Menu

Category Archives: Security

Articles about security

LinuxSecurity.com: Several security issues were fixed in Liblouis.

Crypto-busters reverse nearly 320 MEELLION hashed passwords

LinuxSecurity.com: An update that solves 9 vulnerabilities and has two fixes An update that solves 9 vulnerabilities and has two fixes An update that solves 9 vulnerabilities and has two fixes is now available. is now available.

security update

Asterisk RTP bug worse than first thought: think intercepted streams

LinuxSecurity.com: This update fixes CVE-2017-12982.

LinuxSecurity.com: Qemu: usb: ohci: infinite loop due to incorrect return value [CVE-2017-9330] (#1457698) Qemu: nbd: segmentation fault due to client non-negotiation [CVE-2017-9524] (#1460173) Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [CVE-2017-10664] (#1466466) Qemu: exec: oob access during dma operation [CVE-2017-11334] (#1471640) revised full fix for XSA-226 (regressed

LinuxSecurity.com: This update fixes CVE-2017-12982.

Stolen 6M Celebrities data from Instagram sold on Dark Web

LinuxSecurity.com: Libidn2 2.0.4 (released 2017-08-30) integer overflow in bidi.c/_isBidi() * Fix integer overflow in puny_decode.c/decode_digit() * Improve docs * Fix idna_free() to idn_free() * Update fuzzer corpora

security update

security update

security update

LinuxSecurity.com: **Version 2.2.5** – 2017-08-30 * **Security** – Double-free in gdImagePngPtr(). **CVE-2017-6362** – Buffer over-read into uninitialized memory. **CVE-2017-7890** * **Fixed** – Fix #109: XBM reading fails with printed error – Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable – Fix #357: 2.2.4: Segfault in test suite – Fix #386:

LinuxSecurity.com: Libidn2 2.0.4 (released 2017-08-30) integer overflow in bidi.c/_isBidi() * Fix integer overflow in puny_decode.c/decode_digit() * Improve docs * Fix idna_free() to idn_free() * Update fuzzer corpora

LinuxSecurity.com: – Update to 2.6.0 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.6.0-2.1.9-and-1.3.21-released Security Advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security- advisory-2017-02

LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available.

LinuxSecurity.com: An update that solves three vulnerabilities and has 5 fixes An update that solves three vulnerabilities and has 5 fixes An update that solves three vulnerabilities and has 5 fixes is now available. is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.

DailyStormer comes back with Albanian domain; gets booted off

From streaming entertainment to social media to our online bank accounts and software, we are inundated every day with the need to create and remember new passwords. In fact, one study revealed that Americans have an average of 130 online accounts registered to a single email address. And what are the chances that those 130 […]

‘HoeflerText’ Popups Target Browsers With RAT and Locky Ransomware
US cops can’t keep license plate data scans secret without reason
Massive Locky Ransomware Strain Hits US with Over 23 Million Emails
Massive Locky ransomware campaign sends out 23 million emails in 24 hours
Hacker Charged for Crashing Businesses Using Millions of Mirai botnet
‘Independent’ gov law reviewer wants users preemptively identified before they’re ‘allowed’ to use encryption
Threatpost News Wrap, September 1, 2017
No Fix Planned For LabVIEW Bug, Says National Instruments
US Government Site Was Hosting Ransomware
Insecure Office 365 setups could be a ticking time bomb for your business
Blonde girlfriend’s passport let dark-haired man fly from London to Germany
Snoops ‘n’ snitches auditor IPCO gets up and running
China’s cybersecurity law grants government ‘unprecedented’ control over foreign tech
Connect at mine free Wi-Fi! I would knew what I is do! I is cafe boss!
WikiLeaks suffer defacement at the hands of OurMine group

WikiLeaks’ whistleblowing website suffered an attack from the group known as OurMine on Thursday The post WikiLeaks suffer defacement at the hands of OurMine group appeared first on WeLiveSecurity

IRS-Themed Ransomware Using Old-School Tactics Over the past week, researchers have discovered a new ransomware variant that attempts to impersonate both the IRS and the FBI, similar to the FBI lockscreen malware that was popular several years ago. By tricking the victim into opening a link to a fake FBI questionnaire, the ransomware is downloaded […]

Asterisk bugs make a right mess of RTP
AT&T customers with Arris modems at risk, claim infosec bods
Robocall scumbags already target Hurricane Harvey victims
Malware writer offers free trojan to hackers … with one small drawback
Instagram hacked; data of top celebrities stolen and traded
Session Hijacking Bug Exposed GitLab Users Private Tokens
When uploading comments to the FCC, you can now include malware
Bugs in Arris Modems Distributed by AT&T Vulnerable to Trivial Attacks
Angelfire: CIA’ Undetectable Implants Infect Windows Boot Sector
Polyinstantiating /tmp and /var/tmp directories
FDA Recalls 465K Pacemakers Tied to MedSec Research
WikiLeaks official website hacked by OurMine hacking group
Instagram confirms hack against high-profile users’ account info
Reflected XSS Bug Patched in Popular WooCommerce WordPress Plugin
UK council fined £70k for leaving vulnerable people’s data open to world+dog
Google removes 300 Android apps following DDoS attack

Google has been forced to remove almost 300 apps from its Play Store after learning that apps were being hijacked for DDoS attacks. The post Google removes 300 Android apps following DDoS attack appeared first on WeLiveSecurity

Patchy PCI compliance putting consumer credit card data at risk
Mystery surrounds malware attack that forced German state parliament offline
CyberRehab’s mission? To clean up the internet, one ASN block at a time
No razzle-dazzle here! Hackers target Zazzle with run-of-the-mill brute-force attack
More than 700 million email addresses leaked in huge data breach

Huge data breach sees more than 700 million email addresses and passwords leaked publicly thanks to a misconfigured spambot, dubbed ‘Onliner’. The post More than 700 million email addresses leaked in huge data breach appeared first on WeLiveSecurity

ARM’s embedded TLS library fixes man-in-the-middle fiddle
Instagram’s leaky API exposed celebrities’ contact details
Siemens patches one security vuln, leaves folks to block second
465k Pacemakers vulnerable; users must visit doctors for fix

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

US government: We can jail you indefinitely for not decrypting your data
Intel Confirms Its Much-Loathed ME Feature Has A Kill Switch

security update

Oh, ambassador! You literally are spoiling us: Super-stealthy spyware hits Euro embassy PCs
Turla APT Used WhiteBear Espionage Tools Against Defense Industry, Embassies
New Locky Variant ‘IKARUSdilapidated’ Strikes Again
Electronics retail giant CeX hacked; data of 2 million customers stolen

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Siemens Fixes Session Hijacking Bug in LOGO!, Warns of Man-in-the-Middle Attacks
‘Open and accessible’ spambot server leaks 711 million records
Spambot Contains ‘Mind-Boggling’ Amount of Email, SMTP Credentials
Hidden Kill Switch Identified in Controversial Intel ME controller chip
7 Things to Know About Today’s DDoS Attacks
New Ransomware Email Scam Using FBI and IRS as Bait
711 MILLION email accounts weaponized by Onliner for spam campaigns
New ESET research uncovers Gazer, the stealthy backdoor that spies on embassies