March 10, 2017
security update
March 10, 2017
security update
March 9, 2017
The convenience of having some kind of internet connection on more and more of the devices we use each day is undeniable. However, without proper security vetting, this convenience may come at a hefty price. In the past year alone, we’ve seen millions of routers, DVRs, IP cameras, cars, and more get hacked and either […]
March 9, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
March 9, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
March 9, 2017
Attacks Heating Up Against Apache Struts 2 Vulnerability
March 9, 2017
Consumer Reports launches new privacy and data security standard
The US-based nonprofit organization Consumer Reports has come up with a new standard that aims to boost consumer confidence in privacy and data security. The post Consumer Reports launches new privacy and data security standard appeared first on WeLiveSecurity
March 9, 2017
Instagram phishing apps pulled from Google Play
March 9, 2017
Brit ISP TalkTalk blocks control tool TeamViewer
March 9, 2017
Apache Struts bug is under attack, patch now
March 9, 2017
New Instagram credential stealers discovered on Google Play
ESET researchers discovered 13 new Instagram credential stealers on Google play and looked into the motivations behind their fraudulent schemes. The post New Instagram credential stealers discovered on Google Play appeared first on WeLiveSecurity
March 9, 2017
Royal Navy’s newest ship formally named in Glasgow yard
March 9, 2017
Smashing Security #011: WikiLeaks and the CIA
March 9, 2017
Bots: Biggest player on the cybercrime block
March 9, 2017
Ways in which to plug the infosec talent gap
ESET’s Lysa Myers looks at the shortage of qualified information security talent to fill positions, discussing ways in which to plug the infosec talent gap. The post Ways in which to plug the infosec talent gap appeared first on WeLiveSecurity
March 9, 2017
In honor of International Women’s Day, we hosted our quarterly Women of Webroot meeting this afternoon at our World Headquarters in Broomfield. Women of Webroot brings together women from all parts of our business to celebrate wins and provide support for issues women in tech may face. Although there are more women in technology-related positions […]
March 9, 2017
Risk Level: Very Low. Type: Trojan.
March 9, 2017
Senator Demands Answers About CloudPets Breach
March 8, 2017
Good Weather App radio interview with Alexis Dorais-Joncas and Marc Saltzman
A full radio interview with ESET’s Alexis Dorais-Joncas and radio and TV personality Marc Saltzman – on NewsTalk 1010 – talking about a malicious weather app that was found on Google Play. The post Good Weather App radio interview with Alexis Dorais-Joncas and Marc Saltzman appeared first on WeLiveSecurity
March 8, 2017
Verifone downplays impact of recent breach
March 8, 2017
Comey Talks Strong Crypto, Silent on WikiLeaks
March 8, 2017
Aggressive ad-displaying Google Play app tricks users into leaving high ratings
ESET researchers have observed an increased number of apps on Google Play using social engineering techniques to boost their ratings, ranging from legitimate apps, through adware to malware. The post Aggressive ad-displaying Google Play app tricks users into leaving high ratings appeared first on WeLiveSecurity
March 8, 2017
LinuxSecurity.com: Fixed CVE 2017-2590: freeipa: ipa: Insufficient permission check for ca-del, ca-disable and ca-enable commands [fedora-all]
March 8, 2017
LinuxSecurity.com: * [7.x-1.21](https://www.drupal.org/project/metatag/releases/7.x-1.21) *[Moderately Critical – Information disclosure – SA-CONTRIB-2017-019](https://www.drupal.org/node/2852937)
March 8, 2017
LinuxSecurity.com: Security fix for CVE-2017-5884, CVE-2017-5885
March 8, 2017
LinuxSecurity.com: This is a new upstream feature and security release. Improvements include:bypass; pre-filter — fast packet keywords; TLS improvements; ICS protocoladditions: DNP3 CIP/ENIP; SHA1/SHA256 for file matching, logging & extraction;NIC offloading disabled by default; unix socket enabled by default; and AppLayer stats. Documentation: http://suricata.readthedocs.io/en/suricata-3.2/
March 8, 2017
LinuxSecurity.com: An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary and Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…]
March 8, 2017
LinuxSecurity.com: * [7.x-1.21](https://www.drupal.org/project/metatag/releases/7.x-1.21) *[Moderately Critical – Information disclosure – SA-CONTRIB-2017-019](https://www.drupal.org/node/2852937)
March 8, 2017
LinuxSecurity.com: cirrus_bitblt_cputovideo does not check if memory region is safe [XSA-209,CVE-2017-2620] (#1425420)
March 8, 2017
LinuxSecurity.com: – Update to 1.0.4 Release notes: http://www.cacti.net/release_notes_1_0_0.phphttp://www.cacti.net/release_notes_1_0_1.phphttp://www.cacti.net/release_notes_1_0_2.phphttp://www.cacti.net/release_notes_1_0_3.phphttp://www.cacti.net/release_notes_1_0_4.php
March 8, 2017
LinuxSecurity.com: Security fix for CVE-2017-5884, CVE-2017-5885
March 8, 2017
LinuxSecurity.com: This is a new upstream feature and security release. Improvements include:bypass; pre-filter — fast packet keywords; TLS improvements; ICS protocoladditions: DNP3 CIP/ENIP; SHA1/SHA256 for file matching, logging & extraction;NIC offloading disabled by default; unix socket enabled by default; and AppLayer stats. Documentation: http://suricata.readthedocs.io/en/suricata-3.2/
March 8, 2017
Top tip: Unplug your WD My Cloud boxen – now
March 8, 2017
LinuxSecurity.com: Security Report Summary
March 8, 2017
Dahua video kit left user credentials in plain sight
March 8, 2017
Is the CIA’s Weeping Angel spying on TV viewers?
March 8, 2017
LinuxSecurity.com: New mozilla-thunderbird packages are available for Slackware 14.1, 14.2, and -current to fix security issues. [More Info…]
March 8, 2017
security update
March 8, 2017
As if the job market isn’t hard enough to break into, rising seniors and recent college graduates are employment scam targets. In January, the FBI issued a warning that employment scams targeting college students are still alive and well. Employment Scams – A Public Service Announcement According to the FBI, scammers advertise phony job opportunities […]
March 7, 2017
WordPress 4.7.3 Patches Half-Dozen Vulnerabilities
March 7, 2017
Dahua Patching Backdoor in DVRs, IP Cameras
March 7, 2017
LinuxSecurity.com: An update for ansible and openshift-ansible is now available for Red Hat OpenShift Container Platform 3.2, Red Hat OpenShift Container Platform 3.3, and Red Hat OpenShift Container Platform 3.4. [More…]
March 7, 2017
WordPress fixes XSS, CSRF flaws in latest core update
March 7, 2017
Google Increases its Bug Bounty Program Reward Money
March 7, 2017
The Border Patrol can take your password. Now what?
March 7, 2017
4 strategies to root out your security risks
You’ll never reduce your security risk if you can’t identify and mitigate the root causes of those vulnerabilities. It isn’t enough to have a list of malware programs that your antimalware has detected. You need to to determine how viruses and hackers have penetrated your environment in the past. In the vast majority of organizations, […]
March 7, 2017
LinuxSecurity.com: Security fix for CVE-2017-6060 CVE-2017-5896 —- Add comment with explanationof disabled debuginfo
March 7, 2017
LinuxSecurity.com: – Update to 1.0.4 Release notes: http://www.cacti.net/release_notes_1_0_0.phphttp://www.cacti.net/release_notes_1_0_1.phphttp://www.cacti.net/release_notes_1_0_2.phphttp://www.cacti.net/release_notes_1_0_3.phphttp://www.cacti.net/release_notes_1_0_4.php
March 7, 2017
Boffins show Intel’s SGX can leak crypto keys
March 7, 2017
Shamoon malware spawns even nastier ‘StoneDrill’
March 7, 2017