December 11, 2017
Blighty flogs Qatar a bunch of missiles and Typhoon fighter jets
Happy holidays, scam spotters!
Businesses are often sent fake invoices and waybills which install ransomware. Teach staff to avoid these. If questionable, ask your IT dept to look at it. E-cards have been a target in the past and may be used again in holiday-themed attacked. The post Happy holidays, scam spotters! appeared first on WeLiveSecurity
December 11, 2017
Language bugs infest downstream software, fuzzer finds
December 11, 2017
Leftover Synaptics debugger puts a keylogger on HP laptops
December 11, 2017
Dynamics 365 sandbox leaked TLS certificates
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
LinuxSecurity.com: It discovered that the Private Browsing mode in the Mozilla Firefox web browser allowed to fingerprint a user across multiple sessions via IndexedDB.
December 10, 2017
LinuxSecurity.com: Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. For the oldstable distribution (jessie), these problems have been fixed
December 10, 2017
Someone hacked this traffic sign with anti-Trump messages
December 10, 2017
A Trove of 1.4 Billion Clear Text Credentials File Found on Dark Web
December 10, 2017
LinuxSecurity.com: – fix NTLM buffer overflow via integer overflow (CVE-2017-8816) – fix FTP wildcard out of bounds read (CVE-2017-8817)
December 10, 2017
LinuxSecurity.com: Update to latest upstream version.
December 10, 2017
security update
December 9, 2017
security update
December 9, 2017
Researcher finds pre-installed keylogger in hundreds of HP laptops
December 9, 2017
LinuxSecurity.com: It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for CIP Safety, IWARP_MPA, NetBIOS, Profinet I/O and AMQP, which result in denial of dervice or the execution of arbitrary code.
December 9, 2017
LinuxSecurity.com: An update that solves three vulnerabilities and has two An update that solves three vulnerabilities and has two An update that solves three vulnerabilities and has two fixes is now available. fixes is now available.
December 9, 2017
Security Vulnerabilities in Certificate Pinning
December 9, 2017
10 useful ncat (nc) Command Examples for Linux Systems
December 9, 2017
WordPress hit with keylogger, 5,400 sites infected
December 9, 2017
LinuxSecurity.com: This is a cumulative update to the Mozilla CA certificates trust list version 2.20, which has been published as part of Mozilla NSS 3.34.1. It also includes the changes that were previously released as version 2.18 as part of NSS 3.34. For additional details, please refer to the release notes of NSS 3.34.1 https://developer.mozilla.org/en-
December 9, 2017
LinuxSecurity.com: Patch CVE-2017-16927.
December 9, 2017
LinuxSecurity.com: Upstream released new version. See https://collectd.org/news.shtml#news106 for the list of changes. Fixes CVE-2017-16820 (double free in snmp plugin)
December 9, 2017
LinuxSecurity.com: New openssl packages are available for Slackware 14.2 and -current to fix security issues.
December 9, 2017
security update
December 9, 2017
Bitcoin investors targeted by Orcus RAT in new phishing campaign
December 8, 2017
Android Flaw Poisons Signed Apps with Malicious Code
December 8, 2017
Android flaw lets attack code slip into signed apps
December 8, 2017
security update
December 8, 2017
security update
December 8, 2017
Man who threw away $121m of Bitcoin wants to dig up landfill site
December 8, 2017
Apple Fixes Flaw Impacting HomeKit Devices
December 8, 2017
UK.gov law resources now untrustworthy, according to browsers
December 8, 2017
StrongPity2 spyware replaces FinFisher in MitM campaign – ISP involved?
As we reported in September, in campaigns we detected in two different countries, man-in-the-middle attacks had been used to spread FinFisher, with the “man” in both cases most likely operating at the ISP level. The post StrongPity2 spyware replaces FinFisher in MitM campaign – ISP involved? appeared first on WeLiveSecurity
December 8, 2017
Next-gen telco protocol Diameter has last-gen security – researchers
December 8, 2017
LinuxSecurity.com: An update that fixes 18 vulnerabilities is now available. An update that fixes 18 vulnerabilities is now available. An update that fixes 18 vulnerabilities is now available.
December 8, 2017
LinuxSecurity.com: An update that fixes 41 vulnerabilities is now available. An update that fixes 41 vulnerabilities is now available. An update that fixes 41 vulnerabilities is now available.
December 8, 2017
LinuxSecurity.com: An update that solves 5 vulnerabilities and has three fixes An update that solves 5 vulnerabilities and has three fixes An update that solves 5 vulnerabilities and has three fixes is now available. is now available.
December 8, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
December 8, 2017
LinuxSecurity.com: An update that solves 5 vulnerabilities and has three fixes An update that solves 5 vulnerabilities and has three fixes An update that solves 5 vulnerabilities and has three fixes is now available. is now available.
December 8, 2017
Quantum Computing Is the Next Big Security Risk
December 8, 2017
The Most Exciting Linux Kernel Stories Of 2017
December 8, 2017
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any questions? Just ask. PayPal Plagued by Phishing Emails Recently, many PayPal users have received emails about a fake transaction failure […]
December 8, 2017
LinuxSecurity.com: It was discovered that the TLS server in Erlang is vulnerable to an adaptive chosen ciphertext attack against RSA keys. For the oldstable distribution (jessie), this problem has been fixed
December 8, 2017
VMware and Carbon Black: you complete me, no you complete me
December 8, 2017
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
December 8, 2017
LinuxSecurity.com: An update for rh-postgresql95-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 8, 2017
LinuxSecurity.com: An update for rh-postgresql96-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 8, 2017
LinuxSecurity.com: An update for postgresql is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 8, 2017
LinuxSecurity.com: An update for rh-postgresql94-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 8, 2017
LinuxSecurity.com: Several security issues were fixed in the kernel.
December 8, 2017
security update
December 8, 2017
Security industry needs to be less trusting to get more secure
December 7, 2017
More than 5,000 WordPress websites plagued with Keylogger
December 7, 2017
Banking Apps Found Vulnerable to MITM Attacks
December 7, 2017
LinuxSecurity.com: An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 7, 2017
Risk Level: Very Low. Type: Trojan.
December 7, 2017
Risk Level: Very Low. Type: Trojan, Worm.
December 7, 2017
HMS Queen Lizzie formally joins the Royal Navy
December 7, 2017
Virtual keyboard app exposes personal data of 31 million users
The developer’s keyboard apps boast 40 million users across Android and iOS, but “only” Android users were affected by the security lapse. The post Virtual keyboard app exposes personal data of 31 million users appeared first on WeLiveSecurity
December 7, 2017
Toucan play that game: Talking toy bird hacked
December 7, 2017
LinuxSecurity.com: George Shuklin from servers.com discovered that Nova, a cloud computing fabric controller, did not correctly enforce its image- or hosts-filters. This allowed an authenticated user to bypass those filters by simply rebuilding an instance.
December 7, 2017
LinuxSecurity.com: Michael Eder and Thomas Kittel discovered that Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos, did not correctly handle ASN.1 data. This would allow an unauthenticated remote attacker to cause a denial of service (crash of
December 7, 2017
LinuxSecurity.com: An update is now available for Red Hat OpenShift Container Platform 3.4, Red Hat OpenShift Container Platform 3.5, and Red Hat OpenShift Container Platform 3.6. Red Hat Product Security has rated this update as having a security impact
December 7, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
December 7, 2017
Cryptocurrency mining market NiceHash hacked; $67m might be stolen
December 7, 2017
NiceHash diced up by hackers, thousands of Bitcoin pilfered
December 6, 2017
Ashley Madison Found Leaking Private & Explicit Photos of Users
December 6, 2017
LinuxSecurity.com: An update that solves two vulnerabilities and has one An update that solves two vulnerabilities and has one An update that solves two vulnerabilities and has one errata is now available. errata is now available.
December 6, 2017
LinuxSecurity.com: An update that solves two vulnerabilities and has one An update that solves two vulnerabilities and has one An update that solves two vulnerabilities and has one errata is now available. errata is now available.
December 6, 2017
Google Patches Critical Encryption Bug Impacting Pixel, Nexus Phones
December 6, 2017
LinuxSecurity.com: curl could be made to crash if it received specially crafted input.
December 6, 2017
LinuxSecurity.com: An update for liblouis is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 6, 2017
LinuxSecurity.com: libxml2 could be made to crash if it opened a specially craftedfile.
December 6, 2017
As the holiday season kicks into high gear, keep in mind that shoppers are at an even higher risk of cyberattacks during this time of year. Salesforce projects that mobile users will account for 60 percent of traffic to retail sites around the globe this year. With the increased popularity of shopping on the go, […]
December 6, 2017
Intel Management Engine pwned by buffer overflow
December 6, 2017
Satori botnet rears its head, exploiting IoT vulnerabilities
December 6, 2017
Cryptocurrency exchange Bitfinex plagued by DDoS attacks
The cast of characters behind the attacks, or their motives, are unclear. However, the onslaughts come at a time when the bitcoin price hits new highs, possibly triggering efforts on the part of cybercriminals to manipulate and cash in on the price. The post Cryptocurrency exchange Bitfinex plagued by DDoS attacks appeared first on WeLiveSecurity
December 6, 2017
TeamViewer Vulnerability Lets Attackers Take Full Control of PCs
December 6, 2017
Six things to consider before implementing an ISMS
These factors can be key to the success or failure of the ISMS implementation, due to the day-to-day activities in the organization and the resources required for system operation. The post Six things to consider before implementing an ISMS appeared first on WeLiveSecurity
December 6, 2017