September 26, 2017
macOS High Sierra Available—And Vulnerable to Keychain Attack
After The Pirate Bay, Showtime Websites Also Found Mining Cryptocoins
September 26, 2017
Equifax CEO falls on his sword weeks after credit biz admits mega-breach
September 26, 2017
Mobile Stock Trading App Providers Unresponsive to Glaring Vulnerabilities
September 26, 2017
Mobile stock trading apps riddled with security holes
September 26, 2017
Adobe’s security team reveals its private PGP key
September 26, 2017
1.4 Million New Phishing Sites Launched Each Month
September 26, 2017
Beyond public key encryption
September 26, 2017
LinuxSecurity.com: A vulnerability in libsoup might allow remote attackers to execute arbitrary code.
September 26, 2017
Researchers promise demo of ‘God-mode’ pwnage of Intel mobos
September 26, 2017
Risk Level: Very Low. Type: Trojan.
September 26, 2017
LinuxSecurity.com: An update that fixes 15 vulnerabilities is now available. An update that fixes 15 vulnerabilities is now available. An update that fixes 15 vulnerabilities is now available.
September 25, 2017
Brit broke anti-terror law by refusing to cough up passwords to cops
September 25, 2017
CBS’s Showtime caught mining crypto-coins in viewers’ web browsers
September 25, 2017
Deloitte: ‘Very Few Clients’ Impacted by Cyber Attack
September 25, 2017
Android Lockscreen Patterns Less Secure Than PINs
September 25, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Chromium, the worst of which could result in the execution of arbitrary code.
September 25, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in PHP, the worst of which could result in the execution of arbitrary code.
September 25, 2017
Risk Level: Very Low. Type: Trojan.
September 25, 2017
TV broadcasts in California interrupted to show “end of the world” alert
September 25, 2017
Sensitive client emails, usernames, passwords exposed in Deloitte hack
September 25, 2017
Chris Vickery on Amazon S3 Data Leaks
September 25, 2017
I’m delighted to join the Webroot team officially today as CEO. We helped define the cybersecurity field in our first 20 years, but I believe our best days are ahead. With this introductory post, I thought I’d let you know where I intend to focus in my first months at Webroot, with the goal of […]
September 25, 2017
Insteon and Wink home hubs appear to have a problem with encryption
September 25, 2017
Adobe Private PGP Key Leak a Blunder, But It Could Have Been Worse
September 25, 2017
Bankbot trojan returns to Google Play with new tricks
The Android banking trojan that we first informed about in the beginning of this year has found its way to Google Play again and contains new tricks designed to get access to the private banking information of the user. The post Bankbot trojan returns to Google Play with new tricks appeared first on WeLiveSecurity
September 25, 2017
Brit military wants a small-drone-killer system for £20m
September 25, 2017
Cops shut 28k sites flogging knock-off footie kits and other tat
September 25, 2017
Security and privacy on the new iOS 11
These new security measures will undoubtedly not only impact the security of data stored on a phone that has been lost or stolen, but could also complicate the progress of criminal investigations requiring the forensic analysis of a phone. The post Security and privacy on the new iOS 11 appeared first on WeLiveSecurity
September 25, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Tcpdump, the worst of which may allow execution of arbitrary code.
September 25, 2017
Spammed-out emails threaten websites with DDoS attack on September 30th
September 25, 2017
LinuxSecurity.com: This update fixes CVE-2017-14348. —- This update fixes CVE-2017-13735.
September 25, 2017
Shock! Hackers for medieval caliphate are terrible coders
September 25, 2017
LinuxSecurity.com: Fix for possible buffer overrun in kodak_65000 decoder Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data —- Patch for CVE-2017-14348
September 24, 2017
LinuxSecurity.com: Upgrade to 1.5.3 and also note that 1.5.1 fixed CVE-2017-11424.
September 24, 2017
LinuxSecurity.com: # Security fixes – fix crash in edge case where a .pc file has misquoting in a fragment list. # Other bug fixes: – fix logic edge case when comparing relocated paths
September 24, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Oracle’s JRE and JDK software suites, and IcedTea, the worst of which may allow execution of arbitrary code. [More…]
September 24, 2017
New ransomware scam asks for nude pics to unlock files
September 24, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Mercurial, the worst of which could lead to the remote execution of arbitrary code.
September 24, 2017
LinuxSecurity.com: A vulnerability in Postfix may allow local users to gain root privileges.
September 24, 2017
LinuxSecurity.com: A vulnerability in Exim may allow local users to gain root privileges.
September 24, 2017
LinuxSecurity.com: A command injection vulnerability in CVS may allow remote attackers to execute arbitrary code.
September 24, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.
September 24, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Chromium, the worst of which could result in the execution of arbitrary code.
September 24, 2017
security update
September 23, 2017
Over Half a Million Vehicle Records from SVR Tracking Leaked Online
September 23, 2017
The Pirate Bay Takes Heat for Testing Monero Mining
September 23, 2017
Joomla patches eight-year-old critical CMS bug
September 23, 2017
LinuxSecurity.com: New python packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
September 23, 2017
LinuxSecurity.com: New libxml2 packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
September 23, 2017
Aw, not you too, Verizon: US telco joins list of leaky AWS S3 buckets
September 22, 2017
LinuxSecurity.com: Update to upstream release 1.25.6
September 22, 2017
LinuxSecurity.com: * [7.x-3.18](https://www.drupal.org/project/views/releases/7.x-3.18) * [7.x-3.17](https://www.drupal.org/project/views/releases/7.x-3.17) * [Moderately Critical – Access Bypass – DRUPAL-SA- CONTRIB-2017-068](https://www.drupal.org/node/2902604)
September 22, 2017
NBD: Adobe just dumped its PRIVATE PGP key on the internet
September 22, 2017
Experian Flaw Lets Attacker Obtain Credit Freeze PIN and Access Account
September 22, 2017
EternalBlue Exploit Used in Retefe Banking Trojan Campaign
September 22, 2017
Risk Level: Very Low. Type: Trojan.
September 22, 2017
2016 SEC Hack May Have Benefited Insider Trading
September 22, 2017
IoT botnet Linux.ProxyM turns its grubby claws to spam rather than DDoS
September 22, 2017
Samba Update Patches Two SMB-Related MiTM Bugs
September 22, 2017
CCleaner Backdoor Attack: A State-sponsored Espionage Campaign
September 22, 2017
What’s New In Android 8.0 Oreo Security
September 22, 2017
Threatpost News Wrap, September 24, 207
September 22, 2017
Ethereum-backed hackathon excavates more security holes
September 22, 2017
Massive Viacom Data Exposed Through Amazon Web Services
September 22, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
September 22, 2017
Cloud services: What to consider when migrating your infrastructure
Most companies have switched the majority of their services and information over to the cloud. There are many reasons for this, ranging from cost to practicalities. The post Cloud services: What to consider when migrating your infrastructure appeared first on WeLiveSecurity
September 22, 2017
Risk Level: Very Low. Type: Trojan.
September 22, 2017
security update
September 21, 2017
IT fraudster facing four years’ bird time for $10k blackmail
September 21, 2017
Manchester plod still running 1,500 Windows XP machines
September 21, 2017
Lloyds Bank payments glitch frustrates merchants
September 21, 2017
More data lost or stolen in first half of 2017 than the whole of last year
September 21, 2017
Before chatting with Ann Roberts, systems administrator at Webroot, I had a pretty narrow view of what her role in the IT department required on a day-to-day basis. As it turns out, a systems administrator must wear many hats and support multiple areas of the business. Read on to learn more about this tech career […]
September 21, 2017
Slain: Unions’ US OPM mega-hack lawsuit against Uncle Sam
September 21, 2017
LinuxSecurity.com: – Related: CVE-2017-6362 remove problematic function
September 21, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
September 21, 2017
Iranian APT33 Targets US Firms with Destructive Malware
September 21, 2017
Locky ransomware campaign launched 20M attacks in a single day
September 21, 2017
Joomla Patches Eight-Year-Old LDAP Injection Vulnerability
September 21, 2017
Researchers claim ISPs are ‘complicit’ in latest FinSpy snooping rounds
September 21, 2017
SEC reveals hackers might have used stolen data for insider trading
September 21, 2017
New FinFisher surveillance campaigns: Are internet providers involved?
FinFisher has extensive spying capabilities, such as live surveillance through webcams and microphones, keylogging, and exfiltration of files. What sets FinFisher apart from other surveillance tools, however, are the controversies around its deployments. The post New FinFisher surveillance campaigns: Are internet providers involved? appeared first on WeLiveSecurity
September 21, 2017
CConsiderations on the CCleaner incident
Regardless of how Piriform was breached, for a tool as widely downloaded as CCleaner, with a userbase running into the hundreds of millions, there will be a large impact worldwide, even though only the 32-bit version was affected. The post CConsiderations on the CCleaner incident appeared first on WeLiveSecurity
September 21, 2017
How SS7 Flaw Can Be Used to Hack Gmail ID and Bitcoin Wallet
September 21, 2017