LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
December 13, 2017
Hackers behind Mirai botnet & DYN DDoS attacks plead guilty
December 13, 2017
19-Year-Old TLS Vulnerability Weakens Modern Website Crypto
December 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a remote security-bypass vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Internet Explorer are prone to a remote memory-corruption vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Internet Explorer are prone to an information-disclosure vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Office Outlook is prone to an information-disclosure vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Internet Explorer are prone to a remote memory-corruption vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 13, 2017
Type: Vulnerability. Microsoft Internet Explorer is prone to an information-disclosure vulnerability; fixes are available.
December 13, 2017
LinuxSecurity.com: An update for eap7-jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 6 and Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 7.
December 13, 2017
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 13, 2017
LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 13, 2017
LinuxSecurity.com: A regression was added by the patch introduced in version 0.5.0-2+deb7u2 to fix CVE-2017-16927: xrdp-sesman started to segfault in libscp. For Debian 7 “Wheezy”, these problems have been fixed in version
December 13, 2017
LinuxSecurity.com: An update for rh-java-common-lucene5 is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 13, 2017
LinuxSecurity.com: An update for rh-java-common-lucene is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 13, 2017
LinuxSecurity.com: Fix to directory traversal attacks (CVE-2017-17042).
December 13, 2017
LinuxSecurity.com: Update to 2.1 —- Update to 2.0, Initial support for aarch64 images and associated SBCs
December 13, 2017
Barclays employee sentenced for aiding Dridex money launderers
December 13, 2017
Memes: the explanation of nearly everything – including computer viruses
We still don’t have a solid scientific theory of memes; nonetheless, they already allow us to understand why certain things happen the way they do. Memes are “alive”; they reproduce, mutate, and evolve according to Darwinian laws. The post Memes: the explanation of nearly everything – including computer viruses appeared first on WeLiveSecurity
December 13, 2017
File with 1.4 Billion Hacked and Leaked Passwords Found on the Dark Web
December 13, 2017
Newly Revealed Flaw in Intel Processors Allows Undetectable Malware
December 13, 2017
One per cent of all websites probably p0wned each year, say boffins
December 13, 2017
Up to ‘ONE BEEELLION’ vid-stream gawpers toil in crypto-coin mines
December 13, 2017
Put down the eggnog, it’s Patch Tuesday: Fix Windows boxes ASAP
December 13, 2017
Risk Level: Very Low. Type: Trojan.
December 13, 2017
What is the cyber kill chain?
December 12, 2017
Microsoft December Patch Tuesday Update Fixes 34 Bugs
December 12, 2017
Argy-bargy Argies barge into Starbucks Wi-Fi with alt-coin discharges
December 12, 2017
security update
December 12, 2017
Sophisticated ‘MoneyTaker’ group stole millions from Russian & US banks
December 12, 2017
New Spider Ransomware Comes With 96-Hour Deadline
December 12, 2017
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available.
December 12, 2017
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2017:3402
December 12, 2017
Bitfinex cryptocurrency exchange hit by massive DDoS attacks
December 12, 2017
Brrr! It’s a snow day and someone has pwned the chuffin’ school heating
December 12, 2017
Cryptocurrency in kilowatt hours: Counting the costs of anonymous transactions
The energy costs are not the only charges in a transaction: the bitcoin network itself levies a charge which, according to a blog from Valve, the gaming provider behind the Steam network, has skyrocketed from $0.20 in 2016 to $20 per transaction today The post Cryptocurrency in kilowatt hours: Counting the costs of anonymous transactions […]
December 12, 2017
This Fidget spinner app is sending other apps data to Chinese server
December 12, 2017
It has been a turbulent year of devastating ransomware attacks (e.g. NotPetya) and gut-wrenching breaches (e.g. Equifax). Undoubtedly, the question on everyone’s mind is, “what’s in store for us in the New Year?” Webroot’s top 10 cybersecurity predictions for 2018 covers everything from ransomware and breaches to mobile, cryptocurrency, and government.We’ve grouped our predictions to […]
December 12, 2017
Watch: How to Pick a Lock
December 12, 2017
Dyn Inc. DDoS anniversary, and the truth about the Reaper botnet
December 12, 2017
LinuxSecurity.com: Fix omapi SD leak (#1523547)
December 12, 2017
LinuxSecurity.com: New release (1:12.2.2-1), security fix for CVE-2017-16818
December 12, 2017
LinuxSecurity.com: Update to latest version. Contains security fixes for CVE-2017-15090, CVE-2017-15092, CVE-2017-15093 and CVE-2017-15094
December 12, 2017
LinuxSecurity.com: Upstream annoucement: [WordPress 4.9.1 Security and Maintenance Release](https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and- maintenance-release/)
December 12, 2017
LinuxSecurity.com: This is an update fixing denial of service (CVE-2017-16944). —- This is an update fixing use-after-free (CVE-2017-16943).
December 12, 2017
LinuxSecurity.com: Fix to directory traversal attacks (CVE-2017-17042).
December 12, 2017
LinuxSecurity.com: * CVE-2017-1000256: libvirt: TLS certificate verification disabled for clients (bz #1503687) * Fix qemu image locking with shared disks (bz #1513447)
December 12, 2017
LinuxSecurity.com: * Ver. 19.3.6.4
December 12, 2017
LinuxSecurity.com: The simplesamlphp package in wheezy is vulnerable to multiple attacks on authentication-related code, leading to unauthorized access and information disclosure.
December 12, 2017
LinuxSecurity.com: Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-15407
December 12, 2017
Enterprise security spend to continue to trend higher
A breakdown of the ‘spending pie’ shows that the ‘security services’ segment is projected to make up nearly 60% of the total IT security budgets, followed by the ‘infrastructure protection’ segment on a little over 18%. The post Enterprise security spend to continue to trend higher appeared first on WeLiveSecurity
December 12, 2017
LinuxSecurity.com: An update for org.ovirt.engine-root is now available for Red Hat Virtualization Manager version 4.1. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which
December 12, 2017
Google’s Project Zero reveals Apple jailbreak exploit
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
security update
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft PowerPoint is prone to an information-disclosure vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Exchange Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft SharePoint is prone to a privilege-escalation vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer are prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Excel is prone to a remote code-execution vulnerability; fixes are available.
December 12, 2017
Vulnerability Found in Two Keyless Entry Locks
December 11, 2017
In-Store WiFi Provider Used Starbucks Website to Generate Monero Coins
December 11, 2017
security update
December 11, 2017
security update
December 11, 2017
As 2017 comes to a close, we’re looking back at the 10 most significant (or simply the most devastating) cybersecurity stories of the year. Read through the list below to see which attacks, data breaches, and other events left a lasting impact on both the security industry and the global online community overall. Which story […]
December 11, 2017
Leftover Debugger Doubles as a Keylogger on Hundreds of HP Laptop Models
December 11, 2017
Vietnamese man hacked Australian airport computers; stole security data
December 11, 2017
Banking malware on Google Play targets Polish banks
Besides delivering the promised functionalities, the malicious apps can display fake notifications and login forms seemingly coming from legitimate banking applications, harvest credentials entered into the fake forms, as well as intercept text messages to bypass SMS-based 2-factor authentication. The post Banking malware on Google Play targets Polish banks appeared first on WeLiveSecurity
December 11, 2017