security update
January 19, 2018
OnePlus Confirms Credit Card Breach Impacted Up to 40,000 Customers
January 19, 2018
Type: Vulnerability. Microsoft Office for MAC is prone to a security vulnerability that may allow attackers to conduct spoofing attacks; fixes are available.
January 19, 2018
New Dridex Variant Emerges With An FTP Twist
January 19, 2018
Apple Preps ChaiOS iMessage Bug Fix for Next Week
January 19, 2018
The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any questions? Just ask. Hospital Pays Ransom to Restore Systems, Despite Having Backups In the first cyberattack of 2018 to hit […]
January 19, 2018
Man Admits to Directing DDoS Attacks Across the US
January 19, 2018
LinuxSecurity.com: It was discovered that there was a denial-of-service attack in the libgd2 image library. A corrupt file could have exploited a signedness confusion leading to an infinite loop.
January 19, 2018
LinuxSecurity.com: It was discovered that there was an injection vulnerability in the rsync file-copying tool. For Debian 7 “Wheezy”, this issue has been fixed in rsync version
January 19, 2018
Are mobile devices insecure by nature?
Granted, not all that glitters is gold, and mobiles also come with some drawbacks in terms of the protection of information. There are a number of risks that users may face when trying to secure their information on mobiles and tablets. The post Are mobile devices insecure by nature? appeared first on WeLiveSecurity
January 19, 2018
Delve into the hidden corners of security at CyberThreat18
January 19, 2018
LinuxSecurity.com: The cPanel Security Team discovered that awstats, a log file analyzer, was vulnerable to path traversal attacks. A remote unauthenticated attacker could leverage that to perform arbitrary code execution.
January 19, 2018
security update
January 19, 2018
LinuxSecurity.com: Tavis Ormandy discovered a vulnerability in the Transmission BitTorrent client; insecure RPC handling between the Transmission daemon and the client interface(s) may result in the execution of arbitrary code if a user visits a malicious website while Transmission is running.
January 18, 2018
LinuxSecurity.com: The package bind before version 9.11.2.P1-1 is vulnerable to denial of service.
January 18, 2018
LinuxSecurity.com: The package perl-xml-libxml before version 2.0130-1 is vulnerable to arbitrary code execution.
January 18, 2018
LinuxSecurity.com: The package transmission-cli before version 2.92-8 is vulnerable to arbitrary command execution.
January 18, 2018
LinuxSecurity.com: The package nrpe before version 3.2.1-3 is vulnerable to arbitrary command execution.
January 18, 2018
LinuxSecurity.com: The package irssi before version 1.0.6-1 is vulnerable to denial of service.
January 18, 2018
Sprawling Mobile Espionage Campaign Targets Android Devices
January 18, 2018
LinuxSecurity.com: An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 18, 2018
LinuxSecurity.com: An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
January 18, 2018
LinuxSecurity.com: Fix permissions on rootsh log directory to limit it to root.
January 18, 2018
6 years jail time for ‘one of the largest’ dark web drug dealer
January 18, 2018
Google Awards Record $112,500 Bounty for Android Exploit Chain
January 18, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0094
January 18, 2018
LinuxSecurity.com: An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 18, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0093
January 18, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0093
January 18, 2018
LinuxSecurity.com:
January 18, 2018
LinuxSecurity.com: This is new version of irssi. It contains security fixes for CVE-2018-5205 CVE-2018-5206 CVE-2018-5207 CVE-2018-5208 .
January 18, 2018
LinuxSecurity.com: – Resolves: #1510351 – CVE-2017-14992 – built docker @projectatomic/docker-1.13.1 commit 584d391 – built docker-novolume-plugin commit 385ec70 – built rhel-push-plugin commit af9107b – built docker-lvm-plugin commit 8647404 – built docker-runc @projectatomic/docker-1.13.1 commit 1c91122 – built docker-containerd @projectatomic/docker-1.13.1 commit 62a9c60 – built
January 18, 2018
chaiOS “Text Bomb” Can Freeze & Crash Your iPhone
January 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 18, 2018
Risk Level: Very Low. Type: Trojan.
January 18, 2018
Less than 10% of Gmail users have enabled two-factor authentication
January 18, 2018
F-35 ‘incomparable’ to Harrier jump jet, top test pilot tells El Reg
January 18, 2018
Virtual Reality (VR) Porn App Exposed Personal Data of 20k Users
January 18, 2018
Google fuels up Chromecast Wi-Fi flooding fix
January 18, 2018
CES 2018 cybersecurity: Now in every single ‘whatchamacallit’
Not content anymore to just have a bed made of soft plushy stuff, now you can adjust everything about the bed, from electronically sitting up in bed to the lighting surrounding your nap: connected digital technology everywhere. The post CES 2018 cybersecurity: Now in every single ‘whatchamacallit’ appeared first on WeLiveSecurity
January 18, 2018
The first lawsuits to save net neutrality have been filed
January 18, 2018
Trends 2018: Personal data in the new age of technology and legislation
The depth of data collected from our online habits could easily allow profiles to be constructed, showing what may be considered extremely personal interests, drawing on information that we don’t realize someone is collecting. The post Trends 2018: Personal data in the new age of technology and legislation appeared first on WeLiveSecurity
January 18, 2018
Smashing Security #061: Fallout over Hawaii missile false alarm
January 18, 2018
VTech fondleslabs for kids ‘still vulnerable’ despite sanctions
January 18, 2018
Mozilla edict: ‘Web-accessible’ features need ‘secure contexts’
January 18, 2018
North Korea’s finest spent 2017 distributing RATs, wipers, and phish
January 18, 2018
Industrial systems scrambling to catch up with Meltdown, Spectre
January 18, 2018
LinuxSecurity.com: – Update to 52.5.3 – Patched for mozilla bug-1427870 (spectre mitigation)
January 18, 2018
LinuxSecurity.com: Security fix for CVE-2018-5702 (Mitigate dns rebinding attacks against daemon)
January 18, 2018
Risk Level: Very Low. Type: Trojan.
January 18, 2018
LinuxSecurity.com: – Update to 52.5.3 – Patched for mozilla bug-1427870 (spectre mitigation)
January 17, 2018
New macOS malware hijacks DNS settings and takes screenshots
January 17, 2018
LinuxSecurity.com: New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.
January 17, 2018
LinuxSecurity.com: It was discovered that multiple encryption key classes in the Librariescomponent of OpenJDK did not properly synchronize access to their internaldata. This could possibly cause a multi-threaded Java application to applyweak encryption to data because of the use of a key that was zeroed out.(CVE-2018-2579)Note: If the web browser plug-in provided by the icedtea-web […]
January 17, 2018
Oracle Ships 237 Fixes in Latest Critical Patch Update
January 17, 2018
security update
January 17, 2018
New Android Malware records audio, video & steals WhatsApp messages
January 17, 2018
Type: Vulnerability. Multiple CPU Hardwares are prone to an information-disclosure vulnerability; fixes are available.
January 17, 2018
Potent Skygofree Malware Packs ‘Never-Before-Seen’ Features
January 17, 2018
LinuxSecurity.com: Rebase `osc` and `osc-source_validator` to new versions for security fixes for CVE-2017-9274
January 17, 2018
LinuxSecurity.com: Rebase `osc` and `osc-source_validator` to new versions for security fixes for CVE-2017-9274
January 17, 2018
4 Malicious Chrome Extensions Put 500k Users at Risk of Click Fraud
January 17, 2018
Fighting cyber attacks with nuclear weapons
January 17, 2018
Carphone Warehouse faces hefty fine for 2015 breach
The attackers gained access to a range of customer data such as names, addresses, phone numbers, dates of birth, and marital status. Making matters worse, the historical payment card details of some 18,000 customers were also compromised. The post Carphone Warehouse faces hefty fine for 2015 breach appeared first on WeLiveSecurity
January 17, 2018
Hawaii’s missile alert agency keeps its password on a Post-it note
January 17, 2018
Mental Models & Security: Thinking Like a Hacker
January 17, 2018
CES 2018: Blockchain will solve everything
The first obvious candidate was banking, a sector that has been hard at work trying to implement blockchain to secure the vast troves of digital transactions that happen every microsecond of every day. The post CES 2018: Blockchain will solve everything appeared first on WeLiveSecurity
January 17, 2018
Wanna motivate staff to be more secure? Don’t bother bribing ’em
January 17, 2018
Another round of click-fraud extensions pulled from Chrome Store
January 17, 2018
Beware! A new bug can crash iOS and macOS with a single text message
January 17, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in rsync, the worst of which could allow remote attackers to bypass access restrictions.
January 17, 2018
BIND comes apart thanks to ancient denial-of-service vuln
January 17, 2018
security update
January 17, 2018