Menu

Category Archives: Security

Articles about security

LinuxSecurity.com: This updates fixes a security bug in the route manager, to prevent it from overwriting arbitrary files (CVE-2017-8921)

security update

security update

Risk Level: Very Low. Type: Worm.

Subtitle Hack Leaves 200 Million Vulnerable to Remote Code Execution
Google Elevates Security in Android O
Yahoo Retires ImageMagick After Bugs Leak Server Memory
Indian hacker pwned Air India, SpiceJet & Cleartrip; booked free flights
Hackers Claim Leaking Thousands of Spotify Login Credentials
Apple Receives First National Security Letter, Reports Spike in Requests for Data
XData ransomware making rounds amid global WannaCryptor scare

A week after the global outbreak of WannaCryptor, also known as WannaCry, another ransomware, known as XData, has been making rounds. The post XData ransomware making rounds amid global WannaCryptor scare appeared first on WeLiveSecurity

Top 3 Chrome VPN Extensions for Maximum Online Privacy
Is the world ready for GDPR? Privacy and cybersecurity impacts are far-reaching

Enforcement of GDPR, the General Data Protection Regulation, begins in May of 2018, imposing data privacy and security requirements on many organizations in the US and other countries. Are you impacted? The post Is the world ready for GDPR? Privacy and cybersecurity impacts are far-reaching appeared first on WeLiveSecurity

Yahoo retires ImageMagick library after 18-byte exploit leaks user email content
Ashley Madison claims to be gaining 500,000 new members each month
How to remove all your cookies, cached data, and browsing history from Safari

LinuxSecurity.com: An update for rpcbind is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update for libtirpc is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

US politicians think companies should be allowed to ‘hack back’ after WannaCry

LinuxSecurity.com: The 4.10.16 stable kernel update contains a number of important fixes across the tree.

LinuxSecurity.com: The 4.10.16 stable kernel update contains a number of important fixes across the tree.

LinuxSecurity.com: Update to chromium 58. Move chrome-remote-desktop to user systemd service. Security fixes for CVE-2017-5068, CVE-2017-5057, CVE-2017-5058, CVE-2017-5059, CVE-2017-5060, CVE-2017-5061, CVE-2017-5062, CVE-2017-5063, CVE-2017-5064, CVE-2017-5065, CVE-2017-5066, CVE-2017-5067, CVE-2017-5069

LinuxSecurity.com: Update to chromium 58. Move chrome-remote-desktop to user systemd service. Security fixes for CVE-2017-5068, CVE-2017-5057, CVE-2017-5058, CVE-2017-5059, CVE-2017-5060, CVE-2017-5061, CVE-2017-5062, CVE-2017-5063, CVE-2017-5064, CVE-2017-5065, CVE-2017-5066, CVE-2017-5067, CVE-2017-5069

Trump’s Cybersecurity Boss Talks Priorities

LinuxSecurity.com: The 4.10.16 stable kernel update contains a number of important fixes across the tree.

LinuxSecurity.com: Update to chromium 58. Move chrome-remote-desktop to user systemd service. Security fixes for CVE-2017-5068, CVE-2017-5057, CVE-2017-5058, CVE-2017-5059, CVE-2017-5060, CVE-2017-5061, CVE-2017-5062, CVE-2017-5063, CVE-2017-5064, CVE-2017-5065, CVE-2017-5066, CVE-2017-5067, CVE-2017-5069

LinuxSecurity.com: Update to chromium 58. Move chrome-remote-desktop to user systemd service. Security fixes for CVE-2017-5068, CVE-2017-5057, CVE-2017-5058, CVE-2017-5059, CVE-2017-5060, CVE-2017-5061, CVE-2017-5062, CVE-2017-5063, CVE-2017-5064, CVE-2017-5065, CVE-2017-5066, CVE-2017-5067, CVE-2017-5069

LinuxSecurity.com: The 4.10.16 stable kernel update contains a number of important fixes across the tree.

Verizon Patches XSS Issues in its Messaging Client
Facebook guidelines give discomforting insight into moderation policy

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: Security Report Summary

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

IDG Contributor Network: What’s all the chatter about chatbots
EternalRocks Worm Spreads Seven NSA SMB Exploits
Zomato working with ‘ethical hacker’ to improve security

Zomato has confirmed that it has been communicating with the hacker responsible for stealing the data of around 17 million of its customers. The post Zomato working with ‘ethical hacker’ to improve security appeared first on WeLiveSecurity

Hackers trying to bring back WannaCry attacks by DDoSing its KillSwitch
North Korea denies link to WannaCry ransomware attack
EternalRocks Worm Uses Same SMB Flaw in Windows like WannaCry
Jaya Baloo on WannaCry and Defending Against Advanced Attacks
Keys for Crysis released, as decryption efforts of WannaCryptor files continue

ESET have prepared a new Crysis decrypting tool. Victims who still have their encrypted files can now download the decryptor from its utilities page. The post Keys for Crysis released, as decryption efforts of WannaCryptor files continue appeared first on WeLiveSecurity

Rogues reset ‘passwords’, steal W-2 info from Equifax subsidiary customer employees

LinuxSecurity.com: Security fix for CVE-2017-8849. https://www.kde.org/info/security/advisory-20170510-2.txt

LinuxSecurity.com: Fix for CVE-2017-6949, also bump to 4.12.0

LinuxSecurity.com: Fix for CVE-2017-6949, also bump to 4.12.0

Risk Level: Very Low. Type: Worm.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

How To Prevent Growing Issue of Encryption Based Malware (Ransomware)

security update

security update

HSBC voice recognition security system spoofed by BBC
Proposed PATCH Act forces US snoops to quit hoarding code exploits
Twitter abandons ‘Do Not Track’ privacy protection

security update

security update

security update

Terror Exploit Kit Evolves Into Larger Threat

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: An update for openstack-heat is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: Updated atomic-openshift-utils and openshift-ansible packages that fix two security issues and several bugs are now available for OpenShift Container Platform 3.5, 3.4, 3.3, and 3.2. [More…]

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: New kdelibs packages are available for Slackware 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. [More Info…]

LinuxSecurity.com: New freetype packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. [More Info…]

Available Tools Making Dent in WannaCry Encryption
VMware Patches Multiple Security Issues in Workstation
WannaCry responsible for infecting medical devices
You were not alone; Twitter went down everywhere
Threatpost News Wrap, May 19, 2017
Ignoring software updates? You’re making one of five basic security mistakes

Cybersecurity is now a worldwide problem. But far too many citizens, businesses and governments are still making the same old, basic errors. The post Ignoring software updates? You’re making one of five basic security mistakes appeared first on WeLiveSecurity

Good news, OpenVPN fans: Your software’s only a little bit buggy
Will Linux protect you from ransomware attacks?
Sweden drop rape case probe against WikiLeaks’ Julian Assange

The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. WannaCry Ransomware Tackles Globe In the past week, organizations in over 150 different countries have been […]

Companies keeping Bitcoin on hand in case of ransomware attacks
New NIST guidelines banish periodic password changes
How to delete your browser history in Microsoft Edge, block cookies, and increase your privacy
PATCH Act Calls for VEP Review Board
Android Gets Security Makeover With Google Play Protect
WordPress Fixes CSRF, XSS Bugs, Announces Bug Bounty Program
Senate’s Use of Signal A Good First Step, Experts Say
Are you protected against WannaCryptor and other forms of ransomware?

Technology evangelist Marc Saltzman asks: Are you protected against WannaCryptor, aka WannaCry, and other forms of ransomware? The post Are you protected against WannaCryptor and other forms of ransomware? appeared first on WeLiveSecurity

WannaCry Ransomware Attackers are sending new message to victims
Patches Pending for Medical Devices Hit By WannaCry

Webroot recently announced a new collaboration with Clavister, a leader in the network security market. Clavister selected Webroot’s BrightCloud® IP Reputation Service. The solution detects malicious activity within users’ IT infrastructure and delivers actionable threat intelligence. We sat down with Mattias Nordlund, product manager for Enterprise at Clavister to get the scoop on the new […]

Zomato hacked! Database of 17 million users stolen
WannaCryptor: Are governments and financial regulators to blame?

Are governments and financial regulators to blame for WannaCryptor, aka WannaCry, asks Tony Anscombe in this insightful feature. The post WannaCryptor: Are governments and financial regulators to blame? appeared first on WeLiveSecurity

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Zomato Hacked; 17 Million Accounts Sold on Dark Web
APT3 Linked to Chinese Ministry of State Security
CryptoMining malware Adylkuzz using the same vulnerability as WannaCry
Next NSA Exploit Payload Could be Much Worse Than WannaCry
Reuben Paul still at it with connected toys hack

Cybersecurity genius Reuben Paul demonstrates that connected toys can be used for malicious purposes at the World Forum in The Hague. The post Reuben Paul still at it with connected toys hack appeared first on WeLiveSecurity

Shocking: ExtraTorrent has been permanently shut down