Menu

Category Archives: Security

Articles about security

pyrasite – Inject Code Into Running Python Processes

LinuxSecurity.com: An update that solves four vulnerabilities and has 35 fixes An update that solves four vulnerabilities and has 35 fixes An update that solves four vulnerabilities and has 35 fixes is now available. is now available.

LinuxSecurity.com: An update that solves 10 vulnerabilities and has one errata An update that solves 10 vulnerabilities and has one errata An update that solves 10 vulnerabilities and has one errata is now available. is now available.

LinuxSecurity.com: For changes see https://www.mozilla.org/en-US/thunderbird/52.2.0/releasenotes/

LinuxSecurity.com: Fixes CVE-2017-9502 (Windows builds only)

LinuxSecurity.com: An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata is now available. is now available.

security update

security update

security update

security update

TP-Link Fixes Code Execution Vulnerability in End-of-Life Routers
Internet-Enabled Drill Demonstrates IoT Security Done Right
URL Padding: Facebook Mobile Users Hit by Phishing Scam
University College London Ransomware Linked to AdGholas Malvertising Group

LinuxSecurity.com: An update that solves one vulnerability and has four fixes An update that solves one vulnerability and has four fixes An update that solves one vulnerability and has four fixes is now available. is now available.

ProtonMail Launches Free VPN Service
Erebus Ransomware: Hosting Firm Pays Hackers $1m Ransom
Man arrested for uploading Deadpool on Facebook may face 3 years in jail
Many companies have been ‘hacked’, but please don’t make it THIS easy
Google Removes Two Ztorg Trojans from Play Marketplace
Say Goodbye to SMBv1 in Windows Fall Creators Update

These days, it seems like you can’t turn on the TV or open a news site without reading some terrifying headline related to cybersecurity. And the numbers keep escalating. Yahoo’s breaches impacted 1 billion user accounts. Chipotle’s security incident affected more than 2,500 stores in 48 states. We know what cybercriminals are doing; they’re stealing […]

Europol campaign fights the online sexual extortion of children
Machine learning by ESET: The road to Augur

Machine learning (ML) in eight blogposts!? In our last post, let’s take a peek under the hood of ESET’s cybersecurity engine and its ML gears. The post Machine learning by ESET: The road to Augur appeared first on WeLiveSecurity

PanicGuard panic alarm app leaks your personal information, including location
200 Million US Citizens Got Their Personal Data Exposed
WikiLeaks emits CIA’s Wi-Fi pwnage tool docs
Security-Oriented Alpine Linux 3.6.2 OS Adds Linux Kernel 4.9.32 and Tor 0.3.0.8
Ubuntu 17.10 to Improve Secure Boot for Booting Windows from GRUB, Enable PIE
How to install Linux on a Chromebook (and why you should)
Web-hosting firm agrees to pay over $1 million to ransomware extortionists
FIN10 Extorting Canadian Mining Companies, Casinos

LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that solves three vulnerabilities and has one An update that solves three vulnerabilities and has one An update that solves three vulnerabilities and has one errata is now available. errata is now available.

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Your anti-virus may remove this malware but it will still remain active

Popular third-party chat platforms like Slack, Discord, and Telegram are just a few of the many new productivity applications that are being hijacked by cybercriminals to create command-and-control (C&C) communications infrastructures for their malware campaigns. As corporate security teams become more aware of traditional malware threats and deploy new security solutions to defend against them, […]

Mexican Journalists, Lawyers Focus of Government Spyware

LinuxSecurity.com: Multiple vulnerabilities have been discovered in Irssi, a terminal based IRC client. The Common Vulnerabilities and Exposures project identifies the following problems:

LinuxSecurity.com: Update to a bugfix release of yara.

LinuxSecurity.com: Update to a bugfix release of yara.

LinuxSecurity.com: Upstream 3.2.8 —- Upstream 3.2.7 (important security fix) —- Security fix for CVE-2013-7458

LinuxSecurity.com: Mostly a bugfix update, but includes an update of the keyboard/mouse hwdb and various small fixes and a minor security issue and a boot issue on virtualized systems with no VGA console. No need to reboot or log out.

LinuxSecurity.com: Security fix for CVE-2017-9433

LinuxSecurity.com: – new upstream update (54.0)

LinuxSecurity.com: **Rebase to 10.1.24** Plugin oqgraph enabled Plugin jemalloc enabled Sphinx engine enabled Build dependecies Bison and Libarchive added, others corrected Disabling Mroonga engine for i686 architecture, as it is not supported by MariaDB **Removed patches: (fixed by upstream)** Patch5: %{pkgnamepatch}-file-contents.patch Patch14: %{pkgnamepatch}-example-config-

LinuxSecurity.com: * Bump to 1.7.6 * Security fix for CVE-2017-8932

LinuxSecurity.com: This release fixes a possible setting arbitrary mode on an arbitrary file in rmtree() and remove_tree() calls known as CVE-2017-6512.

LinuxSecurity.com: Rebuild with new bochs version

Republican Data Broker Exposes 198M Voter Records
Stack Clash Vulnerability in Linux, BSD Systems Enables Root Access
4 School Districts in Florida Attacked By Moroccan Hackers
Universal Plug ‘n’ Pwn! Pinkslipbot malware exploits UPnP to help it steal credentials
IoT Malware Activity Already More Than Doubled 2016 Numbers
Pervert arrested for taking candid photos of women, posting on Twitter

LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.

Industroyer: ICS were developed decades ago with no security in mind

Senior ESET malware researcher Robert Lipovsky discusses Industroyer, the biggest threat to Industrial Control Systems (ICS) since Stuxnet. The post Industroyer: ICS were developed decades ago with no security in mind appeared first on WeLiveSecurity

Industroyer poses the highest risk for critical infratstructure since Stuxnet

ESET researchers have been analyzing samples of dangerous malware – detected by ESET as Win32/Industroyer, and named Industroyer – which is capable of performing an attack on power supply infrastructure. Robert Lipovsky, a researcher at ESET, tells us more. The post Industroyer poses the highest risk for critical infratstructure since Stuxnet appeared first on WeLiveSecurity

Risk Level: Very Low. Type: Trojan.

security update

security update

Google is having a hard time getting rid of malicious Android apps
Disruptive Ransomware Group ‘FIN10’ Hacked Casinos, Mining Firms
Erebus Ransomware Targets Linux Servers
Enhancing the security of the OS with cryptography changes in Red Hat Enterprise Linux 7.4
Hackers can exploit E-Cigarettes to hack computers

security update

security update

Wikileaks Alleges Years of CIA D-Link and Linksys Router Hacking Via ‘Cherry Blossom’ Program

LinuxSecurity.com: It was discovered that RT::Authen::ExternalAuth, an external authentication module for Request Tracker, is vulnerable to timing side-channel attacks for user passwords. Only ExternalAuth in DBI (database) mode is vulnerable.

LinuxSecurity.com: Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following problems:

LinuxSecurity.com: An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata is now available. is now available.

LinuxSecurity.com: libmwaw could be made to crash or run programs as your login if it opened a specially crafted file.

LinuxSecurity.com: zziplib could be made to crash or run programs as your login if it opened a specially crafted file.

Someone Failed to Contain WannaCry
Hundreds of Malicious Android Apps Masked as Anti-virus Software

The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. New Mobile Phishing Attacks are Using URL Padding In an attempt to trick mobile browsing users […]

What’s worse than getting phished? Getting phished *and* sending a selfie of your Photo ID and credit card
Threatpost News Wrap, June 16, 2017
Hackers Using Chinese Malware to Rob ATMs Using Outdated Windows XP
Seven years after Stuxnet: Industrial systems security once again in the spotlight

Seven years after Stuxnet first came to light, industrial systems security once again in the spotlight, reports ESET’s Robert Lipovsky. The post Seven years after Stuxnet: Industrial systems security once again in the spotlight appeared first on WeLiveSecurity

Erosion of ISP Privacy Rules Sparks New Anti-Snooping Efforts
Would you trust your smartphone with your life?

Smartphone security is, of course, essential these days, but how confident are you in your device’s ability to help keep you safe and secure? The post Would you trust your smartphone with your life? appeared first on WeLiveSecurity

Facebook staff had their identities exposed to suspected terrorists due to security lapse
Brit hacker admits he siphoned info from US military satellite network
CIA has been hacking into Wi-Fi routers for years, leaked documents show
Cybersecurity labor crunch to hit 3.5 million unfilled jobs by 2021
Buggy devices and lazy operators make VoLTE a security nightmare
Parrot Security OS Devs Mock systemd: It’s an Immature Init System for GNU/Linux