security update
January 12, 2018
LinuxSecurity.com: A vulnerability in PySAML2 might allow remote attackers to bypass authentication.
January 11, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in TigerVNC, the worst of which may lead to arbitrary code execution.
January 11, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in icoutils, the worst of which may lead to arbitrary code execution.
January 11, 2018
LinuxSecurity.com: The package intel-ucode before version 20180108-1 is vulnerable to access restriction bypass.
January 11, 2018
Man used Fruitfly Mac malware to spy on US citizens for 13 years
January 11, 2018
House Votes to Reauthorize Controversial Spy Provision, Section 702
January 11, 2018
WhatsApp Downplays Damage of a Group Invite Bug
January 11, 2018
LinuxSecurity.com: Multiple vulnerabilities have been discovered in Ming: CVE-2017-11732
January 11, 2018
FBI supports & blames encryption for 7,800 devices it can’t unlock
January 11, 2018
Fedora 28 Looking To Replace Glibc’s libcrypt With libxcrypt
January 11, 2018
Adobe patches information leak vulnerability
January 11, 2018
CES 2018: The price of tech is dropping, kids can do this!
Row after row of startup tech here has tiny modules designed to be mashed up into the next big thing if their founders have anything to say about it, and the trend continues. The post CES 2018: The price of tech is dropping, kids can do this! appeared first on WeLiveSecurity
January 11, 2018
LinuxSecurity.com: Stephan Zeisberg discovered that poco, a collection of open source C++ class libraries, did not correctly validate file paths in ZIP archives. An attacker could leverage this flaw to create or overwrite arbitrary files.
January 11, 2018
security update
January 11, 2018
Risk Level: Very Low. Type: Trojan.
January 11, 2018
Android Malware written in Kotlin found on Play Store stealing data
January 10, 2018
security update
January 10, 2018
Type: Vulnerability. Microsoft Office is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Outlook is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Word is prone to a memory-corruption vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Office is prone to a memory-corruption vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Access is prone to a cross-site scripting vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Outlook is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Excel is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
January 10, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
January 10, 2018
Risk Level: Very Low. Type: Trojan.
January 10, 2018
Netgear’s New Gaming Router Offers Protection Against DDoS Attacks
January 10, 2018
Tank-traps versus trappings in virtual currencies: A cybersecurity minefield
Bitcoin, the progenitor of the entire cryptocurrency boom and still the most popular virtual currency, experienced a truly heady run-up in value. Its price surge was punctuated with a crescendo midway through December, when a single bitcoin approached $20,000. The post Tank-traps versus trappings in virtual currencies: A cybersecurity minefield appeared first on WeLiveSecurity
January 10, 2018
Best Encrypted Email Services for 2018
January 10, 2018
LinuxSecurity.com: An update that fixes 16 vulnerabilities is now available.
January 10, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 10, 2018
Russia claims it repelled home-grown drone swarm in Syria
January 10, 2018
LinuxSecurity.com: The system could be made to expose sensitive information.
January 10, 2018
IBM’s complete Meltdown fix won’t land until mid-February
January 10, 2018
Intel, Microsoft confess: Meltdown, Spectre may slow your servers
January 10, 2018
LinuxSecurity.com: The system could be made to expose sensitive information.
January 10, 2018
Facebook has open-sourced encrypted group chat
January 10, 2018
LinuxSecurity.com: Security fix for CVE-2017-17784 CVE-2017-17785 CVE-2017-17786 CVE-2017-17787 CVE-2017-17788 CVE-2017-17789
January 10, 2018
LinuxSecurity.com: Security fix for CVE-2017-1000456.
January 10, 2018
LinuxSecurity.com: Microcode update for AMD cpus
January 10, 2018
Risk Level: Very Low. Type: Trojan.
January 10, 2018
Microsoft January Patch Tuesday Update Fixes 16 Critical Bugs
January 9, 2018
security update
January 9, 2018
security update
January 9, 2018
LinuxSecurity.com: A vulnerability has been found in LibXfont and LibXfont2 which may allow for arbitrary file access.
January 9, 2018
LinuxSecurity.com: PySAML2 could allow authentication without a password.
January 9, 2018
LinuxSecurity.com: Fixes https://bitcointalk.org/index.php?topic=2702103.0 Changelog: https://github.com/spesmilo/electrum/blob/master/RELEASE-NOTES —- Fixes https://bitcointalk.org/index.php?topic=2702103.0
January 9, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0061
January 9, 2018
ESET research: Appearances are deceiving with Turla’s backdoor-laced Flash Player installer
In order to establish persistence on the system, the installer tampers with the operating system’s registry. It also creates an administrative account that allows remote access. The post ESET research: Appearances are deceiving with Turla’s backdoor-laced Flash Player installer appeared first on WeLiveSecurity
January 9, 2018
How are the shares, Bry? Intel chief cops to CPU fix slowdowns
January 9, 2018
LinuxSecurity.com: An update that fixes 46 vulnerabilities is now available.
January 9, 2018
How to hack public Wi-Fi to mine for cryptocurrency
January 9, 2018
Is a Good Offense the Best Defense Against Hackers?
January 9, 2018
IBM melts down fixing Meltdown as processes and patches stutter
January 9, 2018
LinuxSecurity.com: New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
January 9, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 9, 2018
Type: Vulnerability. Microsoft Office is prone to a memory-corruption vulnerability; fixes are available.
January 9, 2018
Type: Vulnerability. Microsoft ASP.NET Core is prone to a remote privilege-escalation vulnerability; fixes are available.
January 9, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
January 9, 2018
Type: Vulnerability. Microsoft .NET Framework is prone to a security-bypass vulnerability; fixes are available.
January 9, 2018
Type: Vulnerability. Microsoft .NET Framework is prone to a remote denial-of-service vulnerability; fixes are available.
January 9, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2018
Type: Vulnerability. Microsoft Office is prone to a remote code-execution vulnerability; fixes are available.
January 9, 2018
Type: Vulnerability. Microsoft Office is prone to a memory-corruption vulnerability; fixes are available.
January 9, 2018
LinuxSecurity.com: Several vulnerabilities were found in PHP, a widely-used open source general purpose scripting language: CVE-2017-11142
January 8, 2018
LinuxSecurity.com: Several vulnerabilities were found in PHP, a widely-used open source general purpose scripting language: CVE-2017-11144
January 8, 2018
Apple Releases Spectre Patches for Safari, macOS and iOS
January 8, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 8, 2018
LinuxSecurity.com: An update that solves 32 vulnerabilities and has 7 fixes is now available.
January 8, 2018
security update
January 8, 2018