August 1, 2017
LinuxSecurity.com: A security issues were fixed in Bash.
August 1, 2017
LinuxSecurity.com: Tyler Bohan of Talos discovered that FreeRDP, a free implementation of the Remote Desktop Protocol (RDP), contained several vulnerabilities that allowed a malicious remote server or a man-in-the-middle to either cause a DoS by forcibly terminating the client, or execute
August 1, 2017
ShieldFS Can Detect Ransomware, Recover Files
July 31, 2017
LinuxSecurity.com: USN 3366-1 introduced a regression in OpenJDK 8.
July 31, 2017
Voting Machines Hacked with Ease at DEF CON
July 31, 2017
Android Banking Trojan Svpeng Adds Keylogger
July 31, 2017
Airborne Drones can be hijacked using $15 BBC’ Micro:bit
July 31, 2017
Risk Level: Very Low. Type: Trojan.
July 31, 2017
Risk Level: Very Low. Type: Trojan.
July 31, 2017
LinuxSecurity.com: Several security issues were fixed in Apache HTTP Server.
July 31, 2017
LinuxSecurity.com: Update to latest snapshot that contains fixes for the latest Talos discovered CVEs.
July 31, 2017
LinuxSecurity.com: Update to latest snapshot that contains fixes for the latest Talos discovered CVEs.
July 31, 2017
LinuxSecurity.com: Fix for multiple CVEs
July 31, 2017
This past May, Webroot surveyed more than 600 IT decision-makers at medium-sized companies (with between 100 and 499 employees) in the U.S., U.K., and Australia. The survey focused on how these small businesses perceived new threats facing their organizations. Were they prepared to manage fallout and recovery process after a cyberattack? Did they understand the […]
July 31, 2017
How Google Shrunk The Android Attack Surface
July 31, 2017
LinuxSecurity.com: Several security issues were fixed in NSS.
July 31, 2017
Risk Level: Very Low. Type: Trojan.
July 31, 2017
security update
July 30, 2017
security update
July 30, 2017
iOS VPN apps removed from Apple’s Chinese App Store
July 30, 2017
LinuxSecurity.com: Update to 5.2.24: fixes XSS vulnerability CVE-2017-11503.
July 29, 2017
LinuxSecurity.com: MinGW cross compiled librsvg 2.40.18 release, fixing CVE-2017-11464 (division- by-zero in the Gaussian blur code).
July 29, 2017
LinuxSecurity.com: Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5.5.57, which includes additional changes, such as performance improvements, bug fixes, new features, and possibly incompatible
July 29, 2017
LinuxSecurity.com: MinGW cross compiled librsvg 2.40.18 release, fixing CVE-2017-11464 (division- by-zero in the Gaussian blur code).
July 29, 2017
LinuxSecurity.com: In DSA 3918 Thunderbird was upgraded to the latest ESR series. This update upgrades Enigmail, the OpenPGP extention for Thunderbird, to version 1.9.8.1 to restore full compatibility.
July 29, 2017
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
July 29, 2017
Privacy Isn’t Dead. It’s More Popular Than Ever
July 29, 2017
‘SambaCry’ malware scum return with a Windows encore
July 29, 2017
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. Mac Backdoor Just Discovered, Active For Years Researchers have only recently discovered a previously undetectable backdoor […]
July 29, 2017
LinuxSecurity.com: New squashfs-tools packages are available for Slackware 14.2 and -current to fix security issues.
July 28, 2017
Bringing behavioral game theory to security defenses
July 28, 2017
Simple tips to keep your devices secure when you travel
July 28, 2017
LinuxSecurity.com: MinGW cross compiled librsvg 2.40.18 release, fixing CVE-2017-11464 (division- by-zero in the Gaussian blur code).
July 28, 2017
LinuxSecurity.com: An update that fixes 21 vulnerabilities is now available. An update that fixes 21 vulnerabilities is now available. An update that fixes 21 vulnerabilities is now available.
July 28, 2017
LinuxSecurity.com: An update that fixes 21 vulnerabilities is now available. An update that fixes 21 vulnerabilities is now available. An update that fixes 21 vulnerabilities is now available.
July 28, 2017
Are smartphones threatening the security of our IoT devices?
The number of IoT devices is set to surpass 20 billion by 2020. We take a look at how connected things threaten our security as cybercriminals exploit weaknesses in the smartphones that control them. The post Are smartphones threatening the security of our IoT devices? appeared first on WeLiveSecurity
July 28, 2017
BlackHat: FBI Talks Avalanche Botnet Takedown
July 28, 2017
Black Hat: Hacking the firmware, the next frontier
Trick the firmware and you have access to the whole system. Here at Black Hat, there are a lot of people doing just that. The post Black Hat: Hacking the firmware, the next frontier appeared first on WeLiveSecurity
July 28, 2017
ESET’s Anton Cherepanov picks up Pwnie for Best Backdoor
Anton Cherepanov, a malware researcher at ESET, has picked up a Pwnie Award for Best Backdoor at this year’s ceremony at Black Hat USA 2017 in Las Vegas. The post ESET’s Anton Cherepanov picks up Pwnie for Best Backdoor appeared first on WeLiveSecurity
July 28, 2017
11 arrested in Chinese Fireball malware investigation
July 28, 2017
Risk Level: Very Low. Type: Trojan.
July 28, 2017
ShadowBrokers Remain an Enigma
July 27, 2017
How DevOps and cloud will speed up security
July 27, 2017
Risk Level: Very Low.
July 27, 2017
Risk Level: Very Low. Type: Trojan.
July 27, 2017
Google Study Quantifies Ransomware Profits
July 27, 2017
CowerSnail Backdoor Targeting Windows Devices
July 27, 2017
APT Group Uses Catfish Technique To Ensnare Victims
July 27, 2017
LinuxSecurity.com: This update addresses the following vulnerabilities: * [CVE-2017-7018](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7018), [CVE-2017-7030](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7030), [CVE-2017-7034](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7034), [CVE-2017-7037](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7037),
July 27, 2017
LinuxSecurity.com: ## 2.8.25 (2017-07-17) * security #23507 [Security] validate empty passwords again (xabbuh) * bug #23526 [HttpFoundation] Set meta refresh time to 0 in RedirectResponse content (jnvsor) * bug #23540 Disable inlining deprecated services (alekitto) * bug #23468 [DI] Handle root namespace in service definitions (ro0NL) * bug #23256 [Security] Fix authentication.failure event
July 27, 2017
LinuxSecurity.com: – Upgrade to upstream v3.0.15 release. See upstream ChangeLog for details (in freeradius-doc subpackage). – Resolves: Bug#1471848 CVE-2017-10978 freeradius: Out-of-bounds read/write due to improper output buffer size check in make_secret() – Resolves: Bug#1471860 CVE-2017-10983 freeradius: Out-of-bounds read in
July 27, 2017
LinuxSecurity.com: This update fixes multiple security vulnerabilities (CVE-2017-7515, CVE-2017-9775, CVE-2017-9776, CVE-2017-9865).
July 27, 2017
LinuxSecurity.com: Rebuilt to new upstream version 2.7.1 fixes rhbz#1443071 and rhbz#1443129
July 27, 2017
LinuxSecurity.com: * Bump to 1.8.3 * Security fix for CVE-2017-8932 * add support for 28+bit OIDs in asn1
July 27, 2017
Homograph attacks: Don’t believe everything you see
A homograph attack is what happens when attackers register domains that are similar to the originals, with valid certificates. The post Homograph attacks: Don’t believe everything you see appeared first on WeLiveSecurity
July 27, 2017
Black Hat 2017 industrial hacking: The song remains the same
If industry frameworks are to inform and secure the critical infrastructure writ large, here at Black Hat there a lot of people punching holes in them, and in simple ways. The post Black Hat 2017 industrial hacking: The song remains the same appeared first on WeLiveSecurity
July 27, 2017
Black Hat 2017: Non-standard hacking platforms reign supreme
This year at Black Hat, tiny automated hacking platforms are everywhere, loaded with tasty purpose-built tools that can be used to break into your systems. The post Black Hat 2017: Non-standard hacking platforms reign supreme appeared first on WeLiveSecurity
July 27, 2017
Android Sypware Still Collects PII Despite Outcry
July 27, 2017
Risk Level: Very Low. Type: Trojan.
July 27, 2017
Vulnerable Radiation Monitoring Devices Won’t Be Patched
July 26, 2017
security update
July 26, 2017
security update
July 26, 2017
security update
July 26, 2017
Stop blaming users for security misses
July 26, 2017
LinuxSecurity.com: This release fixes a use-after-free in replaceChild() call.
July 26, 2017
LinuxSecurity.com: * CVE-2017-7718: cirrus: OOB read access issue (bz #1443443) * CVE-2016-9603: cirrus: heap buffer overflow via vnc connection (bz #1432040) * CVE-2017-7377: 9pfs: fix file descriptor leak (bz #1437872) * CVE-2017-7980: cirrus: OOB r/w access issues in bitblt (bz #1444372) * CVE-2017-8112: vmw_pvscsi: infinite loop in pvscsi_log2 (bz #1445622) * CVE-2017-8309: audio: host memory […]
July 26, 2017
LinuxSecurity.com: Multiple vulnerabilities were found in in qemu, a fast processor emulator: CVE-2017-9310
July 26, 2017
LinuxSecurity.com: Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in sandbox bypass, use of insecure cryptography, side channel attacks, information disclosure, the execution of arbitrary code, denial of service or
July 26, 2017
LinuxSecurity.com: Fix CVE-2017-11368 (remote triggerable assertion failure in krb5kdc)
July 26, 2017
LinuxSecurity.com: Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. Debian follows the extended support releases (ESR) of Thunderbird.
July 26, 2017
LinuxSecurity.com: This release fixes a use-after-free in replaceChild() call.
July 26, 2017