January 31, 2017
Nicolas Brulez on Malware Reverse Engineering Tips and Tricks
January 31, 2017
Privacy worries are on the rise, new U.S. poll shows
January 31, 2017
Cybersecurity: 5 basic lessons for everyone
A new way of looking at cybersecurity, no longer viewing it as a goal in itself, but instead something that is directly connected to business needs. The post Cybersecurity: 5 basic lessons for everyone appeared first on WeLiveSecurity
January 31, 2017
Facebook, GitHub teams up to make password resets more secure
January 31, 2017
NATO Members Targeted by Unique Macro Malware
January 31, 2017
MongoDB ransom attacks continue to plague administrators
January 31, 2017
Better security through obscurity? Think again
When attackers look for vulnerabilities, they target popular software. Why bother chasing flaws in applications that few people use? That’s why one of my best friends runs a third-party application instead of Adobe Acrobat Reader to open and read PDF documents. Another friend runs the Maxthon browser to stay out of the way of exploits […]
January 31, 2017
Ransomware: Key insights from infosec experts
Ransomware is not going anywhere. Here, we’ve rounded up vital tips and advice from three ESET experts: Lysa Myers, Stephen Cobb and David Harley. The post Ransomware: Key insights from infosec experts appeared first on WeLiveSecurity
January 31, 2017
Want to bring down that pesky drone? Try the power of sound
January 31, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in HarfBuzz, the worst of which could allow remote attackers to cause a Denial of Service condition.
January 31, 2017
Google’s Chrome is about to get rather in-your-face about HTTPS
January 31, 2017
VMware’s enterprise mobility management tool can p0wn itself
January 31, 2017
OpenSSL pushes trio of DoS-busting patches
January 31, 2017
Apple kills activation lock check, possible dirty stolen device hack
January 31, 2017
Infosec industry to drive machine learning spend surge says analyst
January 31, 2017
LinuxSecurity.com: An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6. Red Hat Product Security has rated this update as having a security impact [More…]
January 31, 2017
LinuxSecurity.com: An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7. Red Hat Product Security has rated this update as having a security impact [More…]
January 31, 2017
LinuxSecurity.com: An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7. Red Hat Product Security has rated this update as having a security impact [More…]
January 31, 2017
LinuxSecurity.com: An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7. Red Hat Product Security has rated this update as having a security impact [More…]
January 31, 2017
With net neutrality pretty much dead in the US, your privacy is next
January 31, 2017
security update
January 31, 2017
LinuxSecurity.com: Security Report Summary
January 30, 2017
Fake Netflix, WhatsApp, Facebook Android Apps Contain SpyNote RAT
January 30, 2017
Facebook Tackles Account Recovery with Delegated Recovery Protocol
January 30, 2017
security update
January 30, 2017
Telemarketing Firm Leaks 400,000 Recorded Calls
January 30, 2017
Ransomware avalanche at Alpine hotel puts room keycards on ice
January 30, 2017
LinuxSecurity.com: Update to 6.2.4
January 30, 2017
LinuxSecurity.com: Update to Firefox 51.0.1. —- – new upstream version (51.0.1)
January 30, 2017
LinuxSecurity.com: Security fix for CVE-2016-10164
January 30, 2017
LinuxSecurity.com: This is a security update for these CVEs: *[CVE-2016-9601](https://bugzilla.redhat.com/show_bug.cgi?id=1410021) – *Heap-buffer overflow in jbig2_image_new function* This update also solves possiblelicensing issues with ghostscritpt’s source code.
January 30, 2017
LinuxSecurity.com: Update to 7.0.4
January 30, 2017
LinuxSecurity.com: Security Report Summary
January 30, 2017
LinuxSecurity.com: A null pointer dereference in libpng might allow remote attackers to execute arbitrary code.
January 30, 2017
LinuxSecurity.com: Multiple vulnerabilities have been discovered in SQUASHFS, the worst of which may allow execution of arbitrary code
January 30, 2017
LinuxSecurity.com: An integer overflow in libXpm might allow remote attackers to execute arbitrary code or cause a Denial of Service Condition.
January 30, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in FFmpeg, the worst of which may allow remote attackers to cause a Denial of Service condition.
January 30, 2017
LinuxSecurity.com: A vulnerability in Firewalld allows firewall configurations to be modified by unauthenticated users.
January 30, 2017
Ransomware disrupts Washington DC’s CCTV system
January 30, 2017
Many Android VPN Apps Breaking Privacy Promises
January 30, 2017
How a single SMS can break your Samsung Galaxy Android phone
January 30, 2017
Hackers Infect Hotel Door Lock System with Ransomware
January 30, 2017
Barclays warns customers of the risks of business email compromise
January 30, 2017
Questions to ask your recovery vendor before you buy
January 30, 2017
Managing risk by understanding attack surfaces
January 30, 2017
How most hackers get into systems
January 30, 2017
Some examples of vulnerable code and how to find them
“When looking for vulnerabilities in open-source code, it is advisable to check portions of code that is prone to errors”: Useful tips from one of ESET’s malware analysts, Matías Porolli, on how to spot vulnerable code. The post Some examples of vulnerable code and how to find them appeared first on WeLiveSecurity
January 30, 2017
Google moves into the Certificate Authority business
January 30, 2017
Big Blue’s BigInsights has big-ish bugs
January 30, 2017
Ransomware killed 70% of Washington DC CCTV ahead of inauguration
January 30, 2017
WordPress slips out three quick patches
January 29, 2017
Cisco TelePresence control software had remote-exploitable bug
January 29, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Perl, the worst of which could allow remote attackers to execute arbitrary code.
January 29, 2017
security update
January 29, 2017
security update
January 28, 2017
38% of Android VPN Apps on Google Play Store Plagued with Malware
January 28, 2017
LinuxSecurity.com: Update to the latest stable version. See https://ikiwiki.info/news/ for the listof changes. Security fix for CVE-2016-10026, CVE-2016-9646, CVE-2017-0356.
January 28, 2017
LinuxSecurity.com: Fix validation logic in the base consumer The base consumer is intended to onlyderive its validation switch from the on-disk configuration if the child classdoesn’t override the validate_signatures switch. There was a bug here where thedefault value provided in the base class made it appear as if *all* childconsumers had turned *off* validation, which […]
January 28, 2017
LinuxSecurity.com: Update to the latest stable version. See https://ikiwiki.info/news/ for the listof changes. Security fix for CVE-2016-10026, CVE-2016-9646, CVE-2017-0356.
January 28, 2017
LinuxSecurity.com: New mozilla-thunderbird packages are available for Slackware 14.1, 14.2, and -current to fix security issues. [More Info…]
January 28, 2017
LinuxSecurity.com: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…]
January 28, 2017
LinuxSecurity.com: An update for puppet-swift is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact [More…]
January 28, 2017
LinuxSecurity.com: Security Report Summary
January 28, 2017
Facebook Launches “Security Key” Feature to Protect User Accounts
January 28, 2017
Cisco Warns of Critical Flaw in Teleconferencing Gear
January 28, 2017
VPN on Android means ‘Voyeuristic Peeper Network’ in many cases
January 28, 2017
security update
January 27, 2017
Wow, look out, hackers: Trump to order 60-day cybersecurity probe
January 27, 2017
WordPress 4.7.2 Update Fixes XSS, SQL Injection Bugs
January 27, 2017
OpenSSL issues new patches as Heartbleed still lurks
January 27, 2017
Dridex Returns With Windows UAC Bypass Method
January 27, 2017
Major Dark Web Marketplace Hacked Recently, a hacker using the alias cypher0007 reached out to AtlasBay, a large dark web market, with information on two significant vulnerabilities that allowed him to access over 200,000 private messages, names, and addresses. Along with retrieving a good amount of buyer and seller information, the hacker also revealed that […]
January 27, 2017
Threatpost News Wrap, January 27, 2017
January 27, 2017
Google to Operate its Own Root CA
January 27, 2017
Texas cops lose evidence going back eight years in ransomware attack
January 27, 2017
Google launches root certificate authority
January 27, 2017
US and Russia engaged in legal tug of war over LinkedIn hack suspect
January 27, 2017
That Hearbleed problem may be more pervasive than you think
January 27, 2017
Securing MySQL DBMS
January 27, 2017
Breach Notification Website LeakedSource Allegedly Raided, Shut Down
January 27, 2017
Smashing Security podcast #005: ‘Upskirt insecurity’
January 27, 2017
218,000 private unencrypted AlphaBay dark web messages exposed
January 27, 2017
An introduction to private browsing
Privacy and security fears are driving many people to look into the possibilities of private browsing. We investigate what it is and how you stay anonymous online The post An introduction to private browsing appeared first on WeLiveSecurity
January 27, 2017