Menu

Category Archives: Security

Articles about security

Session Hijacking Bug Exposed GitLab Users Private Tokens
When uploading comments to the FCC, you can now include malware
Bugs in Arris Modems Distributed by AT&T Vulnerable to Trivial Attacks
Angelfire: CIA’ Undetectable Implants Infect Windows Boot Sector
Polyinstantiating /tmp and /var/tmp directories
FDA Recalls 465K Pacemakers Tied to MedSec Research
WikiLeaks official website hacked by OurMine hacking group
Instagram confirms hack against high-profile users’ account info
Reflected XSS Bug Patched in Popular WooCommerce WordPress Plugin
UK council fined £70k for leaving vulnerable people’s data open to world+dog
Google removes 300 Android apps following DDoS attack

Google has been forced to remove almost 300 apps from its Play Store after learning that apps were being hijacked for DDoS attacks. The post Google removes 300 Android apps following DDoS attack appeared first on WeLiveSecurity

Patchy PCI compliance putting consumer credit card data at risk
Mystery surrounds malware attack that forced German state parliament offline
CyberRehab’s mission? To clean up the internet, one ASN block at a time
No razzle-dazzle here! Hackers target Zazzle with run-of-the-mill brute-force attack
More than 700 million email addresses leaked in huge data breach

Huge data breach sees more than 700 million email addresses and passwords leaked publicly thanks to a misconfigured spambot, dubbed ‘Onliner’. The post More than 700 million email addresses leaked in huge data breach appeared first on WeLiveSecurity

ARM’s embedded TLS library fixes man-in-the-middle fiddle
Instagram’s leaky API exposed celebrities’ contact details
Siemens patches one security vuln, leaves folks to block second
465k Pacemakers vulnerable; users must visit doctors for fix

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

US government: We can jail you indefinitely for not decrypting your data
Intel Confirms Its Much-Loathed ME Feature Has A Kill Switch

security update

Oh, ambassador! You literally are spoiling us: Super-stealthy spyware hits Euro embassy PCs
Turla APT Used WhiteBear Espionage Tools Against Defense Industry, Embassies
New Locky Variant ‘IKARUSdilapidated’ Strikes Again
Electronics retail giant CeX hacked; data of 2 million customers stolen

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Siemens Fixes Session Hijacking Bug in LOGO!, Warns of Man-in-the-Middle Attacks
‘Open and accessible’ spambot server leaks 711 million records
Spambot Contains ‘Mind-Boggling’ Amount of Email, SMTP Credentials
Hidden Kill Switch Identified in Controversial Intel ME controller chip
7 Things to Know About Today’s DDoS Attacks
New Ransomware Email Scam Using FBI and IRS as Bait
711 MILLION email accounts weaponized by Onliner for spam campaigns
New ESET research uncovers Gazer, the stealthy backdoor that spies on embassies
Another banking trojan is trying to loot your cryptocurrency wallets
Best Korea fingered for hacks against Bitcoin exchanges in South
CeX data breach impacts two million UK accounts, customers told to change passwords ASAP
Lanarkshire NHS infection named as Bitpaymer variant
Pacemaker patch passes probe by US watchdog

Risk Level: Very Low. Type: Trojan.

Onliner Spambot dump exposes 711 Million email and passwords
Don’t fall for Hurricane Harvey charity scams!
Two million customer records pillaged in IT souk CeX hack attack

security update

Trump appointee says for the ‘past several years’ he has been the victim of ‘multiple cyber attacks’
Google Reminding Admins HTTP Pages Will Be Marked ‘Not Secure’ in October
Researchers Figure Out How to Blind ISPs from Smart Home Device Traffic
Revamped Nukebot Malware Changes Targets, Adds Functions
Insanely Popular White Supremacist Website Stormfront Booted Off
Telnet Credential Leak Reinforces Bleak State of IoT Security
UK infrastructure failing to meet the most basic cybersecurity standards
Dangerous WireX Android DDoS Botnet Killed by Security Giants
Spyware deployed in state-sponsored attacks against India and Pakistan
DJI Launches Drone Bug Bounty Program
Security and Education

To some extent, the security software industry relies on the idea that there is always a technological answer to a tech problem but ‘always’ is a big word. The post Security and Education appeared first on WeLiveSecurity

Google opens up on Titan security: Here’s how chip combats hardware backdoors
Leak of >1,700 valid passwords could make the IoT mess much worse
Trump signs bill into law allowing warrantless searches in parts of VA, MD and DC
Selena Gomez – please tell your 125 million fans to enable two-step verification
What to do if your public cloud is hacked
SAP point-of-sale systems were totally hackable with $25 kit
DJI strips out code badness, reveals some GPL odds ‘n sods
Dangle a DVR online and it’ll be cracked in two minutes
Swedish slip-up leaks hosting company’s customer data
Intel ME controller chip has secret kill switch

security update

Crowdfunding scheme hopes to pay legal fees for Marcus Hutchins
NHS board suffers malware attack just months after falling victim to WannaCry
Fraudulent Donations Lead to Disbanding of Hutchins Legal Defense Fund
CEOs Resign from Trump’s Cybersecurity Commission
Selena Gomez’ Instagram hacked; posts nude photos of Justin Bieber

security update

Tech firms take down WireX Android botnet
Mobile WireX DDoS Botnet ‘Neutralized’ by Collaboration of Competitors
Anonymous Messaging App Sarahah to Halt Collection of User Data With Next Update
Sarahah App Uploads Your Contacts List on Unidentified Server