Menu

Category Archives: Security

Articles about security

New adware attack bombard phones & prevent users from disabling ads

LinuxSecurity.com: Opencv 3.3 and earlier has problems while reading data, which might result in either buffer overflows or integer overflows.

New Rules Announced for Border Inspection of Electronic Devices

LinuxSecurity.com: An update that fixes two vulnerabilities is now available.

More stuff broken amid Microsoft’s efforts to fix Meltdown/Spectre vulns
New Malware Campaign Launched to Disrupt Winter Olympics 2018
DJI’s bounty problems and video surveillance programs | Salted Hash Ep 13
First shots at South Korea could herald malware campaign of Olympic proportions
Your connection is not Brexit… we mean private: Tory party lets security cert expire
Hundreds of Android Gaming Apps are Tracking Your TV Viewing Habits
MADIoT – The nightmare after XMAS (and Meltdown, and Spectre)

It is not feasible, in fact not even possible, to replace all CPUs in all devices. It would be too costly, besides the success rate for unsoldering and resoldering pin-throughs in multi-layer boards will never be 100%. The post MADIoT – The nightmare after XMAS (and Meltdown, and Spectre) appeared first on WeLiveSecurity

Smartphones’ security enhancements just make them more dangerous
It gets worse: Microsoft’s Spectre-fixer bricks some AMD PCs

LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Experts Weigh In On Spectre Patch Challenges

LinuxSecurity.com: Updated to version 3.1.1 Fixes https://bitcointalk.org/index.php?topic=2702103.0 —- Updated to version 3.1

Risk Level: Very Low. Type: Trojan.

Fake Android apps caught dropping Coinhive miner

LinuxSecurity.com: openSUSE: openSUSE 11.3 has reached end of SUSE support

BlackBerry Mobile Website hacked to mine Monero via Coinhive
Who the Hell Is This ‘Crypto-Genius?’
Spectre and Meltdown: What you need to know going forward
Security hole in AMD CPUs’ hidden secure processor code revealed ahead of patches
Qualcomm joins Intel, Apple, Arm, AMD in confirming its CPUs suffer hack bugs, too
How to hack Wi-Fi for fun and imprisonment with crypto-mining inject

LinuxSecurity.com: An update that solves 14 vulnerabilities and has three An update that solves 14 vulnerabilities and has three An update that solves 14 vulnerabilities and has three fixes is now available. fixes is now available.

security update

Type: Vulnerability. Multiple CPU Hardwares are prone to an information-disclosure vulnerability; fixes are available.

LinuxSecurity.com: The package linux-hardened before version 4.14.11.a-1 is vulnerable to multiple issues including access restriction bypass, denial of service, privilege escalation and information disclosure.

LinuxSecurity.com: The package linux-zen before version 4.14.11-1 is vulnerable to multiple issues including access restriction bypass, denial of service, privilege escalation and information disclosure.

LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 12.0 (Pike). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

How a USB could become security risk for your device

LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 9.0 (Mitaka). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: The package linux-lts before version 4.9.74-1 is vulnerable to multiple issues including denial of service, privilege escalation and information disclosure.

LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 11.0 (Ocata). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 8.0 (Liberty). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

How to Protect your Device from Meltdown and Spectre?
Dell EMC patches 3 zero-days in Data Protection Suite
Google Play Removes 22 Malicious ‘LightsOut’ Apps From Marketplace

LinuxSecurity.com: The package linux before version 4.14.11-1 is vulnerable to multiple issues including access restriction bypass, denial of service, privilege escalation and information disclosure.

LinuxSecurity.com: An update that solves 5 vulnerabilities and has 19 fixes is An update that solves 5 vulnerabilities and has 19 fixes is An update that solves 5 vulnerabilities and has 19 fixes is now available. now available.

LinuxSecurity.com: An update that solves 5 vulnerabilities and has 35 fixes is An update that solves 5 vulnerabilities and has 35 fixes is An update that solves 5 vulnerabilities and has 35 fixes is now available. now available.

Meltdown and Spectre Flaws in Intel CPUs: Collateral Damage to OS & Cloud Services Unavoidable
Researchers Discover Two Major Flaws in the World’s Computers
Cisco to release patches for Meltdown, Spectre CPU vulns, just in case
Enterprise IoT threatens to undermine cloud and IT security
Meltdown and Spectre CPU Vulnerabilities: What You Need to Know

The first few days of 2018 have been filled with anxious discussions concerning a widespread and wide-ranging vulnerability in the architecture of processors based on Intel’s Core architecture used in PCs for many years, and also affecting ARM processors commonly used in tablets and smartphones. The post Meltdown and Spectre CPU Vulnerabilities: What You Need […]

The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst with a passion for all things security. Any questions? Just ask. Researchers Find Major Security Flaws in Modern Processors Newly discovered bugs, Meltdown and Spectre, exploit critical flaws in the architecture […]

LinuxSecurity.com: Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, information leaks, privilege escalation or the execution of arbitrary code.

Woo-yay, Meltdown CPU fixes are here. Now, Spectre flaws will haunt tech industry for years

It can be daunting to step into the often unfamiliar world of security, where you can at times be inundated with technical jargon (and where you face real consequences for making the wrong decision). Employing an MSP or MSSP is oftentimes in best interest of small and medium businesses (SMBs). In a study performed by […]

LinuxSecurity.com: Multiple researchers have discovered a vulnerability in Intel processors, enabling an attacker controlling an unprivileged process to read memory from arbitrary addresses, including from the kernel and all other processes running on the system.

LinuxSecurity.com: An industry-wide issue was found in the way many modern microprocessordesigns have implemented speculative execution of instructions (a commonlyused performance optimization). There are three primary variants of theissue which differ in the way the speculative execution can be exploited.Variant CVE-2017-5715 triggers the speculative execution by utilizingbranch target injection. It relies on the presence of […]

LinuxSecurity.com: An update for microcode_ctl is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0023

LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0029

Microsoft patches Windows to cool off Intel’s Meltdown – wait, antivirus? Slow your roll

LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0030

LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0008

Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.

LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0013

Private Details of 240,000 DHS Employees Accessed after Data Breach
Vendors Share Patch Updates on Spectre and Meltdown Mitigation Efforts
Top 7 Cyber Forensic Tools
Bogus security apps in the Google Play store stole users’ info and tracked their location
US Homeland Security breach compromised personal info of 200,000+ staff
ESET Research: Wauchos now headed for extinction?

As Wauchos was sold on underground forums, there were various monetization schemes. One of them was to use the form grabber plugin to steal passwords for online accounts. The post ESET Research: Wauchos now headed for extinction? appeared first on WeLiveSecurity

New Android Malware Disguised as Uber App

LinuxSecurity.com: An update that solves 5 vulnerabilities and has 13 fixes is An update that solves 5 vulnerabilities and has 13 fixes is An update that solves 5 vulnerabilities and has 13 fixes is now available. now available.

LinuxSecurity.com: An update that solves 17 vulnerabilities and has 13 fixes An update that solves 17 vulnerabilities and has 13 fixes An update that solves 17 vulnerabilities and has 13 fixes is now available. is now available.

LinuxSecurity.com: An update that solves 5 vulnerabilities and has 26 fixes is An update that solves 5 vulnerabilities and has 26 fixes is An update that solves 5 vulnerabilities and has 26 fixes is now available. now available.

32% off Kidde Carbon Monoxide Alarm with Display and 10 Year Battery – Deal Alert

LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0014

LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0012

LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:0007

Spectre? Meltdown? F*CKWIT? Calm down and make yourself some tea

LinuxSecurity.com: It was discovered that there were two vulnerabilities in the imagemagick image manipulation program: CVE-2017-1000445: A null pointer dereference in the MagickCore

Meltdown, Spectre: The password theft bugs at the heart of Intel CPUs

LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support and Red Hat Enterprise Linux 6.6 Telco Extended Update Support. Red Hat Product Security has rated this update as having a security impact

LinuxSecurity.com: An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update for linux-firmware is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update for linux-firmware is now available for Red Hat Enterprise Linux 7.3 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

We translated Intel’s crap attempt to spin its way out of CPU security bug PR nightmare
Smashing Security podcast #059: An intro to Bitcoin and Blockchain

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Apple macOS so secure some apps can’t be easily deleted
Today’s CPU vulnerability: what you need to know
Attention, vSphere VDP backup admins: There is a little remote root hole you need to patch…
Intel In Security Hot Seat Over Reported CPU Design Flaw

LinuxSecurity.com: Upstream announcement: Welcome to **phpMyAdmin 4.7.7**, a regular maintenance release containing bug fixes and a security fix. The security vulnerability is a XSRF/CSRF flaw; you can read more at https://www.phpmyadmin.net/security/PMASA-2017-9/ As a result of this, we recommend all users upgrade immediately. A CVE-ID has been requested but not yet

The F*CKWIT Intel chip flaw. Ready yourself for patches
Security Flaws in GPS Trackers Puts Millions of Devices’ Data at Risk
Multiple Intel Processors Generations Hit by Serious Security Flaw
Teen girl facing up to 10 years for sending nude selfie
Bug-finders’ scheme: Tick-tock, this tech’s tested by flaws.. but who the heck do you tell?

LinuxSecurity.com: Jason Crain discovered a overflow vulnerability in the poppler PDF rendering library. For Debian 7 “Wheezy”, this issue has been fixed in poppler version