Menu

Category Archives: Security

Articles about security

LinuxSecurity.com: Update to 6.20170925 * https://hackage.haskell.org/package/git- annex-6.20170925/changelog Security fix for CVE-2017-12976.

Microsoft Patches 17-Year-Old Office Bug
Confusion reigns over crypto vuln in Spanish electronic ID smartcards
Got an Amazon Echo or Google Home? Patch ’em or face bite of Bluetooth-linked vuln
10-year-old kid uses his face to unlock mom’s iPhone X with Face ID
The 5 types of cyber attack you’re most likely to face

As a consultant, one of the biggest security problems I see is perception: The threats companies think they face are often vastly different than the threats that pose the greatest risk. For example, they hire me to deploy state-of-the-art public key infrastructure (PKI) or an enterprise-wide intrusion detection system when really what they need is […]

11% off August Smart Lock Pro With Connect Bundle – Deal Alert
Coming live to a warzone near you: Army Truck Driver for Xbox!
Multi-stage malware sneaks into Google Play

In all the cases we investigated, the final payload was a mobile banking trojan. Once installed, it behaves like a typical malicious app of this kind: it may present the user with fake login forms to steal credentials or credit card details. The post Multi-stage malware sneaks into Google Play appeared first on WeLiveSecurity

LinuxSecurity.com: ‘shamger’ and Carlo Cannas discovered that a programming error in Varnish, a state of the art, high-performance web accelerator, may result in disclosure of memory contents or denial of service.

US rules on reporting cybersecurity flaws set to change according to source

Currently the US government employs an inter-agency review, created under former President Barack Obama. Known as the Vulnerability Equities Process, it is tasked with deciding what happens to any cybersecurity flaws that is discovered by the National Security Agency (NSA). The post US rules on reporting cybersecurity flaws set to change according to source appeared […]

10 best Linux distros for privacy fiends and security buffs in 2017
US Government issues alert about North Korean “Hidden Cobra” cyber attacks
Using bots to scam the scammers

LinuxSecurity.com: An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

10-year-old kid succeeds in unlocking his mum’s iPhone X, with just a glance
Uncle Sam to strap body sensors to hackers in nuke lab security study

LinuxSecurity.com: An update for php is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

How can airlines stop hackers pwning planes over the air? And don’t say ‘regular patches’
It’s 2017 – and your Windows PC can be forced to run malware-stuffed Excel macros
What do Vegas hookers, Colombian government, and 30,000 other sites have in common? Crypto-jacking miners

security update

There is a Pre-Installed Backdoor in OnePlus 5, 3 and 3T Devices
Microsoft Patches 20 Critical Vulnerabilities

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: An update for jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

security update

Debugging Tool Left on OnePlus Phones, Enables Root Access
Texas National Guard secretly installed spying devices on surveillance aircrafts
Adobe Patches Flash Player, 56 Bugs in Reader and Acrobat
Privacy Pass protocol promises private perusing
Unsecure Server Exposed Private Data of Popular Ride-Hailing Service
Estonia cuffs suspect, claims he’s a Russian ‘hacker spy’
Someone hacked N. Korean Radio Station to Play “The Final Countdown”
Apple iPhone X Face ID Fooled by a Mask
Americans’ unease about cybercrime towers over conventional crimes

The high level of fear of cybercrime dovetails with the self-reported rates of victimization, as 25% of the respondents reported that their personal information or that of their household member has been stolen by hackers over the past 12 months. The post Americans’ unease about cybercrime towers over conventional crimes appeared first on WeLiveSecurity

Linux 4.14 arrives and Linus says it should have fewer 0-days
Most UK law firms aren’t ready for GDPR, claims report
Shut the front door: Jewson ‘fesses up to data breach
Sure, Face ID is neat, but it cannot replace a good old fashioned passcode
Think the US is alone? 18 countries had their elections hacked last year
WikiLeaks is wiki-leaked. And it’s still not even a proper wiki anyway

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows Media Player is prone to a local information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a security-bypass vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to an information disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Word is prone to a memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to an information disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to an information disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

NSA rocked after The Shadow Brokers Breach
IDG Contributor Network: KPIs for managing and optimizing devsecops success
Thousand-dollar iPhone X’s Face ID wrecked by ‘$150 3D-printed mask’
Phishing Biggest Threat to Google Account Security
New IcedID Trojan Targets US Banks
You can soon securely unlock smartphone with your “body sweat”
Homeland Security Hackers Remotely Hack Boeing 757
The Daily Mail whisks up Kaspersky fears – but where’s the meat?
New Vulnerability Exploits Antivirus Programs to Install Malware
Transparency of machine-learning algorithms is a double-edged sword

Unless companies processing citizens’ personal data fully understand the reasoning behind the decisions made based on their machine-learning models, they will find themselves between a rock and a hard place. The post Transparency of machine-learning algorithms is a double-edged sword appeared first on WeLiveSecurity

Ransomware marketplaces and the future of malware | Salted Hash Ep 6
Stop your moaning, says maker of buggy Bluetooth sex toy

LinuxSecurity.com: An update for rh-eclipse46-jackson-databind is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update for rh-eclipse47-jackson-databind is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Ride-share upstart ‘Fasten’ revealed as Hive of insecurity

Risk Level: Very Low. Type: Trojan.

Amazon moves to stop S3 buckets leaking business data

LinuxSecurity.com: Multiple vulnerabilities have been found in eGroupWare, the worst of which allows remote attackers to execute arbitrary code.

LinuxSecurity.com: A vulnerability was discovered in VDE which may allow local users to gain root privileges.

CopperheadOS stops updates to thwart knock-off phone floggers

security update

All it took for researchers was a mask to bypass iPhone X Face ID

LinuxSecurity.com: An update that fixes 19 vulnerabilities is now available. An update that fixes 19 vulnerabilities is now available. An update that fixes 19 vulnerabilities is now available.

LinuxSecurity.com: This update includes a rebase from 8.0.46 up to 8.0.47 which resolves a single CVE along with various other bugs/features: rhbz#1497682 CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615

LinuxSecurity.com: This update fixes several vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed GIF, TTF, SVG, TIFF, PCX, JPG or SFW files

security update

Muslim Hacktivists Hack ISIS website; expose 20,000 subscribers list

LinuxSecurity.com: Multiple vulnerabilities have been found in Cacti, the worst of which could lead to the remote execution of arbitrary code.