LinuxSecurity.com: An update that solves two vulnerabilities and has 5 fixes An update that solves two vulnerabilities and has 5 fixes An update that solves two vulnerabilities and has 5 fixes is now available. is now available.
June 2, 2017
“What are our cybersecurity protocols?” This question is one that has, undoubtedly, been top of mind for CTOs at numerous corporations and government agencies around the world in the wake of recent ransomware attacks. Given the hundreds of thousands of endpoint devices in more than 150 countries that were infected in the latest global attack, […]
June 1, 2017
Password manager “OneLogin” hacked; data stolen
June 1, 2017
WannaCry Development Errors Enable File Recovery
June 1, 2017
Secure XML Processing with JAXP on EAP 7
June 1, 2017
Blockchains are the new Linux, not the new internet
June 1, 2017
LinuxSecurity.com: Several vulnerabilities were discovered in wordpress, a web blogging tool. They would allow remote attackers to force password resets, and perform various cross-site scripting and cross-site request forgery attacks.
June 1, 2017
security update
June 1, 2017
security update
June 1, 2017
Risk Level: Very Low. Type: Trojan.
June 1, 2017
Risk Level: Very Low. Type: Trojan.
June 1, 2017
Smashing Security #023: Covfefe
May 31, 2017
security update
May 31, 2017
security update
May 31, 2017
security update
May 31, 2017
LinuxSecurity.com: A potential security flaw is found on LXDE products, which create socket under /tmp with some predictable names, which may leads to DOS. The security flow on lxterminal is now assigned as CVE-2016-10369. Some other components also had similar issues. These new rpms should fix these issues. At least relogin is required to make […]
May 31, 2017
LinuxSecurity.com: A potential security flaw is found on LXDE products, which create socket under /tmp with some predictable names, which may leads to DOS. The security flow on lxterminal is now assigned as CVE-2016-10369. Some other components also had similar issues. These new rpms should fix these issues. At least relogin is required to make […]
May 31, 2017
LinuxSecurity.com: A potential security flaw is found on LXDE products, which create socket under /tmp with some predictable names, which may leads to DOS. The security flow on lxterminal is now assigned as CVE-2016-10369. Some other components also had similar issues. These new rpms should fix these issues. At least relogin is required to make […]
May 31, 2017
LinuxSecurity.com: Karsten Heymann discovered that the OpenLDAP directory server can be crashed by performing a paged search with a page size of 0, resulting in denial of service. This vulnerability is limited to the MDB storage backend.
May 31, 2017
LinuxSecurity.com: New sudo packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.
May 31, 2017
LinuxSecurity.com: An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes is now available. is now available.
May 31, 2017
LinuxSecurity.com: An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes is now available. is now available.
May 31, 2017
LinuxSecurity.com: Sudo could be made to overwrite files as the administrator.
May 31, 2017
Shadow Brokers to Start Monthly Paid Dump Service
May 31, 2017
Patches Available for Linux Sudo Vulnerability
May 31, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
May 31, 2017
ESET releases decryptor for AESNI ransomware variants, including XData
ESET has released a decryptor for AESNI ransomware variants, including XData. Victims who still have encrypted files can now download it from ESET’s utilities page. The post ESET releases decryptor for AESNI ransomware variants, including XData appeared first on WeLiveSecurity
May 31, 2017
What is VPN and how does it work?
Keen to understand what a virtual private network is? You’ve come to the right place. The post What is VPN and how does it work? appeared first on WeLiveSecurity
May 31, 2017
82% of Databases Left Unencrypted in Public Cloud
May 31, 2017
LinuxSecurity.com: An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes is now available. is now available.
May 31, 2017
LinuxSecurity.com: An update for sudo is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 31, 2017
LinuxSecurity.com: An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 31, 2017
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
May 31, 2017
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. Samsung’s Latest Iris Scanners are Easily Fooled Recently, ethical hackers have been able to bypass Samsung’s […]
May 31, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
May 31, 2017
security update
May 30, 2017
FreeRADIUS Update Resolves Authentication Bypass
May 30, 2017
LinuxSecurity.com: It was discovered that pattern-based ACLs in the Mosquitto MQTT broker could be bypassed. For the stable distribution (jessie), this problem has been fixed in
May 30, 2017
LinuxSecurity.com: A security fix for a systemd-resolved crash on a crafted DNS packet. Relevant only to systemd-resolved users (not enabled by default). No need to reboot or logout.
May 30, 2017
LinuxSecurity.com: This update addresses the following vulnerabilities: * [CVE-2017-2496](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2496), [CVE-2017-2539](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2539), [CVE-2017-2510](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2510) Additional fixes: * Fix URL shown in the title of beforeunload dialogs. * Focus
May 30, 2017
LinuxSecurity.com: Fix for CVE-2016-8728 CVE-2016-8729 —- Rebuild with new jbig2dec
May 30, 2017
LinuxSecurity.com: An issue in `git-shell` could allow remote users to run an interactive pager. From the [update announcement](https://public- inbox.org/git/xmqq8tm5ziat.fsf@gitster.mtv.corp.google.com/): … fix a recently disclosed problem with “git shell”, which may allow a user who comes over SSH to run an interactive pager by causing it to spawn “git
May 30, 2017
Risk Level: Very Low. Type: Trojan.
May 30, 2017
Bug Lets Chrome Stealthily Record Audio and Video
May 30, 2017
ShadowBrokers Put Price on Monthly Zero Day Leaks
May 30, 2017
LinuxSecurity.com: strongSwan could be made to crash or hang if it received specially crafted network traffic.
May 30, 2017
LinuxSecurity.com: Several security issues were fixed in WebKitGTK+.
May 30, 2017
LinuxSecurity.com: Several security issues were fixed in ImageMagick.
May 30, 2017
LinuxSecurity.com: USN-3212-1 caused a regression in LibTIFF.
May 30, 2017
LinuxSecurity.com: Two denial of service vulnerabilities were identified in strongSwan, an IKE/IPsec suite, using Google’s OSS-Fuzz fuzzing project. CVE-2017-9022
May 30, 2017
LinuxSecurity.com: An update for nss is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 30, 2017
LinuxSecurity.com: An update for nss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 30, 2017
security update
May 28, 2017
security update
May 26, 2017
security update
May 26, 2017
Risk Level: Very Low. Type: Trojan.
May 26, 2017
Risk Level: Very Low. Type: Trojan.
May 26, 2017
Mark Dowd on Exploit Mitigation Development
May 26, 2017
Pacemaker Ecosystem Fails its Cybersecurity Checkup
May 26, 2017
Threatpost News Wrap, May 26, 2017
May 26, 2017
Rash Of Phishing Attacks Use HTTPS To Con Victims
May 26, 2017
3 types of employees that can cause a data breach
When it comes to cybersecurity, what type of employee is most likely to cause a data breach? And how can companies protect themselves? The post 3 types of employees that can cause a data breach appeared first on WeLiveSecurity
May 26, 2017