LinuxSecurity.com: Update to 4.12 (#1456190)
June 5, 2017
40,000 Subdomains Tied to RIG Exploit Kit Shut Down
June 5, 2017
53 Percent of Enterprise Flash Installs are Outdated
June 5, 2017
LinuxSecurity.com: Security fix for CVE-2017-7494
June 5, 2017
LinuxSecurity.com: Update to latest stable release, include fixes for gnutls and gtk-vnc compatibility.
June 5, 2017
LinuxSecurity.com: – update to 1.8.20p2 – added sudo package to dnf/yum protected packages —- – update to 1.8.20p1 – fixes CVE-2017-1000367
June 5, 2017
LinuxSecurity.com: Fixed CVE-2017-6508: CRLF injection in the url_parse function in url.c
June 5, 2017
LinuxSecurity.com: fix insufficient escaping of user-supplied data (CVE-2017-7692)
June 5, 2017
LinuxSecurity.com: Update to chromium 58. Move chrome-remote-desktop to user systemd service. Security fixes for CVE-2017-5068, CVE-2017-5057, CVE-2017-5058, CVE-2017-5059, CVE-2017-5060, CVE-2017-5061, CVE-2017-5062, CVE-2017-5063, CVE-2017-5064, CVE-2017-5065, CVE-2017-5066, CVE-2017-5067, CVE-2017-5069 —- Security fix for CVE-2017-5055, CVE-2017-5054, CVE-2017-5052, CVE-2017-5056, CVE-2017-5053
June 5, 2017
LinuxSecurity.com: Update to chromium 58. Move chrome-remote-desktop to user systemd service. Security fixes for CVE-2017-5068, CVE-2017-5057, CVE-2017-5058, CVE-2017-5059, CVE-2017-5060, CVE-2017-5061, CVE-2017-5062, CVE-2017-5063, CVE-2017-5064, CVE-2017-5065, CVE-2017-5066, CVE-2017-5067, CVE-2017-5069 —- Security fix for CVE-2017-5055, CVE-2017-5054, CVE-2017-5052, CVE-2017-5056, CVE-2017-5053
June 5, 2017
LinuxSecurity.com: fix insufficient escaping of user-supplied data (CVE-2017-7692)
June 5, 2017
Risk Level: Very Low. Type: Trojan.
June 5, 2017
Trends 2017: Fewer vulnerabilities are being reported, but are we any safer?
Fewer vulnerabilities are being reported, but are we any safer? In this short video, we take a look at why it’s still a problem. The post Trends 2017: Fewer vulnerabilities are being reported, but are we any safer? appeared first on WeLiveSecurity
June 5, 2017
LinuxSecurity.com: The cPanel Security Team reported a time of check to time of use (TOCTTOU) race condition flaw in File::Path, a core module from Perl to create or remove directory trees. An attacker can take advantage of this flaw to set the mode on an attacker-chosen file to a attacker-chosen
June 5, 2017
security update
June 5, 2017
LinuxSecurity.com: Security fixes for CVE-2017-9078 CVE-2017-9079
June 4, 2017
LinuxSecurity.com: Security fixes for CVE-2017-9078 CVE-2017-9079
June 4, 2017
Phishing Campaigns Follow Trends
June 3, 2017
security update
June 2, 2017
security update
June 2, 2017
EternalBlue Exploit Spreading Gh0st RAT, Nitol
June 2, 2017
LinuxSecurity.com: Several vulnerabilities were discovered in NSS, a set of cryptographic libraries, which may result in denial of service or information disclosure.
June 2, 2017
LinuxSecurity.com: It was discovered that Zookeeper, a service for maintaining configuration information, didn’t restrict access to the computationally expensive wchp/wchc commands which could result in denial of service by elevated CPU consumption.
June 2, 2017
LinuxSecurity.com: An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.
June 2, 2017
LinuxSecurity.com: OpenLDAP could be made to crash if it received specially crafted network traffic.
June 2, 2017
LinuxSecurity.com: Several security issues were fixed in libsndfile.
June 2, 2017
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. Hackers Blackmail Surgery Patients Hackers have begun contacting victims of a March data leak that exposed […]
June 2, 2017
OneLogin data breach may have compromised encrypted information
The OneLogin breach once again highlights the importance of how companies protect their encrypted data. The post OneLogin data breach may have compromised encrypted information appeared first on WeLiveSecurity
June 2, 2017
Threatpost News Wrap, June 2, 2017
June 2, 2017
WikiLeaks Dumps CIA Patient Zero Windows Implant
June 2, 2017
Infosecurity Europe: 10 interesting talking points
Just weeks after one of the largest global ransomware attacks in history, Infosecurity Europe returns for its 22nd installment. The post Infosecurity Europe: 10 interesting talking points appeared first on WeLiveSecurity
June 2, 2017
LinuxSecurity.com: An update that solves two vulnerabilities and has 5 fixes An update that solves two vulnerabilities and has 5 fixes An update that solves two vulnerabilities and has 5 fixes is now available. is now available.
June 2, 2017
“What are our cybersecurity protocols?” This question is one that has, undoubtedly, been top of mind for CTOs at numerous corporations and government agencies around the world in the wake of recent ransomware attacks. Given the hundreds of thousands of endpoint devices in more than 150 countries that were infected in the latest global attack, […]
June 1, 2017
Password manager “OneLogin” hacked; data stolen
June 1, 2017
WannaCry Development Errors Enable File Recovery
June 1, 2017
Secure XML Processing with JAXP on EAP 7
June 1, 2017
Blockchains are the new Linux, not the new internet
June 1, 2017
LinuxSecurity.com: Several vulnerabilities were discovered in wordpress, a web blogging tool. They would allow remote attackers to force password resets, and perform various cross-site scripting and cross-site request forgery attacks.
June 1, 2017
security update
June 1, 2017
security update
June 1, 2017
Risk Level: Very Low. Type: Trojan.
June 1, 2017
Risk Level: Very Low. Type: Trojan.
June 1, 2017
Smashing Security #023: Covfefe
May 31, 2017
security update
May 31, 2017
security update
May 31, 2017
security update
May 31, 2017
LinuxSecurity.com: A potential security flaw is found on LXDE products, which create socket under /tmp with some predictable names, which may leads to DOS. The security flow on lxterminal is now assigned as CVE-2016-10369. Some other components also had similar issues. These new rpms should fix these issues. At least relogin is required to make […]
May 31, 2017
LinuxSecurity.com: A potential security flaw is found on LXDE products, which create socket under /tmp with some predictable names, which may leads to DOS. The security flow on lxterminal is now assigned as CVE-2016-10369. Some other components also had similar issues. These new rpms should fix these issues. At least relogin is required to make […]
May 31, 2017
LinuxSecurity.com: A potential security flaw is found on LXDE products, which create socket under /tmp with some predictable names, which may leads to DOS. The security flow on lxterminal is now assigned as CVE-2016-10369. Some other components also had similar issues. These new rpms should fix these issues. At least relogin is required to make […]
May 31, 2017
LinuxSecurity.com: Karsten Heymann discovered that the OpenLDAP directory server can be crashed by performing a paged search with a page size of 0, resulting in denial of service. This vulnerability is limited to the MDB storage backend.
May 31, 2017
LinuxSecurity.com: New sudo packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.
May 31, 2017
LinuxSecurity.com: An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes is now available. is now available.
May 31, 2017
LinuxSecurity.com: An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes An update that solves one vulnerability and has three fixes is now available. is now available.
May 31, 2017
LinuxSecurity.com: Sudo could be made to overwrite files as the administrator.
May 31, 2017
Shadow Brokers to Start Monthly Paid Dump Service
May 31, 2017
Patches Available for Linux Sudo Vulnerability
May 31, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
May 31, 2017
ESET releases decryptor for AESNI ransomware variants, including XData
ESET has released a decryptor for AESNI ransomware variants, including XData. Victims who still have encrypted files can now download it from ESET’s utilities page. The post ESET releases decryptor for AESNI ransomware variants, including XData appeared first on WeLiveSecurity
May 31, 2017
What is VPN and how does it work?
Keen to understand what a virtual private network is? You’ve come to the right place. The post What is VPN and how does it work? appeared first on WeLiveSecurity
May 31, 2017