June 24, 2017
Facebook’s new feature to prevent misuse of profile pics
June 24, 2017
security update
June 24, 2017
security update
June 23, 2017
security update
June 23, 2017
security update
June 23, 2017
Siemens Patches Vulnerabilities in SIMATIC CP, XHQ
June 23, 2017
LinuxSecurity.com: Several vulnerabilities have been found in the Apache HTTPD server. CVE-2017-3167
June 23, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Vim and gVim, the worst of which might allow remote attackers to execute arbitrary code.
June 23, 2017
LinuxSecurity.com: An out-of-bounds write in Graphite might allow remote attackers to execute arbitrary code.
June 23, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in jbig2dec, the worst of which might allow remote attackers to execute arbitrary code.
June 23, 2017
LinuxSecurity.com: Several security issues were fixed in OpenVPN.
June 23, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Urban Terror, the worst of which allows for the remote execution of arbitrary code.
June 23, 2017
LinuxSecurity.com: It was discovered that Flatpak, an application deployment framework for desktop apps insufficiently restricted file permissinons in third-party repositories, which could result in privilege escalation.
June 23, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in libksba which might allow remote attackers to obtain sensitive information or crash an libksba-based application. [More…]
June 23, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in the Graphite font rendering engine which might result in denial of service or the execution of arbitrary code if a malformed font file is processed.
June 23, 2017
Few Victims Reporting Ransomware Attacks to FBI
June 23, 2017
Threatpost News Wrap, June 23, 2017
June 23, 2017
NSA Advocates Data Sharing Framework
June 23, 2017
Millennials: Meet the next generation of cybersecurity
As baby boomers retire and the employment gap in cybersecurity is plugged by generation x, we look at how millennials are set to shape the industry. The post Millennials: Meet the next generation of cybersecurity appeared first on WeLiveSecurity
June 23, 2017
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. WannaCry Shuts Down Honda Production Plant Over the last few days, Honda officials have discovered a […]
June 23, 2017
LinuxSecurity.com: An update that fixes 12 vulnerabilities is now available. An update that fixes 12 vulnerabilities is now available. An update that fixes 12 vulnerabilities is now available.
June 23, 2017
Risk Level: Very Low. Type: Trojan.
June 23, 2017
LinuxSecurity.com: For changes see https://www.mozilla.org/en-US/thunderbird/52.2.0/releasenotes/
June 22, 2017
LinuxSecurity.com: This update addresses CVE-2017-1000366, a vulnerability in the dynamic linker allowing local privilege escalation.
June 22, 2017
security update
June 22, 2017
Cisco Patches XXE, DOS, Code Execution Vulnerabilities
June 22, 2017
LinuxSecurity.com: New openvpn packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues.
June 22, 2017
LinuxSecurity.com: Emeric Boit of ANSSI reported that SPIP, a website engine for publishing, insufficiently sanitises the value from the X-Forwarded-Host HTTP header field. An unauthenticated attacker can take advantage of this flaw to cause remote code execution.
June 22, 2017
LinuxSecurity.com: The system could be made to run programs as an administrator.
June 22, 2017
Average Cost of Breach Goes Down For the First Time Ever
June 22, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
June 22, 2017
Microsoft Says Fireball Threat ‘Overblown’
June 22, 2017
Birthday Reminder looks benign but the devil’s in the details: Hooks DNS, serves dodgy ads
The strange behavior of a simple Windows application caught our attention and sparked the analysis by ESET of a previously undocumented malware. The post Birthday Reminder looks benign but the devil’s in the details: Hooks DNS, serves dodgy ads appeared first on WeLiveSecurity
June 22, 2017
UCL ransomware attack traced to malvertising campaign
June 22, 2017
WannaCry Ransomware Hits Traffic Cameras in Australia
June 22, 2017
Honeypots and the Internet of Things
June 22, 2017
LinuxSecurity.com: Disable executable stack for aarch64 builds.
June 22, 2017
LinuxSecurity.com: This update addresses CVE-2017-1000366, a vulnerability in the dynamic linker allowing local privilege escalation.
June 22, 2017
LinuxSecurity.com: CVE-2017-1000381: c-ares NAPTR parser out of bounds access
June 22, 2017
LinuxSecurity.com: Update to .104. Fix mp3 playback. Security fix for CVE-2017-5087, CVE-2017-5088, CVE-2017-5089
June 22, 2017
LinuxSecurity.com: Rebuild for new luajit
June 22, 2017
Smashing Security #030: GDPR – The good and the bad
June 22, 2017
LinuxSecurity.com: Alvaro Munoz and Christian Schneider discovered that jython, an implementation of the Python language seamlessly integrated with Java, is prone to arbitrary code execution triggered when sending a serialized function to the deserializer.
June 22, 2017
LinuxSecurity.com: Aniket Nandkishor Kulkarni discovered that in tomcat7, a servlet and JSP engine, static error pages used the original request’s HTTP method to serve content, instead of systematically using the GET method. This could under certain conditions result in undesirable results,
June 22, 2017
LinuxSecurity.com: Aniket Nandkishor Kulkarni discovered that in tomcat8, a servlet and JSP engine, static error pages used the original request’s HTTP method to serve content, instead of systematically using the GET method. This could under certain conditions result in undesirable results,
June 22, 2017
LinuxSecurity.com: Several security issues were fixed in the kernel.
June 22, 2017
security update
June 22, 2017
security update
June 22, 2017
security update
June 22, 2017
US Judge falls for email scam; loses $1 million
June 21, 2017
Microsoft Extends Edge Bug Bounty Program Indefinitely
June 21, 2017
Trump’s Cybersecurity Executive Order Under Fire
June 21, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.
June 21, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in the GNU C Library, the worst of which may allow execution of arbitrary code.
June 21, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in mbed TLS, the worst of which could lead to the remote execution of arbitrary code.
June 21, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Kodi, the worst of which could allow remote attackers to execute arbitrary code.
June 21, 2017
LinuxSecurity.com: A header injection vulnerability in GNU Wget might allow remote attackers to inject arbitrary HTTP headers.
June 21, 2017
LinuxSecurity.com: An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata is now available. is now available.
June 21, 2017
Honda Shut Down Plant Impacted by WannaCry
June 21, 2017
Avaya Patches Remote Code Execution Flaw in Aura
June 21, 2017
WannaCryptor attack ‘may have come from Lazarus group’
Experts in the UK and the US have reportedly claimed that the recent global WannaCryptor ransomware attack was initiated by the North Korean Lazarus Group. The post WannaCryptor attack ‘may have come from Lazarus group’ appeared first on WeLiveSecurity
June 21, 2017