Menu

Category Archives: Security

Articles about security

LinuxSecurity.com: Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. Debian follows the extended support releases (ESR) of Thunderbird.

LinuxSecurity.com: This release fixes a use-after-free in replaceChild() call.

EVERY app offered by alternative Android app market redirected to malware
FruitFly Mac malware – FBI investigating hundreds of infections, say researchers
6 billion records hacked in 2017 so far; ransomware victims paid $25 million
'Jump boxes' and SAWs improve security, if you set them up right

A jump box is a secure computer that all admins first connect to before launching any administrative task or use as an origination point to connect to other servers or untrusted environments. Over the last few years, with malicious hackers and malware infesting nearly every enterprise network at will, security admins have been looking for […]

Post Quantum Cryptography
Windows SMB Zero Day to Be Disclosed During DEF CON
Adobe to Completely Disable Flash Player by 2020
Is it safe to store corporate information on Google Drive (or similar services)?

When it comes to protecting corporate information, some doubt whether or not the cloud is the best option. We look at all the security services available. The post Is it safe to store corporate information on Google Drive (or similar services)? appeared first on WeLiveSecurity

Linux file manager flaw leaves security “Bad Taste”
Pathetic patching leaves over 70,000 Memcached servers still up for grabs
A Clever New Tool Shuts Down Ransomware Before It’s Too Late
Black Hat 2017: Hacking the physical world

Cameron Camp, in attendance at this year’s Black Hat in Las Vegas, takes a closer look at attacks against physical infrastructure. The post Black Hat 2017: Hacking the physical world appeared first on WeLiveSecurity

Relax: Microsoft is NOT Killing Paint App

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

Academia’s Role in Security Skills Gap Examined
Watch Security Researcher As She Hacks ATM by Drilling a Hole
Novel Attack Tricks Servers to Cache, Expose Personal Data
FBI’s Surveillance Van Sold on eBay for US $18,700

LinuxSecurity.com: This update includes the latest stable release of _Apache Subversion_, version **1.9.6**. ### User-visible changes: #### Client-side bugfixes: * cp/mv: improve error message when target is an unversioned dir * merge: reduce memory usage with large amounts of mergeinfo ([issue 4667](https://issues.apache.org/jira/browse/SVN-4667)) #### Server-side

Social engineering and ransomware

Social engineering may play a vital part in persuading a victim to open a malicious executable or website, says ESET’s David Harley on social engineering and ransomware. The post Social engineering and ransomware appeared first on WeLiveSecurity

Black Hat USA 2017 Preview
Malware found lurking behind every app at alternative Android store

ESET researchers have discovered an Android app store distributing malware on a mass scale. The post Malware found lurking behind every app at alternative Android store appeared first on WeLiveSecurity

Writing Windows or Linux apps? Microsoft just launched a cloud-powered bug hunter to find the flaws
£20 million cybersecurity programme to train teenagers set to launch in UK

A new £20 million cybersecurity programme to train teenagers will be launched in the UK this autumn, as part of the government’s plans to address the skills gap. The post £20 million cybersecurity programme to train teenagers set to launch in UK appeared first on WeLiveSecurity

Spiderman pleads guilty to knocking 900,000 German broadband routers offline
18-year-old arrested after reporting dumb bug in public transport e-ticket system
Variant of Surveillance Malware Fruitfly Targeting Mac Users
A massive trove of highly critical data of Swedish citizens leaked online

LinuxSecurity.com: Fix CVE-2017-11368 (remote triggerable assertion failure in krb5kdc)

LinuxSecurity.com: librsvg 2.40.18 release, fixing CVE-2017-11464 (division-by-zero in the Gaussian blur code). For details, see https://mail.gnome.org/archives/ftp-release- list/2017-July/msg00078.html

security update

Casino Becomes Victim of Data Hack—courtesy Fish Tank

Type: Vulnerability. Adobe Flash Player is prone to multiple remote code-execution vulnerabilities; fixes are available.

Hacker Admits to Mirai Attack Against Deutsche Telekom
Veritaseum Hack: Another Ethereum ICO Hacked; Loses $8.4 Million
A US Firm Will Install Microchips in Employees
macOS Fruitfly Backdoor Analysis Renders New Spying Capabilities
70,000 Memcached Servers Can Be Hacked Using Eight-Month-Old Flaws

LinuxSecurity.com: Heimdal could allow unintended access to network services.

88% feel vulnerable to data threats

Thales Group has announced the results of its 2017 data threat report, showing that the number of global data breaches has increased from 2016. The post 88% feel vulnerable to data threats appeared first on WeLiveSecurity

Going to Black Hat? Bring your (marketing) wallet

This year at Black Hat, it will be incumbent upon newer vendors to make sensational claims to gain market share from established vendor, says Cameron Camp. The post Going to Black Hat? Bring your (marketing) wallet appeared first on WeLiveSecurity

LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.

Risk Level: Very Low. Type: Trojan.

Online criminals clone UK university’s website to phish for cash

LinuxSecurity.com: A heap-based buffer underflow flaw was discovered in catdoc, a text extractor for MS-Office files, which may lead to denial of service (application crash) or have unspecified other impact, if a specially crafted file is processed.

security update

Google’ ‘Play Protect’ Ensures Maximum Security For Android Devices

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

LinuxSecurity.com: It was discovered that Atril, the MATE document viewer, made insecure use of tar when opening tar comic book archives (CBT). Opening a malicious CBT archive could result in the execution of arbitrary code. This update disables the CBT format entirely.

Tor Public Bug Bounty Program: Earn Up To $4000
Watch a Homemade Robot Crack a Safe in Just 15 Minutes
Scammers demand Bitcoin in DDoS extortion scheme, deliver empty threats
Fake Adobe Flash Player App Infects Android Devices with Banking Malware

security update

LinuxSecurity.com: Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.

LinuxSecurity.com: New seamonkey packages are available for Slackware 14.2 and -current to fix security issues.

WikiLeaks Release Documents on How CIA Uses 5 Different Malware

LinuxSecurity.com: Update to upstream version 1.3.1.

LinuxSecurity.com: New upstream release: 2.4.5

LinuxSecurity.com: An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is now available. now available.

LinuxSecurity.com: An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes is now available. is now available.

Trickbot Malware Now Targets US Banks
Motivation Mystery Behind WannaCry, ExPetr
Your Old Phone Number Can Be Used To Hack Facebook Account
ESET celebrates 30 years of innovation in IT security by giving away $30,000 to nonprofits

ESET are giving away a total of $30,000 in prize money to nonprofits to celebrate 30 years of continuous technological innovation in IT security. The post ESET celebrates 30 years of innovation in IT security by giving away $30,000 to nonprofits appeared first on WeLiveSecurity

Best of Black Hat: 20 Epic Talks in 20 Years
Russian man who helped create notorious malware sentenced to 5 years

LinuxSecurity.com: An update that solves one vulnerability and has two fixes An update that solves one vulnerability and has two fixes An update that solves one vulnerability and has two fixes is now available. is now available.

LinuxSecurity.com: An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes is now available. is now available.

LinuxSecurity.com: An update that solves one vulnerability and has four fixes An update that solves one vulnerability and has four fixes An update that solves one vulnerability and has four fixes is now available. is now available.

LinuxSecurity.com: An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is now available. now available.

The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. Malware Lurking in Game of Thrones Torrents Viewers hoping to catch an illegal copy of the […]

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Beware: New Bank of America Phishing Scam Stealing Card Data

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

Remotely Controllable Hoverboards Latest Target of Hackers
Apple Patches BroadPwn Bug in iOS 10.3.3

LinuxSecurity.com: This is an update fixing CVE-2017-6542.

LinuxSecurity.com: Expat could be made to hang if it received specially crafted input.

Dark Web’ AlphaBay and Hansa Marketplaces Seized by Feds

The world’s leading information security events, Black Hat USA and DEF CON, are happening next week in Las Vegas. In its 20th year, Black Hat will bring over 15,000 IT and security pros together to discuss the latest information security research, development and trends. Among these attendees, you will find academics, researchers, as well as […]

US, European Law Enforcement Shutter Massive AlphaBay Market
Hackers Steal $32 Million in Ethereum From 3 Multisig Wallets
Segway MiniPro patched to stop hackers hijacking remote control from hoverboard riders
Hacker steals $30M worth of Ethereum by abusing Parity wallet flaw
Stantinko: A massive adware campaign operating covertly since 2012

Since the beginning of 2017, ESET has been conducting an investigation into a complex threat mainly targeting Russia and Ukraine. Stantinko has stood out. The post Stantinko: A massive adware campaign operating covertly since 2012 appeared first on WeLiveSecurity

Tor Project Opens Bounty Program To All Researchers