October 16, 2017
‘Open sesame’… Subaru key fobs vulnerable, says engineer
security update
October 16, 2017
Sounds painful: Audio code bug lets users, apps get root on Linux
October 15, 2017
LinuxSecurity.com: Fix CVE-2017-2887
October 15, 2017
LinuxSecurity.com: A vulnerability found in Shadow may allow remote attackers to cause a Denial of Service condition or produce other unspecified behaviors.
October 15, 2017
LinuxSecurity.com: A null pointer dereference in GnuTLS might allow attackers to cause a Denial of Service condition.
October 15, 2017
LinuxSecurity.com: 3.94 and patch for CVE-2017-15056
October 14, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
October 14, 2017
Hundreds Of websites mining cryptocurrency without user consent
October 14, 2017
LinuxSecurity.com: update to upstream release 0.3.1.7 —- update to upstream release 0.2.9.12 (SECURITY) (#1494860)
October 14, 2017
LinuxSecurity.com: Security fix for buffer overflow due to long input filenames [see Bug 1422550 and 1422545]
October 14, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
October 14, 2017
New Android Ransomware Permanently Changes PIN, Demands Ransom
October 14, 2017
Cyberespionage Group Steps Up Campaigns Against Japanese Firms
October 14, 2017
What is a firewall?
October 14, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in WebkitGTK+, the worst of which may allow remote attackers to execute arbitrary code.
October 13, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Graphite, the worst of which could lead to the remote execution of arbitrary code.
October 13, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Puppet Agent, the worst of which could result in the execution of arbitrary code.
October 13, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in GNU Libtasn1, the worst of which may allow remote attackers to execute arbitrary code.
October 13, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in elfutils, the worst of which may allow remote attackers to cause a Denial of Service condition. [More…]
October 13, 2017
LinuxSecurity.com: Security fix for buffer overflow due to long input filenames [see Bug 1422550 and 1422545]
October 13, 2017
Kiss Goodbye to Privacy: Microsoft Introduces Cortana for Skype
October 13, 2017
Risk Level: Very Low. Type: Trojan.
October 13, 2017
Hyatt Hit By Credit Card Breach, Again
October 13, 2017
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. Rigzone Founder Caught Stealing Data Over the last few months, officials have been piecing together the […]
October 13, 2017
Google Busy Removing More Malicious Chrome Extensions from Web Store
October 13, 2017
Chris Brook Says Farewell to Threatpost
October 13, 2017
Android ransomware DoubleLocker encrypts data and changes PINs
October 13, 2017
Legacy Office Feature Used In Novel Document Attacks
October 13, 2017
Product Testing: Simulation, dissimulation, exasperation
True, most malware isn’t viral any more, but I don’t think that matters in this context. Nor, of course, is the EICAR file a virus, and doesn’t in any respect behave like one. The post Product Testing: Simulation, dissimulation, exasperation appeared first on WeLiveSecurity
October 13, 2017
Former policewoman who stalked married man is jailed for 11 months
October 13, 2017
What is Grafeas? Better auditing for containers
October 13, 2017
Centralized security in the cloud is the best security model
October 13, 2017
DoubleLocker: Innovative Android Ransomware
DoubleLocker can change the device’s PIN, preventing victims from accessing their devices, and also encrypts the data it finds in them – a combination that has not been seen previously in the Android ecosystem. The post DoubleLocker: Innovative Android Ransomware appeared first on WeLiveSecurity
October 13, 2017
LinuxSecurity.com: An update is now available for Red Hat JBoss BPM Suite. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 12, 2017
LinuxSecurity.com: An update is now available for Red Hat JBoss BRMS. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 12, 2017
security update
October 12, 2017
security update
October 12, 2017
DDoS attacks on Sweden’ Transport Agencies Delay Train Service
October 12, 2017
Locky Gets Updated to ‘Ykcol’, Part of Rapid-Fire Spam Campaigns
October 12, 2017
LinuxSecurity.com: An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 12, 2017
LinuxSecurity.com: Security fix for CVE-2017-1495
October 12, 2017
Over the last year, a handful of cyberattacks have made news headlines and affected families. High-tech toy maker Spiral Toys was the victim of a particularly cunning hacking scheme. The maker of CloudPets stuffed animals reportedly exposed more than two million private voice recordings and the login credentials of 800,000 accounts. While these “smart toys” […]
October 12, 2017
Equifax Takes Down Compromised Page Redirecting to Adware Download
October 12, 2017
Equifax Website Hacked To Deliver Malware-bearing Flash Update
October 12, 2017
Can you trust that ‘Sign in to iTunes Store’ dialog on your iPhone?
October 12, 2017
Sensitive Data of Australian Navy’s Vessels and Fighter Jets stolen
October 12, 2017
Down the Rabbit Hole with a BLU Phone Infection
October 12, 2017
The Pirate Bay Caught Secretly Running Cryptocurrency Miner Again
October 12, 2017
10 layers of Linux container security
October 12, 2017
Apache Patches Optionsbleed Flaw in HTTP Server
October 12, 2017
Secure Messaging with Onion Services, a How-To
October 12, 2017
LinuxSecurity.com: An update for rh-mysql57-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 12, 2017
Swiss banking software has Swiss cheese security, says Rapid7
October 12, 2017
LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available. An update that fixes 9 vulnerabilities is now available. An update that fixes 9 vulnerabilities is now available.
October 12, 2017
LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available. An update that fixes 9 vulnerabilities is now available. An update that fixes 9 vulnerabilities is now available.
October 12, 2017
LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 11, 2017
LinuxSecurity.com: These releases are about hardening `git shell` that is used on servers against an unsafe user input, which `git cvsserver` copes with poorly. From the release notes: * “git cvsserver” no longer is invoked by “git shell” by default, as it is old and largely unmaintained. * Various Perl scripts did not use safe_pipe_capture() […]
October 11, 2017
security update
October 11, 2017
security update
October 11, 2017
LinuxSecurity.com: Martin Thomson discovered that nss, the Mozilla Network Security Service library, is prone to a use-after-free vulnerability in the TLS 1.2 implementation when handshake hashes are generated. A remote attacker can take advantage of this flaw to cause an application using the nss
October 11, 2017
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
October 11, 2017
Type: Vulnerability. Microsoft Office is prone to a remote code-execution vulnerability; fixes are available.
October 11, 2017
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.
October 11, 2017
Type: Vulnerability. Microsoft Windows is prone to a local security-bypass vulnerability; fixes are available.
October 11, 2017
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
October 11, 2017
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
October 11, 2017
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
October 11, 2017
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
October 11, 2017
iOS Flaw Makes Apple ID Passwords Prone to Phishing Attacks
October 11, 2017
iOS Password Prompts are Ripe for Abuse
October 11, 2017
Risk Level: Very Low. Type: Trojan.
October 11, 2017
North Korean hackers allegedly probing US utilities for weaknesses
October 11, 2017
RubyGems Patches Remote Code Execution Vulnerability
October 11, 2017
Medical Records and Sensitive Data of 150,000 US Patients Exposed
October 11, 2017
PureVPN Aided FBI to Track CyberStalker by Providing His Logs
October 11, 2017
LinuxSecurity.com: Several vulnerabilities were discovered in WordPress, a web blogging tool. They would allow remote attackers to exploit path-traversal issues, perform SQL injections and various cross-site scripting attacks.
October 11, 2017
Five cool things happening for National Cyber Security Awareness Month
National Cyber Security Awareness Month and its events have become top of mind for people and businesses in recent years, given the staggering number of recent data breaches and global ransomware attacks. The post Five cool things happening for National Cyber Security Awareness Month appeared first on WeLiveSecurity
October 11, 2017
Hackers steal $60 million from Taiwanese bank using bespoke malware
October 11, 2017