there is a way out
October 26, 2017
LinuxSecurity.com: Fix CVE-2017-2888
October 26, 2017
Two Critical Vulnerabilities Found In Inmarsat’s SATCOM Systems
October 26, 2017
How to secure your router to prevent IoT threats?
The router is the first device that you must consider, since it not only controls the perimeter of your network, but all your traffic and information pass through it. The post How to secure your router to prevent IoT threats? appeared first on WeLiveSecurity
October 26, 2017
Increase your network security: Deploy a honeypot
October 26, 2017
Hackers hijack Coinhive cryptocurrency miner through an old password
October 26, 2017
Why Patching Software Is Hard: Organizational Challenges
October 26, 2017
National Cybersecurity Awareness Month Twitter Chats part 4
In our previous blog entries we covered Simple Steps to Online Safety and Cybersecurity in the Workplace. In the blog today we will be talking about some of today’s predictions when it comes to the internet of tomorrow. The post National Cybersecurity Awareness Month Twitter Chats part 4 appeared first on WeLiveSecurity
October 26, 2017
security update
October 25, 2017
Hackers Prepping IOTroop Botnet with Exploits
October 25, 2017
Bad Rabbit Linked to ExPetr/Not Petya Attacks
October 25, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in MuPDF, a PDF file viewer, which may result in denial of service or the execution of arbitrary code. CVE-2017-14685, CVE-2017-14686, and CVE-2017-14687
October 25, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
October 25, 2017
LinuxSecurity.com: An update that solves four vulnerabilities and has one An update that solves four vulnerabilities and has one An update that solves four vulnerabilities and has one errata is now available. errata is now available.
October 25, 2017
Risk Level: Low. Type: Trojan, Worm.
October 25, 2017
Malvertising Campaign Redirects Browsers To Terror Exploit Kit
October 25, 2017
Canadian SMBs: How technology can help you stay energized
Canadian small and medium businesses (SMBs) use a multitude of skills and resources to continuously improve all aspects of their companies’ performance. The post Canadian SMBs: How technology can help you stay energized appeared first on WeLiveSecurity
October 25, 2017
DDoS Attack Takes Czech Election Sites Offline
October 25, 2017
4 extra-strength container security tools for Docker and Kubernetes
October 25, 2017
Risk Level: Very Low. Type: Trojan.
October 25, 2017
Risk Level: Low. Type: Trojan, Worm.
October 25, 2017
Risk Level: Low. Type: Trojan, Worm.
October 25, 2017
FIN7 Spear Phishing Attacks Now Aim At Avoiding Detection
October 24, 2017
LinuxSecurity.com: This update adds support for the IBM858 codepage (RHBZ#1416405). It moves the `nss_compat` NSS service module to the main glibc package (RHBZ#1400538). As a security hardening measure, stdio streams are no longer flushed on process abort/assertion failure (RHBZ#1498880). `/var/db/Makefile` is now included in the `nss_db` package (RHBZ#1498900). Fixes installation related failures for IBM
October 24, 2017
LinuxSecurity.com: Fix CVE-2017-2888
October 24, 2017
LinuxSecurity.com: Security fix for [CVE-2017-12173]
October 24, 2017
BadRabbit Ransomware Attacks Hitting Russia, Ukraine
October 24, 2017
Bad Rabbit: Not-Petya is back with improved ransomware
A new ransomware outbreak today has hit some major infrastructure in Ukraine including Kiev metro. Here are some details about this new variant of Petya. The post Bad Rabbit: Not-Petya is back with improved ransomware appeared first on WeLiveSecurity
October 24, 2017
Fake Cryptocurrency Apps on Play Store Stealing User Data
October 24, 2017
DUHK Attack Exposes Gaps in FIPS Certification
October 24, 2017
Reaper IoT botnet could be more devastating than Mirai
October 24, 2017
Kiev metro hit with a new variant of the infamous Diskcoder ransomware
Public sources have confirmed that computer systems in the Kiev Metro, Odessa naval port, Odessa airport, Ukrainian ministries of infrastructure and finance, and also a number of organizations in Russia are among the affected organizations. The post Kiev metro hit with a new variant of the infamous Diskcoder ransomware appeared first on WeLiveSecurity
October 24, 2017
LinuxSecurity.com: An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 24, 2017
LinuxSecurity.com: An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 24, 2017
National Cybersecurity Awareness Month Twitter Chats part 3
In the first two parts of our series we have looked at the role an everyday internet user has in making the internet a safer place, and ID theft. This time around we focus on the role everyone has when it comes to cybersecurity best practices in the workplace. The post National Cybersecurity Awareness Month […]
October 24, 2017
LinuxSecurity.com: An update for httpd24, httpd24-curl, httpd24-httpd, httpd24-mod_auth_kerb, and httpd24-nghttp2 is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 24, 2017
LinuxSecurity.com: New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
October 24, 2017
Risk Level: Very Low. Type: Trojan.
October 24, 2017
Risk Level: Very Low. Type: Trojan.
October 24, 2017
Microsoft’ New Feature to Protect Windows 10 from Ransomware
October 23, 2017
Risk Level: Very Low. Type: Trojan.
October 23, 2017
Risk Level: Very Low. Type: Trojan.
October 23, 2017
Latest Sofacy Campaign Targeting Security Researchers
October 23, 2017
FBI failed to break into nearly 7000 mobiles due to encryption
October 23, 2017
Fake cryptocurrency trading apps on Google Play
With all the hype around cryptocurrencies, cybercriminals are trying to grab whatever new opportunity they can – be it hijacking users’ computing power to mine cryptocurrencies via browsers or by compromising unpatched machines, or various scam schemes utilizing phishing websites and fake apps. The post Fake cryptocurrency trading apps on Google Play appeared first on […]
October 23, 2017
Hackers target security researchers with malware-laden document
October 23, 2017
LinuxSecurity.com: An update for rh-nodejs4, rh-nodejs4-node-gyp, and rh-nodejs4-nodejs is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 23, 2017
LinuxSecurity.com: An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
October 23, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Dnsmasq, the worst of which may allow remote attackers to execute arbitrary code.
October 23, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in OpenJPEG, the worst of which may allow remote attackers to execute arbitrary code.
October 23, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in the PCRE Library, the worst of which may allow remote attackers to cause a Denial of Service condition. [More…]
October 23, 2017