Menu

Category Archives: Security

Articles about security

Someone Hacked Swedish Radio Station to Play Pro-ISIS Song
26,000 blockchain projects launched in 2016, 92 percent are now dead
Researchers find almost EVERY computer with an Intel Skylake and above CPU can be owned via USB
Vault 8: WikiLeaks Releases Source Code For Hive – CIA’s Malware Control System
Manic miners, hideous hackers, frightful flaws, vibrating mock cock app shock – and more

LinuxSecurity.com: * Fix ppc64 KVM failure (bz #1501936) * CVE-2017-15038: 9p: information disclosure when reading extended attributes (bz #1499111) * CVE-2017-15268: potential memory exhaustion via websock connection to VNC (bz #1496882) —- qemu-pr-helper didn’t work due to a change in the libmultipath/libmpathpersist APIs exposed by device-mapper-multipath-devel. This has been fixed now. Other

LinuxSecurity.com: 1.6, multiple security fixes.

LinuxSecurity.com: – Update to 1.1.26 – CVE-2017-15194 Release notes: https://www.cacti.net/release_notes.php?version=1.1.26

LinuxSecurity.com: Security fix for CVE-2017-12629

LinuxSecurity.com: For changes see: https://www.mozilla.org/en-US/thunderbird/52.4.0/releasenotes/

Parity’s $280m Ethereum wallet freeze was no accident: It was a HACK, claims angry upstart
Cyberhitmen hired for sustained DDoS attacks against mans ex-employer

security update

security update

security update

security update

How did someone hijack your Gmail? Phishing, keylogger or password reuse, we’re guessing

LinuxSecurity.com: Wen Bin discovered that bchunk, an application that converts a CD image in bin/cue format into a set of iso and cdr/wav tracks files, did not properly check its input. This would allow malicious users to crash the application or potentially execute arbitrary code.

Microsoft president says the world needs a digital Geneva Convention
“Eavesdropper” Flaw Exposes Millions of Call, Texts and Recordings
AutoIt Scripting Used By Overlay Malware to Bypass AV Detection
Intel’ Management Engine Tech Just Got Exposed Through USB Ports

The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. UK-Based Cryptocurrency Hit By Cyberattack Prior to the official launch of Electroneum, a UK-based cryptocurrency that […]

Threatpost News Wrap Podcast for Nov. 10
Experts share perspective on the state of journalists’ cybersafety

These days, journalists and publishers are increasingly concerned about protecting themselves, their work, and their sources. Rightfully so, for we live in a time when nearly every aspect of publishing occurs online. The post Experts share perspective on the state of journalists’ cybersafety appeared first on WeLiveSecurity

WikiLeaks drama alert: CIA forged digital certs imitating Kaspersky Lab
What to consider when deploying a next-generation firewall
Fighting persistent malware with a UEFI scanner

The biggest news in malware so far this year has been WannaCryptor a.k.a. WannaCry, and one reason that particular ransomware spread so fast was because it used a “top secret” exploit developed by the NSA, an agency known to have dabbled in UEFI compromise. The post Fighting persistent malware with a UEFI scanner appeared first […]

LinuxSecurity.com: An update that solves 29 vulnerabilities and has two fixes An update that solves 29 vulnerabilities and has two fixes An update that solves 29 vulnerabilities and has two fixes is now available. is now available.

LinuxSecurity.com: An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is now available. now available.

LinuxSecurity.com: An update that solves 23 vulnerabilities and has 6 fixes is An update that solves 23 vulnerabilities and has 6 fixes is An update that solves 23 vulnerabilities and has 6 fixes is now available. now available.

LinuxSecurity.com: Multiple vulnerabilities have been found in libxml2, the worst of which could result in the execution of arbitrary code.

Judge bins sueball lobbed at Malwarebytes by rival antivirus maker for torpedoing its tool
WikiLeaks’ Vault 8 Leaks Show CIA Impersonated Kaspersky Lab

Risk Level: Very Low. Type: Trojan.

Learn client-server C programming – with this free tutorial from the CIA

LinuxSecurity.com: It was discovered that the pg_ctlcluster, pg_createcluster and pg_upgradecluster commands handled symbolic links insecurely which could result in local denial of service by overwriting arbitrary files.

LinuxSecurity.com: Several vulnerabilities have been found in the PostgreSQL database system: CVE-2017-15098

LinuxSecurity.com: A vulnerabilitiy has been found in the PostgreSQL database system: Denial of service and potential memory disclosure in the json_populate_recordset() and jsonb_populate_recordset() functions.

US government seizes Texas gun mass murder to demand backdoors

security update

Google just can not get rid of BankBot malware from Play Store
Eavesdropper Vulnerability Exposes Mobile Call, Text Data

LinuxSecurity.com: An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.

Google Chrome will automatically block forced website redirects
Uni staffer’s health info blabbed in email list snafu
Microsoft Provides Guidance on Mitigating DDE Attacks
Windows Movie Maker Scam spreads massively due to high Google ranking

ESET detected a modified version of Windows Movie Maker that aims to collect money from unaware users. The spread has been boosted by SEO. The post Windows Movie Maker Scam spreads massively due to high Google ranking appeared first on WeLiveSecurity

Not even ordering pizza is safe from the browser crypto-mining scourge
Microsoft issues advisory to users after macro-less malware attacks
Smashing Security podcast #051: Robots, romance, passwords, and CrunchyRoll
Evil pixels: researcher demos data-theft over screen-share protocols
Microsoft pals up with partners for threat-hunting
Brit moron tried buying a car bomb on dark web, posted it to his address. Now he’s screwed
Intel’s management engine – in most CPUs since 2008 – can be p0wned over USB
Quantum computers could crack Bitcoin, but fixes are available now

Conventional wisdom about passwords is shifting, as they are increasingly seen as a less-than-ideal security measure for securing digital accounts. Even the recommended rules for creating strong passwords were recently thrown out the window. Average users are just too unreliable to regularly create secure passwords that are different across all accounts, so using technology to […]

security update

Risk Level: Very Low.

LinuxSecurity.com: Update to ansible 2.4.1.0 with various bugfixes. See https://github.com/ansible/ansible/blob/stable-2.4/CHANGELOG.md for a full list of changes.

LinuxSecurity.com: Update to ansible 2.4.1.0 with various bugfixes. See https://github.com/ansible/ansible/blob/stable-2.4/CHANGELOG.md for a full list of changes.

LinuxSecurity.com: It was discovered that libpam4j, a Java library wrapper for the integration of PAM did not call pam_acct_mgmt() during authentication. As such a user who has a valid password, but a deactivated or disabled account could still log in.

A tricky Netflix phishing scam users should be aware of
Marissa! Mayer! pulled! out! of! retirement! to! explain! Yahoo! hack! to! Senators!

LinuxSecurity.com: Marcin Noga discovered two vulnerabilities in LibreOffice, which could result in the execution of arbitrary code if a malformed PPT or DOC document is opened.

IoT is Insecure, Get Over It! Say Researchers

security update

security update

A Dark Web hacker is offering services to track anyone anywhere
Facebook and Instagram Suffer Worldwide Outage
Hundreds of Millions in Digital Currency Remains Frozen

Risk Level: Very Low.

Google Patches KRACK Vulnerability in Android
Multi-Sig Wallets worth $300M Mistakenly Blocked by User
15% off APC 11-Outlet Surge Protector with USB Charging Ports and SurgeArrest – Deal Alert
Privacy Clouds Form Over Mantistek Gaming Keyboard
Five tips for keeping your database secure

In general, these are the most basic and essential precautions any systems manager must consider. However, depending on the system you want to protect, there are some additional issues to take into account. The post Five tips for keeping your database secure appeared first on WeLiveSecurity

Tor patches flaw that could expose MacOS and Linux IP addresses

LinuxSecurity.com: Several vulnerabilities have been discovered in the chromium browser. CVE-2017-15398

LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.

Not on Facebook? News flash: Facebook still knows about you

LinuxSecurity.com: An update that solves 33 vulnerabilities and has two fixes An update that solves 33 vulnerabilities and has two fixes An update that solves 33 vulnerabilities and has two fixes is now available. is now available.

Give Facebook your nude pics to tackle revenge porn
Credential-stuffing defence tech aims to defuse password leaks
Where hackers haven’t directly influenced polls, they’ve undermined our faith in democracy
SSL spy boxes on your network getting you down? But wait, here’s an IETF draft to fix that
You know what’s coming next: FBI is upset it can’t get into Texas church gunman’s smartphone

security update

Risk Level: Very Low.

Chinese Keyboard Developer Spies on User Through Built-in Keylogger
KRACK whacked, media playback holes packed, other bugs go splat in Android patch pact
Don’t worry about those 40 Linux USB security holes. That’s not a typo
Texas Shooter’s Phone Encrypted

security update

Parity calamity! Wallet code bug destroys $280 MEEELLION in Ethereum
Hackers can conduct DoS attacks Using Flaw in Brother Printers
Assessing Weaknesses in Public Key Infrastructure
Mirai, Mirai, pwn them all, who’s the greatest botnet on the whole?
Send Your Nude Pics to Facebook to Prevent Revenge Porn
Marcher Android Banking Trojan Combines 3 Threats Into 1 Scheme