July 27, 2017
ShadowBrokers Remain an Enigma
July 27, 2017
How DevOps and cloud will speed up security
July 27, 2017
Risk Level: Very Low.
July 27, 2017
Risk Level: Very Low. Type: Trojan.
July 27, 2017
Google Study Quantifies Ransomware Profits
July 27, 2017
CowerSnail Backdoor Targeting Windows Devices
July 27, 2017
APT Group Uses Catfish Technique To Ensnare Victims
July 27, 2017
LinuxSecurity.com: This update addresses the following vulnerabilities: * [CVE-2017-7018](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7018), [CVE-2017-7030](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7030), [CVE-2017-7034](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7034), [CVE-2017-7037](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7037),
July 27, 2017
LinuxSecurity.com: ## 2.8.25 (2017-07-17) * security #23507 [Security] validate empty passwords again (xabbuh) * bug #23526 [HttpFoundation] Set meta refresh time to 0 in RedirectResponse content (jnvsor) * bug #23540 Disable inlining deprecated services (alekitto) * bug #23468 [DI] Handle root namespace in service definitions (ro0NL) * bug #23256 [Security] Fix authentication.failure event
July 27, 2017
LinuxSecurity.com: – Upgrade to upstream v3.0.15 release. See upstream ChangeLog for details (in freeradius-doc subpackage). – Resolves: Bug#1471848 CVE-2017-10978 freeradius: Out-of-bounds read/write due to improper output buffer size check in make_secret() – Resolves: Bug#1471860 CVE-2017-10983 freeradius: Out-of-bounds read in
July 27, 2017
LinuxSecurity.com: This update fixes multiple security vulnerabilities (CVE-2017-7515, CVE-2017-9775, CVE-2017-9776, CVE-2017-9865).
July 27, 2017
LinuxSecurity.com: Rebuilt to new upstream version 2.7.1 fixes rhbz#1443071 and rhbz#1443129
July 27, 2017
LinuxSecurity.com: * Bump to 1.8.3 * Security fix for CVE-2017-8932 * add support for 28+bit OIDs in asn1
July 27, 2017
Homograph attacks: Don’t believe everything you see
A homograph attack is what happens when attackers register domains that are similar to the originals, with valid certificates. The post Homograph attacks: Don’t believe everything you see appeared first on WeLiveSecurity
July 27, 2017
Black Hat 2017 industrial hacking: The song remains the same
If industry frameworks are to inform and secure the critical infrastructure writ large, here at Black Hat there a lot of people punching holes in them, and in simple ways. The post Black Hat 2017 industrial hacking: The song remains the same appeared first on WeLiveSecurity
July 27, 2017
Black Hat 2017: Non-standard hacking platforms reign supreme
This year at Black Hat, tiny automated hacking platforms are everywhere, loaded with tasty purpose-built tools that can be used to break into your systems. The post Black Hat 2017: Non-standard hacking platforms reign supreme appeared first on WeLiveSecurity
July 27, 2017
Android Sypware Still Collects PII Despite Outcry
July 27, 2017
Risk Level: Very Low. Type: Trojan.
July 27, 2017
Vulnerable Radiation Monitoring Devices Won’t Be Patched
July 26, 2017
security update
July 26, 2017
security update
July 26, 2017
security update
July 26, 2017
Stop blaming users for security misses
July 26, 2017
LinuxSecurity.com: This release fixes a use-after-free in replaceChild() call.
July 26, 2017
LinuxSecurity.com: * CVE-2017-7718: cirrus: OOB read access issue (bz #1443443) * CVE-2016-9603: cirrus: heap buffer overflow via vnc connection (bz #1432040) * CVE-2017-7377: 9pfs: fix file descriptor leak (bz #1437872) * CVE-2017-7980: cirrus: OOB r/w access issues in bitblt (bz #1444372) * CVE-2017-8112: vmw_pvscsi: infinite loop in pvscsi_log2 (bz #1445622) * CVE-2017-8309: audio: host memory […]
July 26, 2017
LinuxSecurity.com: Multiple vulnerabilities were found in in qemu, a fast processor emulator: CVE-2017-9310
July 26, 2017
LinuxSecurity.com: Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in sandbox bypass, use of insecure cryptography, side channel attacks, information disclosure, the execution of arbitrary code, denial of service or
July 26, 2017
LinuxSecurity.com: Fix CVE-2017-11368 (remote triggerable assertion failure in krb5kdc)
July 26, 2017
LinuxSecurity.com: Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. Debian follows the extended support releases (ESR) of Thunderbird.
July 26, 2017
LinuxSecurity.com: This release fixes a use-after-free in replaceChild() call.
July 26, 2017
'Jump boxes' and SAWs improve security, if you set them up right
A jump box is a secure computer that all admins first connect to before launching any administrative task or use as an origination point to connect to other servers or untrusted environments. Over the last few years, with malicious hackers and malware infesting nearly every enterprise network at will, security admins have been looking for […]
July 26, 2017
Post Quantum Cryptography
July 26, 2017
Windows SMB Zero Day to Be Disclosed During DEF CON
July 26, 2017
Adobe to Completely Disable Flash Player by 2020
July 26, 2017
Is it safe to store corporate information on Google Drive (or similar services)?
When it comes to protecting corporate information, some doubt whether or not the cloud is the best option. We look at all the security services available. The post Is it safe to store corporate information on Google Drive (or similar services)? appeared first on WeLiveSecurity
July 26, 2017
Linux file manager flaw leaves security “Bad Taste”
July 26, 2017
Black Hat 2017: Hacking the physical world
Cameron Camp, in attendance at this year’s Black Hat in Las Vegas, takes a closer look at attacks against physical infrastructure. The post Black Hat 2017: Hacking the physical world appeared first on WeLiveSecurity
July 26, 2017
Relax: Microsoft is NOT Killing Paint App
July 25, 2017
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 25, 2017
Academia’s Role in Security Skills Gap Examined
July 25, 2017
FBI’s Surveillance Van Sold on eBay for US $18,700
July 25, 2017
LinuxSecurity.com: This update includes the latest stable release of _Apache Subversion_, version **1.9.6**. ### User-visible changes: #### Client-side bugfixes: * cp/mv: improve error message when target is an unversioned dir * merge: reduce memory usage with large amounts of mergeinfo ([issue 4667](https://issues.apache.org/jira/browse/SVN-4667)) #### Server-side
July 25, 2017
Social engineering and ransomware
Social engineering may play a vital part in persuading a victim to open a malicious executable or website, says ESET’s David Harley on social engineering and ransomware. The post Social engineering and ransomware appeared first on WeLiveSecurity
July 25, 2017
Black Hat USA 2017 Preview
July 25, 2017
Malware found lurking behind every app at alternative Android store
ESET researchers have discovered an Android app store distributing malware on a mass scale. The post Malware found lurking behind every app at alternative Android store appeared first on WeLiveSecurity
July 25, 2017
£20 million cybersecurity programme to train teenagers set to launch in UK
A new £20 million cybersecurity programme to train teenagers will be launched in the UK this autumn, as part of the government’s plans to address the skills gap. The post £20 million cybersecurity programme to train teenagers set to launch in UK appeared first on WeLiveSecurity
July 25, 2017
LinuxSecurity.com: Fix CVE-2017-11368 (remote triggerable assertion failure in krb5kdc)
July 24, 2017
LinuxSecurity.com: librsvg 2.40.18 release, fixing CVE-2017-11464 (division-by-zero in the Gaussian blur code). For details, see https://mail.gnome.org/archives/ftp-release- list/2017-July/msg00078.html
July 24, 2017
security update
July 24, 2017
Casino Becomes Victim of Data Hack—courtesy Fish Tank
July 24, 2017
Type: Vulnerability. Adobe Flash Player is prone to multiple remote code-execution vulnerabilities; fixes are available.
July 24, 2017
Hacker Admits to Mirai Attack Against Deutsche Telekom
July 24, 2017
A US Firm Will Install Microchips in Employees
July 24, 2017
LinuxSecurity.com: Heimdal could allow unintended access to network services.
July 24, 2017
88% feel vulnerable to data threats
Thales Group has announced the results of its 2017 data threat report, showing that the number of global data breaches has increased from 2016. The post 88% feel vulnerable to data threats appeared first on WeLiveSecurity
July 24, 2017
Going to Black Hat? Bring your (marketing) wallet
This year at Black Hat, it will be incumbent upon newer vendors to make sensational claims to gain market share from established vendor, says Cameron Camp. The post Going to Black Hat? Bring your (marketing) wallet appeared first on WeLiveSecurity
July 24, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
July 24, 2017
Risk Level: Very Low. Type: Trojan.
July 24, 2017
LinuxSecurity.com: A heap-based buffer underflow flaw was discovered in catdoc, a text extractor for MS-Office files, which may lead to denial of service (application crash) or have unspecified other impact, if a specially crafted file is processed.
July 23, 2017
security update
July 22, 2017
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 22, 2017
LinuxSecurity.com: It was discovered that Atril, the MATE document viewer, made insecure use of tar when opening tar comic book archives (CBT). Opening a malicious CBT archive could result in the execution of arbitrary code. This update disables the CBT format entirely.
July 22, 2017
Tor Public Bug Bounty Program: Earn Up To $4000
July 22, 2017
Watch a Homemade Robot Crack a Safe in Just 15 Minutes
July 22, 2017
security update
July 21, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.
July 21, 2017
LinuxSecurity.com: New seamonkey packages are available for Slackware 14.2 and -current to fix security issues.
July 21, 2017
LinuxSecurity.com: Update to upstream version 1.3.1.
July 21, 2017
LinuxSecurity.com: New upstream release: 2.4.5
July 21, 2017
LinuxSecurity.com: An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is now available. now available.
July 21, 2017
LinuxSecurity.com: An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes is now available. is now available.
July 21, 2017
Trickbot Malware Now Targets US Banks
July 21, 2017
Motivation Mystery Behind WannaCry, ExPetr
July 21, 2017