June 19, 2017
Republican Data Broker Exposes 198M Voter Records
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
June 19, 2017
Industroyer: ICS were developed decades ago with no security in mind
Senior ESET malware researcher Robert Lipovsky discusses Industroyer, the biggest threat to Industrial Control Systems (ICS) since Stuxnet. The post Industroyer: ICS were developed decades ago with no security in mind appeared first on WeLiveSecurity
June 19, 2017
Industroyer poses the highest risk for critical infratstructure since Stuxnet
ESET researchers have been analyzing samples of dangerous malware – detected by ESET as Win32/Industroyer, and named Industroyer – which is capable of performing an attack on power supply infrastructure. Robert Lipovsky, a researcher at ESET, tells us more. The post Industroyer poses the highest risk for critical infratstructure since Stuxnet appeared first on WeLiveSecurity
June 19, 2017
Risk Level: Very Low. Type: Trojan.
June 19, 2017
security update
June 18, 2017
security update
June 17, 2017
Erebus Ransomware Targets Linux Servers
June 17, 2017
Hackers can exploit E-Cigarettes to hack computers
June 16, 2017
security update
June 16, 2017
security update
June 16, 2017
LinuxSecurity.com: It was discovered that RT::Authen::ExternalAuth, an external authentication module for Request Tracker, is vulnerable to timing side-channel attacks for user passwords. Only ExternalAuth in DBI (database) mode is vulnerable.
June 16, 2017
LinuxSecurity.com: Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following problems:
June 16, 2017
LinuxSecurity.com: An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata is now available. is now available.
June 16, 2017
LinuxSecurity.com: libmwaw could be made to crash or run programs as your login if it opened a specially crafted file.
June 16, 2017
LinuxSecurity.com: zziplib could be made to crash or run programs as your login if it opened a specially crafted file.
June 16, 2017
Someone Failed to Contain WannaCry
June 16, 2017
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. New Mobile Phishing Attacks are Using URL Padding In an attempt to trick mobile browsing users […]
June 16, 2017
Threatpost News Wrap, June 16, 2017
June 16, 2017
Seven years after Stuxnet: Industrial systems security once again in the spotlight
Seven years after Stuxnet first came to light, industrial systems security once again in the spotlight, reports ESET’s Robert Lipovsky. The post Seven years after Stuxnet: Industrial systems security once again in the spotlight appeared first on WeLiveSecurity
June 16, 2017
Would you trust your smartphone with your life?
Smartphone security is, of course, essential these days, but how confident are you in your device’s ability to help keep you safe and secure? The post Would you trust your smartphone with your life? appeared first on WeLiveSecurity
June 16, 2017
LinuxSecurity.com: – new upstream update (54.0)
June 16, 2017
The 2 cloud security myths that must die
June 16, 2017
LinuxSecurity.com: Update to version 1.8.2. The upstream release notes: https://mail.gnome.org/archives/ftp-release-list/2017-June/msg00015.html
June 16, 2017
LinuxSecurity.com: **Rebase to 10.1.24** Plugin oqgraph enabled Plugin jemalloc enabled Sphinx engine enabled Build dependecies Bison and Libarchive added, others corrected Disabling Mroonga engine for i686 architecture, as it is not supported by MariaDB **Removed patches: (fixed by upstream)** Patch5: %{pkgnamepatch}-file-contents.patch Patch14: %{pkgnamepatch}-example-config-
June 16, 2017
security update
June 15, 2017
Nigerian BEC Scams Hit 500 Companies in 50 Countries
June 15, 2017
Webroot SecureAnywhere® Business solutions will now give admins more ease of control within the Global Site Manager (GSM). From web overrides to Mac- and PC-specific enhancements, we’re delivering new features you asked for to ensure the best multi-vector protection possible. Webroot protects endpoints against myriad threats at multiple attack stages spanning a variety of attack […]
June 15, 2017
Disney, Depp and the cyber supply chain risk management problem
Multimillion dollar movies and TV shows are increasingly being targeted by cybercriminals. ESET’s Stephen Cobb investigates the cyber supply chain risk management problem and explains what to do about it. The post Disney, Depp and the cyber supply chain risk management problem appeared first on WeLiveSecurity
June 15, 2017
The 15 worst data security breaches of the 21st Century
June 15, 2017
DevSecOps is Not a Security Panacea
June 15, 2017
Children still at risk from inappropriate online content
A new survey published by the NSPCC suggests children across the UK are still at risk of accessing inappropriate and potentially harmful content online, despite increased calls for heightened security. The post Children still at risk from inappropriate online content appeared first on WeLiveSecurity
June 15, 2017
LinuxSecurity.com: Firefox could be made to crash or run programs as your login if it opened a malicious website.
June 15, 2017
LinuxSecurity.com: Gajim 0.16.8 * Fix rejoining MUCs after connection loss * Fix Groupchat invites * Fix encoding problems with newer GnuPG versions * Fix old messages randomly reappearing in the chat window * Fix some problems with IBB filetransfer * Make XEP-0146 Commands opt-in * Improve sending messages to your own resources * Improve reliability […]
June 15, 2017
LinuxSecurity.com: FIx for CVE-2017-8366
June 15, 2017
LinuxSecurity.com: Gajim 0.16.8 * Fix rejoining MUCs after connection loss * Fix Groupchat invites * Fix encoding problems with newer GnuPG versions * Fix old messages randomly reappearing in the chat window * Fix some problems with IBB filetransfer * Make XEP-0146 Commands opt-in * Improve sending messages to your own resources * Improve reliability […]
June 15, 2017
LinuxSecurity.com: FIx for CVE-2017-8366
June 15, 2017
LinuxSecurity.com: fixes buffer overflows for flac and pcm
June 15, 2017
LinuxSecurity.com: This update addresses the following vulnerabilities: * [CVE-2017-2496](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2496), [CVE-2017-2539](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2539), [CVE-2017-2510](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2510) Additional fixes: * Fix URL shown in the title of beforeunload dialogs. * Focus
June 15, 2017
LinuxSecurity.com: CVE-2017-7511 poppler: Null pointer dereference in pdfunite via crafted documents
June 15, 2017
LinuxSecurity.com: New mozilla-firefox packages are available for Slackware 14.2, and -current to fix security issues.
June 15, 2017
LinuxSecurity.com: New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.
June 15, 2017
LinuxSecurity.com: Update to a bugfix release of yara.
June 14, 2017
security update
June 14, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
June 14, 2017
Mozilla Fixes 32 Vulnerabilities in Firefox 54
June 14, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
June 14, 2017
LinuxSecurity.com: Multiple security vulnerabilities have been found in oSIP, a library implementing the Session Initiation Protocol, which might result in denial of service through malformed SIP messages.
June 14, 2017
Abuse of Apple Search Ads Feature Leading to Fraud
June 14, 2017
Criminals snatching iPhones to scam users twice
June 14, 2017
Post-WannaCry, 5.5 Million Devices Still Expose SMB Port
June 14, 2017
Rare XP Patches Fix Three Remaining Leaked NSA Exploits
June 14, 2017
Employees have “low cyber IQ” despite high corporate confidence
Businesses are confident that they have sufficient cybersecurity systems in place to protect them, but in reality the weak link may be their employees, who lack basic skills and knowledge. The post Employees have “low cyber IQ” despite high corporate confidence appeared first on WeLiveSecurity
June 14, 2017
Raspberry Pi sours thanks to mining malware
June 14, 2017
LinuxSecurity.com: It was discovered that a side channel attack in the EdDSA session key handling in Libgcrypt may result in information disclosure. For the stable distribution (jessie), this problem has been fixed in
June 14, 2017
security update
June 14, 2017
Risk Level: Very Low. Type: Trojan.
June 14, 2017
Risk Level: Very Low. Type: Trojan.
June 14, 2017
Risk Level: Very Low. Type: Trojan.
June 14, 2017
security update
June 13, 2017
Mazda cars hacked with just a USB
June 13, 2017
LinuxSecurity.com: fixes buffer overflows for flac and pcm
June 13, 2017
LinuxSecurity.com: Security fix for CVE-2017-5645
June 13, 2017