January 17, 2018
Beware! A new bug can crash iOS and macOS with a single text message
LinuxSecurity.com: Multiple vulnerabilities have been found in rsync, the worst of which could allow remote attackers to bypass access restrictions.
January 17, 2018
BIND comes apart thanks to ancient denial-of-service vuln
January 17, 2018
security update
January 17, 2018
LinuxSecurity.com: An update for microcode_ctl is now available for Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 6.2 Advanced Update Support, Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat Enterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux 6.6 Advanced Update Support, Red
January 16, 2018
LinuxSecurity.com: The Check Point Research Team discovered that the XBMC media center allows arbitrary file write when a malicious subtitle file is downloaded in zip format. This update requires the new dependency libboost-regex1.49.
January 16, 2018
LinuxSecurity.com: An update for linux-firmware is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 7.2 Advanced Update Support, Red Hat Enterprise Linux 7.2 Telco Extended Update Support, Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions, and Red Hat Enterprise Linux 7.3
January 16, 2018
LinuxSecurity.com: Jayachandran Palanisamy of Cygate AB reported that BIND, a DNS server implementation, was improperly sequencing cleanup operations, leading in some cases to a use-after-free error, triggering an assertion failure and crash in named.
January 16, 2018
Google Chrome Once Again Target of Malicious Extensions
January 16, 2018
LinuxSecurity.com: An update that solves 14 vulnerabilities and has one errata is now available.
January 16, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 16, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 16, 2018
LinuxSecurity.com: Transmission could be made to run arbitraty code.
January 16, 2018
LinuxSecurity.com: An update is now available for Red Hat CloudForms 4.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 16, 2018
Lenovo Patches Networking OS Vulnerability Dating Back to 2004
January 16, 2018
security update
January 16, 2018
LinuxSecurity.com: Qtpass password generation had a bug where only a 1000 different passwords where possible https://github.com/IJHack/QtPass/issues/338 —- Upstream release
January 16, 2018
LinuxSecurity.com: Qtpass password generation had a bug where only a 1000 different passwords where possible https://github.com/IJHack/QtPass/issues/338
January 16, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
January 16, 2018
LinuxSecurity.com: An update that solves 7 vulnerabilities and has three fixes is now available.
January 16, 2018
Risk Level: Very Low. Type: Trojan.
January 16, 2018
Android snoopware Skygofree can pilfer WhatsApp messages
January 16, 2018
New BitTorrent Flaw Puts Linux & Windows devices at risk of hacking
January 16, 2018
Smart card forwarding with Fedora
January 16, 2018
Scammers and jobhunters
It’s easier to have scruples about how you earn your living when you’re not one of millions of people chasing just a few thousand jobs. The post Scammers and jobhunters appeared first on WeLiveSecurity
January 16, 2018
New Mirai botnet species ‘Okiru’ hunts for ARC-based kit
January 16, 2018
Congress Renews Warrantless Surveillance-And Makes It Even Worse
January 16, 2018
The “Doublespeak” of Responsible Encryption
January 16, 2018
Wi-Fi Alliance announces WPA3 to secure modern networks
January 16, 2018
How I’ve captured all passwords trying to ssh into my server
January 16, 2018
Cybersecurity quiz winners rewarded with malware-infected USB sticks
January 16, 2018
LinuxSecurity.com: This release does a complete update of the CA list. This includes removing the StartCom and WoSign certificates to as they are now untrusted by the major browser vendors.
January 16, 2018
LinuxSecurity.com: New kernel packages are available for Slackware 14.0 and 14.2 to fix security issues.
January 16, 2018
LinuxSecurity.com: A vulnerability has been discovered in GraphicsMagick, a collection of image processing tools, which may result in a denial of service.
January 16, 2018
Canada charges chap alleged to run stolen data-mart Leakedsource
January 16, 2018
Bad benchmarks bedevil boffins’ infosec efforts
January 16, 2018
Operator of hacked password service Leakedsource.com arrested
January 16, 2018
LinuxSecurity.com: An update is now available for Red Hat CloudForms 4.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 15, 2018
LinuxSecurity.com: An update is now available for Red Hat CloudForms 4.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 15, 2018
LinuxSecurity.com: An update is now available for Red Hat CloudForms 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 15, 2018
LinuxSecurity.com: It was discovered that multiple integer overflows in the GIF image loader in the GDK Pixbuf library may result in denial of service and potentially the execution of arbitrary code if a malformed image file is opened.
January 15, 2018
security update
January 15, 2018
LinuxSecurity.com: Several security issues were fixed in GDK-PixBuf.
January 15, 2018
Now Meltdown patches are making industrial control systems lurch
January 15, 2018
LinuxSecurity.com: David Sopas discovered that Kohana, a PHP framework, was vulnerable to a Cross-site scripting (XSS) attack that allowed remote attackers to inject arbitrary web script or HTML by bypassing the strip_image_tags protection mechanism in system/classes/Kohana/Security.php. This issue
January 15, 2018
OnePlus denies checkout page hack amid credit card fraud reports
January 15, 2018
Inside Uber’s $100,000 Payment to a Hacker, and the Fallout
January 15, 2018
Customers reporting credit card fraud after using OnePlus webstore
January 15, 2018
CES 2018: Why doesn’t everyone use VR already?
One side effect of slower than expected uptake of VR is that virtual reality application developers have been slow to invest in creating content. In this sort of chicken-and-egg cycle, growth tends to be slow, not explosive. The post CES 2018: Why doesn’t everyone use VR already? appeared first on WeLiveSecurity
January 15, 2018
Meltdown/Spectre fixes made AWS CPUs cry, says SolarWinds
January 15, 2018
Hawaii’s ballistic missile false alarm and a user interface failure
January 15, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in PolarSSL, the worst of which may allow remote attackers to execute arbitrary code.
January 15, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Xen, the worst of which could allow for privilege escalation.
January 15, 2018
LinuxSecurity.com: Philip Huppert discovered the Shibboleth service provider is vulnerable to impersonation attacks and information disclosure due to mishandling of DTDs in the XMLTooling XML parsing library. For additional details please refer to the upstream advisory at
January 14, 2018
LinuxSecurity.com: The package qtpass before version 1.2.1-1 is vulnerable to private key recovery.
January 14, 2018
security update
January 14, 2018
LinuxSecurity.com: Tavis Ormandy discovered a vulnerability in the Transmission BitTorrent client; insecure RPC handling between the Transmission daemon and the client interface(s) may result in the execution of arbitrary code if a user visits a malicious website while Transmission is running.
January 14, 2018
How to Protect Your Personal Data in 3 Simple Ways
January 14, 2018
LinuxSecurity.com: Rebased to 1.37.0.
January 13, 2018
Hacker demands ransom in Bitcoin after taking over hospital servers
January 13, 2018
security update
January 13, 2018
Cisco’s new tool will detect malware in encrypted traffic
January 13, 2018
Lenovo removes backdoor present in networking switches since 2004
January 13, 2018
60 Android apps for kids found infected with Pornographic malware
January 13, 2018
Fruitfly malware spied on Mac users for 13 years – man charged
January 13, 2018
LinuxSecurity.com: Philip Huppert discovered the Shibboleth service provider is vulnerable to impersonation attacks and information disclosure due to mishandling of DTDs in the XMLTooling XML parsing library. For additional details please refer to the upstream advisory at
January 12, 2018
Attackers Exploit Oracle WebLogic Flaw to Mine $266K in Monero
January 12, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 12, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 12, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 12, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 12, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has 5 fixes is now available.
January 12, 2018
Boffins split on whether Spectre fix needs tweaked hardware
January 12, 2018
Critical Intel AMT Flaw Lets Attackers Hack Laptops in Mere Seconds
January 12, 2018
Intel AMT security locks bypassed on corp laptops – research
January 12, 2018
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst with a passion for all things security. Any questions? Just ask. Exploitable Backdoor Found in Western Digital NAS Drives Western Digital has recently released numerous patches for the vulnerabilities that were […]
January 12, 2018
Data protection is best managed from the centre
January 12, 2018
Apps Exposing Children to Porn Ads Booted From Google Play
January 12, 2018
WhatsApp Vulnerability Lets Anyone Spy on Group Chats
January 12, 2018
‘Mummy, what’s felching?’ Tot gets smut served by Android app
January 12, 2018
Malware infected fake Telegram Messenger app found in Play Store
January 12, 2018
LinuxSecurity.com: It was discovered that gifsicle, a tool for manipulating GIF image files, contained a flaw that could lead to arbitrary code execution. For the oldstable distribution (jessie), this problem has been fixed
January 12, 2018
Let’s Encrypt disables TLS-SNI-01 validation
January 12, 2018
FBI chief claims encryption is an ‘urgent public safety issue’
January 12, 2018
Security event in Taiwan ‘rewards’ quiz winners with malware-laden USB drives
The distribution of the USB sticks was halted on December 12 after some of the quiz’s successful entrants reported that their rewards had been flagged by their security software as containing malware. The post Security event in Taiwan ‘rewards’ quiz winners with malware-laden USB drives appeared first on WeLiveSecurity
January 12, 2018
Intel’s Meltdown fix freaked out some Broadwells, Haswells
January 12, 2018
LinuxSecurity.com: Security fix for CVE-2017-1000501
January 12, 2018