September 7, 2017
Apple Developer site goes down and some users are fearing a hack
Fake Chrome & Firefox Font Update Drops RAT and Locky Ransomware
September 6, 2017
Tor Project Brings Security Slider Feature to Android App Orfox
September 6, 2017
security update
September 6, 2017
security update
September 6, 2017
Will the new iPhone break the $1,000 barrier? | Tech Talk Ep 1, Pt 4
September 6, 2017
13-year-old Japanese Kid Caught Selling Malware
September 6, 2017
IDN Homograph Attack Spreading Betabot Backdoor
September 6, 2017
Multiple Vulnerabilities Found in NVIDIA, Qualcomm, Huawei Bootloaders
September 6, 2017
13 Critical Remote Code Execution Bugs Fixed in September Android Update
September 6, 2017
Energy sector biz hackers are back and badder than ever before
September 6, 2017
DolphinAttack: Voice Assistant Apps Siri and Alexa Can Be Hacked
September 6, 2017
France to tack weapons onto spy drones – reports
September 6, 2017
WireX Variant Capable of UDP Flood Attacks
September 6, 2017
Tor Project boosts support for anonymous mobile browsing
September 6, 2017
Scammers Are Targeting Naive Bitcoin Owners With Terribly Simple Trick
September 6, 2017
CISOs’ Salaries Expected to Edge Above $240,000 in 2018
September 6, 2017
Mo money mo mobile payments… Security risks? Whatever!
September 6, 2017
On internet privacy, be very afraid
September 6, 2017
Microsoft Releases Long-Awaited Security Tool, Sets Linux Preview
September 6, 2017
LinuxSecurity.com: **Version 1.3.0** It contains fixes for two possible security problems. The problems were identified by Brian ‘geeknik’ Carpenter and Agostino Sarubbo using AFL. The changes are: * Support bzip2 compressed zip archives * Improve file progress callback code * Fix zip_fdopen() * CVE-2017-12858: Fix double free(). * CVE-2017-14107: Improve EOCD64 parsing.
September 6, 2017
Lenovo to Pay $3.5m for Secretly Installing Adware in 750,000 Laptops
September 6, 2017
Lenovo’s Superfish security fiasco ends in a slap on the wrist
September 6, 2017
Critical security flaw leaves Fortune 100 firms vulnerable
The discovered weakness would allow hackers to remotely run code on servers that utilize the REST plugin from Apache Struts, and it is reported that all versions since 2008 are affected. The post Critical security flaw leaves Fortune 100 firms vulnerable appeared first on WeLiveSecurity
September 6, 2017
Give staff privacy at work, Euro human rights court tells bosses
September 6, 2017
Boffins hijack bootloaders for fun and games on Android
September 6, 2017
Please, pleeeease let me ban Kaspersky Lab from US govt PCs – senator
September 6, 2017
Chinese Man Who Sold VPNs Gets 9 Months Prison Sentence
September 5, 2017
Attacker demands ransom after series of DDoS attacks on Poker site
September 5, 2017
security update
September 5, 2017
Patch Released for Critical Apache Struts Bug
September 5, 2017
Four Million Time Warner Cable Records Left on Misconfigured AWS S3
September 5, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 5, 2017
Risk Level: Very Low. Type: Trojan.
September 5, 2017
Instagram breach deepens with dark web ‘Doxagram’ domain
September 5, 2017
Military Contractor’s Vendor Leaks Resumes in Misconfigured AWS S3
September 5, 2017
Spam Campaigns Using Trickbot Banking Trojan Against Cryptocurrencies
September 5, 2017
Kurat võtku! Estonia identifies security risk in almost 750,000 ID cards
September 5, 2017
YouTube MP3 Converter Site Shut Down After Labels Win Lawsuit
September 5, 2017
Bazinga! Social network Taringa ‘fesses up to data breach
September 5, 2017
LinuxSecurity.com: GD library could be made to crash if it opened a specially crafted file.
September 5, 2017
LinuxSecurity.com: An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata is now available. is now available.
September 5, 2017
Chinese cryptocurrency crackdown
China banned the raising of funds using token-based digital currencies and deemed the practice illegal on Monday, in a move seen as an attempt to impose more regulations on the virtual market. The post Chinese cryptocurrency crackdown appeared first on WeLiveSecurity
September 5, 2017
UK not as keen on mobile wallets as mainland Europe and US
September 5, 2017
Latin American social media giant Taringa hacked; 28M accounts stolen
September 4, 2017
LinuxSecurity.com: A vulnerability in MCollective might allow remote attackers to execute arbitrary code.
September 4, 2017
Leaky S3 bucket sloshes deets of thousands with US security clearance
September 4, 2017
Trove of Private Military Contractor Job Applicants Exposed Online
September 4, 2017
LinuxSecurity.com: Libidn2 2.0.4 (released 2017-08-30) integer overflow in bidi.c/_isBidi() * Fix integer overflow in puny_decode.c/decode_digit() * Improve docs * Fix idna_free() to idn_free() * Update fuzzer corpora
September 4, 2017
LinuxSecurity.com: Several security issues were fixed in FontForge.
September 4, 2017
LinuxSecurity.com: Qemu: usb: ohci: infinite loop due to incorrect return value [CVE-2017-9330] (#1457698) Qemu: nbd: segmentation fault due to client non-negotiation [CVE-2017-9524] (#1460173) Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [CVE-2017-10664] (#1466466) Qemu: exec: oob access during dma operation [CVE-2017-11334] (#1471640) revised full fix for XSA-226 (regressed
September 4, 2017
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available.
September 4, 2017
Six million Instagram accounts hacked
A hack believed to target only celebrity accounts on Instagram has also accessed millions of users’ private data. The post Six million Instagram accounts hacked appeared first on WeLiveSecurity
September 4, 2017
LinuxSecurity.com: Several security issues were fixed in Liblouis.
September 4, 2017
Crypto-busters reverse nearly 320 MEELLION hashed passwords
September 4, 2017
LinuxSecurity.com: An update that solves 9 vulnerabilities and has two fixes An update that solves 9 vulnerabilities and has two fixes An update that solves 9 vulnerabilities and has two fixes is now available. is now available.
September 4, 2017
security update
September 4, 2017
Asterisk RTP bug worse than first thought: think intercepted streams
September 3, 2017
LinuxSecurity.com: This update fixes CVE-2017-12982.
September 3, 2017
LinuxSecurity.com: Qemu: usb: ohci: infinite loop due to incorrect return value [CVE-2017-9330] (#1457698) Qemu: nbd: segmentation fault due to client non-negotiation [CVE-2017-9524] (#1460173) Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [CVE-2017-10664] (#1466466) Qemu: exec: oob access during dma operation [CVE-2017-11334] (#1471640) revised full fix for XSA-226 (regressed
September 3, 2017
LinuxSecurity.com: This update fixes CVE-2017-12982.
September 3, 2017
Stolen 6M Celebrities data from Instagram sold on Dark Web
September 3, 2017
LinuxSecurity.com: Libidn2 2.0.4 (released 2017-08-30) integer overflow in bidi.c/_isBidi() * Fix integer overflow in puny_decode.c/decode_digit() * Improve docs * Fix idna_free() to idn_free() * Update fuzzer corpora
September 3, 2017
security update
September 3, 2017
security update
September 3, 2017
security update
September 2, 2017
LinuxSecurity.com: **Version 2.2.5** – 2017-08-30 * **Security** – Double-free in gdImagePngPtr(). **CVE-2017-6362** – Buffer over-read into uninitialized memory. **CVE-2017-7890** * **Fixed** – Fix #109: XBM reading fails with printed error – Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable – Fix #357: 2.2.4: Segfault in test suite – Fix #386:
September 2, 2017
LinuxSecurity.com: Libidn2 2.0.4 (released 2017-08-30) integer overflow in bidi.c/_isBidi() * Fix integer overflow in puny_decode.c/decode_digit() * Improve docs * Fix idna_free() to idn_free() * Update fuzzer corpora
September 2, 2017
LinuxSecurity.com: – Update to 2.6.0 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.6.0-2.1.9-and-1.3.21-released Security Advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security- advisory-2017-02
September 2, 2017
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available.
September 2, 2017
LinuxSecurity.com: An update that solves three vulnerabilities and has 5 fixes An update that solves three vulnerabilities and has 5 fixes An update that solves three vulnerabilities and has 5 fixes is now available. is now available.
September 2, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
September 2, 2017
DailyStormer comes back with Albanian domain; gets booted off
September 1, 2017
From streaming entertainment to social media to our online bank accounts and software, we are inundated every day with the need to create and remember new passwords. In fact, one study revealed that Americans have an average of 130 online accounts registered to a single email address. And what are the chances that those 130 […]
September 1, 2017
‘HoeflerText’ Popups Target Browsers With RAT and Locky Ransomware
September 1, 2017
US cops can’t keep license plate data scans secret without reason
September 1, 2017
Massive Locky Ransomware Strain Hits US with Over 23 Million Emails
September 1, 2017
Hacker Charged for Crashing Businesses Using Millions of Mirai botnet
September 1, 2017
Threatpost News Wrap, September 1, 2017
September 1, 2017
No Fix Planned For LabVIEW Bug, Says National Instruments
September 1, 2017
US Government Site Was Hosting Ransomware
September 1, 2017
Snoops ‘n’ snitches auditor IPCO gets up and running
September 1, 2017
Connect at mine free Wi-Fi! I would knew what I is do! I is cafe boss!
September 1, 2017
WikiLeaks suffer defacement at the hands of OurMine group
WikiLeaks’ whistleblowing website suffered an attack from the group known as OurMine on Thursday The post WikiLeaks suffer defacement at the hands of OurMine group appeared first on WeLiveSecurity
September 1, 2017
IRS-Themed Ransomware Using Old-School Tactics Over the past week, researchers have discovered a new ransomware variant that attempts to impersonate both the IRS and the FBI, similar to the FBI lockscreen malware that was popular several years ago. By tricking the victim into opening a link to a fake FBI questionnaire, the ransomware is downloaded […]
September 1, 2017
Asterisk bugs make a right mess of RTP
September 1, 2017
AT&T customers with Arris modems at risk, claim infosec bods
September 1, 2017
Robocall scumbags already target Hurricane Harvey victims
August 31, 2017
Instagram hacked; data of top celebrities stolen and traded
August 31, 2017