Menu

Category Archives: Security

Articles about security

The F*CKWIT Intel chip flaw. Ready yourself for patches
Security Flaws in GPS Trackers Puts Millions of Devices’ Data at Risk
Multiple Intel Processors Generations Hit by Serious Security Flaw
Teen girl facing up to 10 years for sending nude selfie
Bug-finders’ scheme: Tick-tock, this tech’s tested by flaws.. but who the heck do you tell?

LinuxSecurity.com: Jason Crain discovered a overflow vulnerability in the poppler PDF rendering library. For Debian 7 “Wheezy”, this issue has been fixed in poppler version

Opera browser updated to stop crypto-currency mining
Ransomware to hit cloud computing in 2018, predicts MIT
Critical Flaw Reported In phpMyAdmin Lets Attackers Damage Databases
Driving Open Standards in a Fragmented Networking Landscape
Security catch-up: Nigerian prince email ring cops collar … Louisiana OAP?
Now is the best time to craft your breach response

Taking time to think logically and deliberately about your assets can help you determine what needs to be secured. Preparing for the worst can help you see the best course of action to prevent those emergencies in the present. The post Now is the best time to craft your breach response appeared first on WeLiveSecurity

LinuxSecurity.com: An update for eap7-jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 7.0 for Red Hat Enterprise Linux 6 and Red Hat JBoss Enterprise Application Platform 7.0 for Red Hat Enterprise Linux 7.

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 7.0 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 7.0 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Brazil says it has bagged Royal Navy flagship HMS Ocean for £84m
Shopped in Forever 21? There was bank-card-slurping malware in it for, like, forever
Code for Satori malware posted on Pastebin
MacOS LPE Exploit Gives Attackers Root Access
VMware Issues 3 Critical Patches for vSphere Data Protection
Kernel-memory-leaking Intel processor design flaw forces Linux, Windows redesign
The mysterious case of the Linux Page Table Isolation patches
Forever 21 Says PoS Systems Exposed Customer Data for 8 Months
A desperate YouTube moderator scam spam
Iranians resist internet censorship amid deadly street protests
Automatic autofill of your username and password? Not a good idea
15-year-old Unpatched Root Access Bug found in Apple’s macOS
Multiple-guess quiz will make Brit fliers safer, hopes drone-maker DJI

LinuxSecurity.com: It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for CIP Safety, IWARP_MPA, NetBIOS, Profinet I/O and AMQP, which result in denial of dervice or the

Smartphone sensors can leak the four-digit PIN code to hackers
Reddit user leaks alleged Game of Thrones Season 8 script pages
2017’s Top hacks and data breaches

security update

You are not alone, WhatsApp is down for many

LinuxSecurity.com: Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service (application crash) or potentially the execution of arbitrary code if malformed files are opened.

Nintendo Switch Hacked to Run Pirated Games
Snowden Explains Why Telegram Messenger App is Unsafe

security update

LinuxSecurity.com: Update to 1.9.9. This release addresses security vulnerabilities discovered by Cure53. Details can be found in the Security Audit Report: https://enigmail.net/ download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf

LinuxSecurity.com: A vulnerability has been discovered in Asterisk, an open source PBX and telephony toolkit, which may result in resource exhaustion and denial of service.

PS4 Jailbreak possible with newly identified exploit
Victim of Swatting: Police kills Innocent man after Call of Duty gamer prank call

LinuxSecurity.com: Multiple vulnerabilities have been discovered in Asterisk, an open source PBX and telephony toolkit, which may result in denial of service, information disclosure and potentially the execution of arbitrary code.

How Classical Cryptography Will Survive Quantum Computers

LinuxSecurity.com: An update that fixes 16 vulnerabilities is now available. An update that fixes 16 vulnerabilities is now available. An update that fixes 16 vulnerabilities is now available.

security update

LinuxSecurity.com: Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service, information disclosure or spoofing of sender’s email addresses.

LinuxSecurity.com: An update that contains security fixes can now be installed. An update that contains security fixes can now be installed. An update that contains security fixes can now be installed.

LinuxSecurity.com: An update that contains security fixes can now be installed. An update that contains security fixes can now be installed. An update that contains security fixes can now be installed.

security update

Chrome Extension with 105,000 installs is a Cryptocurrency Miner

LinuxSecurity.com: Update to 1.9.9. This release addresses security vulnerabilities discovered by Cure53. Details can be found in the Security Audit Report: https://enigmail.net/ download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf

LinuxSecurity.com: Update to 0.8.3, fixing CVE-2017-15612 and CVE-2017-16876

LinuxSecurity.com: A vulnerability was found in the Mercurial version control system which could lead to remote arbitrary code execution.

Bitcoin exchange hit by DDoS attack after kidnapping of its official (Updated)
John McAfee’ Twitter account hack: “Most likely my phone was compromised”
2018 Security Predictions – Double Up on Linux Attacks
New ibm linux-only mainframe delivers breakthrough security for next-gen applications
Introduction to GPG Encryption and git-crypt
One Small Step to Harden USB Over IP on Linux
Kubernetes, standardization, and security dominated 2017 Linux container news
Hackers Can Rickroll Thousands of Sonos and Bose Speakers Over the Internet
Best practices when running Node.js with port 80 (Ubuntu / Linode)
How to Generate CSR (Certificate Signing Request) in Linux
The state of Linux security in 2017
Gaps in software slowing down security professionals
FreeBSD-Based TrueOS 17.12 Focuses on Faster Boot, Bhyve and LibreSSL Support
The hacks that left us exposed in 2017

The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any questions? Just ask. WordPress Backdoor Found on Over 300,000 Machines Recently, researchers found a WordPress plugin containing a backdoor that […]

My Twitter was hacked, claims John McAfee
EA servers down; Battlefield 1, Battlefront 2, Star Wars & FIFA 18 Affected
Sound Waves can Help Hackers Disrupt Functions of Hard Disk Drives
Code Used in Zero Day Huawei Router Attack Made Public

LinuxSecurity.com: An update that fixes 16 vulnerabilities is now available. An update that fixes 16 vulnerabilities is now available. An update that fixes 16 vulnerabilities is now available.

LinuxSecurity.com: An update that fixes 14 vulnerabilities is now available. An update that fixes 14 vulnerabilities is now available. An update that fixes 14 vulnerabilities is now available.

Bose & Sonos Smart Speakers can be Hacked to Play Disturbing Sounds

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Cybersecurity review of 2017: The year of wake-up calls – part 2

Courtesy of its highly customizable nature – along with its ability to persist in the system and to provide valuable information for fine-tuning the highly configurable payloads – the malware can be adapted for attacks against any environment, making it extremely dangerous. The post Cybersecurity review of 2017: The year of wake-up calls – part […]

LinuxSecurity.com: This update fixes several vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed image files are processed.

LinuxSecurity.com: Patch for CVE-2016-6328

LinuxSecurity.com: This update addresses the following vulnerabilities: * [CVE-2017-13866](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13866), [CVE-2017-13870](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13870), [CVE-2017-7156](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7156), [CVE-2017-13856](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13856)

LinuxSecurity.com: Update to upstream 14.7.4 release to address AST-2017-012 security issue —- Update to upstream 14.7.3 release for security alert AST-2017-013 —- Update to upstream 14.7.2 release for bug fixes

LinuxSecurity.com: Update to version 0.0.11, see http://metadata.ftp- master.debian.org/changelogs/main/s/sensible-utils/sensible- utils_0.0.11_changelog for details.

LinuxSecurity.com: Disable SSHv1 options.

Leaky RootsWeb Server Exposes Some Ancestry.com User Data

LinuxSecurity.com: Update to 0.8.3, fixing CVE-2017-15612 and CVE-2017-16876

Ancestry.com’ RootsWeb breach: 300,000 plaintext accounts leaked

LinuxSecurity.com: Multiple security issues have been found in the Mozilla Thunderbird mail client including information leaks, unintended JavaScript execution and sender address spoofing.

LinuxSecurity.com: Update to version 0.0.11, see http://metadata.ftp- master.debian.org/changelogs/main/s/sensible-utils/sensible- utils_0.0.11_changelog for details.

LinuxSecurity.com: Update to upstream 13.18.4 release to address AST-2017-012/CVE-2017-17664 security issue

LinuxSecurity.com: – update to the latest upstream pre-release (fixes CVE-2017-1000211)

LinuxSecurity.com: Disable SSHv1 options.

Software used in FBI’s biometric database contains Russian code: Report
The worst passwords of the year revealed

Need a New Year’s resolution? How about this one? Start taking password security more seriously. The post The worst passwords of the year revealed appeared first on WeLiveSecurity

Cybersecurity review of 2017: The year of wake-up calls – part 1

Ransomware and data breaches remain major thorns in the sides of users and organizations across the world, often piercing their defenses without too much effort. The post Cybersecurity review of 2017: The year of wake-up calls – part 1 appeared first on WeLiveSecurity

5 Best mobile security apps in Android & iOS, Free Download
Mozilla Patches Critical Bug in Thunderbird