January 23, 2017
Protected US military server poked via army recruitment website
January 23, 2017
It’s 2017 and 200,000 services still have unpatched Heartbleeds
January 23, 2017
Go dark with the flow: Lavabit lives again
January 23, 2017
Satan enters roll-your-own ransomware game
January 23, 2017
Symantec carpeted over dodgy certificates, again
January 23, 2017
Mozilla wants infosec activism to be the next green movement
January 23, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in zlib, the worst of which could allow attackers to cause a Denial of Service condition.
January 22, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in DirectFB, all of which could allow remote attackers to execute arbitrary code.
January 22, 2017
LinuxSecurity.com: A buffer overflow in DCRaw might allow remote attackers to cause a Denial of Service condition.
January 22, 2017
LinuxSecurity.com: A buffer overflow in Lua might allow context-dependent attackers to execute arbitrary code.
January 22, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in libupnp, the worst of which could lead to the execution of arbitrary code.
January 22, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in DBD::mysql, the worst of which might allow an attacker to execute arbitrary code.
January 22, 2017
LinuxSecurity.com: A buffer overflow in PPP might allow remote attackers to cause a Denial of Service condition.
January 22, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition.
January 22, 2017
Employment scam targets college students and their bank accounts
January 22, 2017
LinuxSecurity.com: check valid input arguments for nla_reserve() (rh #1414305, CVE-2017-0386)
January 22, 2017
security update
January 22, 2017
security update
January 22, 2017
security update
January 21, 2017
Radio Station Transmission Hacked with F*** Donald Trump Song
January 21, 2017
Mozilla’s First Internet Health Report Tackles Security, Privacy
January 21, 2017
India’s Famous Horse Racing Site Hacked with Dharma Ransomware
January 21, 2017
Protesters Called To Join Inauguration Day DDoS Attack
January 21, 2017
Rsync errors lead to data breach at Canadian ISP, KWIC Internet
January 21, 2017
Encrypted email service ProtonMail opens door for Tor users
January 21, 2017
7 (more) security TED Talks you can’t miss
January 21, 2017
Researcher claims to expose identity of Mirai Botnet Author
January 20, 2017
security update
January 20, 2017
Rap for crap WhatsApp trap flap: Yack yack app claptrap slapped
January 20, 2017
Hadoop, CouchDB Next Targets in Wave of Database Attacks
January 20, 2017
LinuxSecurity.com: Security Report Summary
January 20, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in cURL, the worst of which could allow remote attackers to execute arbitrary code.
January 20, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in NSS, the worst of which could allow remote attackers to obtain access to private key information.
January 20, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in irssi, the worst of which could allow remote attackers to execute arbitrary code.
January 20, 2017
LinuxSecurity.com: A heap-based buffer overflow in CVS might allow remote attackers to execute arbitrary code.
January 20, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in IcedTea allowing remote attackers to affect confidentiality, integrity, and availability through various vectors.
January 20, 2017
LinuxSecurity.com: An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…]
January 20, 2017
Hack the Army Bounty Pays Out $100,000; 118 Flaws Fixed
January 20, 2017
Ransomware attack hits St Louis Public library
January 20, 2017
Threatpost News Wrap, January 20, 2017
January 20, 2017
Trump’s ‘cyber tsar’ Giuliani among creds leaked in mass hacks
January 20, 2017
Email Encryption Service Provider ‘ProtonMail’ Now on Tor
January 20, 2017
MongoDB Hacks Spreading Fast In the past few weeks, researchers have been monitoring the steady rise of hacked MongoDB installations, now surpassing over 28,000 individual systems. While the attacks started with ransoming back the stolen data, the attackers have now begun simply deleting the information from the database and leaving the ransom note for payment […]
January 20, 2017
Attackers start wiping data from CouchDB and Hadoop databases
January 20, 2017
How to wake the enterprise from IoT security nightmares
January 20, 2017
Microsoft’s standing to sue over secret US data requests in question
January 20, 2017
Fake news alert! Internet breaches are not cloud breaches
January 20, 2017
Unbreakable Locky ransomware is on the march again
January 20, 2017
LinuxSecurity.com: An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…]
January 20, 2017
Viral Chinese selfie app Meitu phones home with personal data
January 20, 2017
Operator of DDoS protection service named as Mirai author
January 20, 2017
Smashing Security #004: ‘You don’t mess with Brian Krebs’
January 19, 2017
The Changing Face of Carbanak
January 19, 2017
Google Maps Will Soon Find Parking Spot for You
January 19, 2017
LinuxSecurity.com: An update for python-XStatic-jquery-ui is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7. Red Hat Product Security has rated this update as having a security impact [More…]
January 19, 2017
LinuxSecurity.com: An update for openstack-cinder is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6. Red Hat Product Security has rated this update as having a security impact [More…]
January 19, 2017
LinuxSecurity.com: Updated openstack-cinder packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7. [More…]
January 19, 2017
LinuxSecurity.com: An update for openstack-cinder is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7. Red Hat Product Security has rated this update as having a security impact [More…]
January 19, 2017
ProtonMail Gets Own Tor-Accessible .Onion Hidden Service
January 19, 2017
Locky Limps Back into Action After Lull
January 19, 2017
Ransomware as a Service (RaaS) has been growing steadily since it made its debut in 2015 with Tox. With the new Satan service, it’s easier than ever. The idea is to use this web portal to contract threat actors to create new ransomware samples for distribution via the desired attack vector. This allows any potential […]
January 19, 2017
Cybersecurity skills shortage ‘still a global problem’
There are signs of improvement in the global cybersecurity skills gap, but serious problems still remain, a new report finds. The post Cybersecurity skills shortage ‘still a global problem’ appeared first on WeLiveSecurity
January 19, 2017
Risk Level: Very Low. Type: Trojan.
January 19, 2017
Samsung SmartCam owners warned of hacker hijack vulnerability
January 19, 2017
Quimitchin Malware Targeting Mac Users also Compatible with Linux
January 19, 2017
‘Beeeellion-dollar’ mastercrooks in hotel, restaurant blitzkrieg
January 19, 2017
Facebook, Researcher at Odds Over Messenger Issue
January 19, 2017
Android Scoring System Roots Out Malicious, Harmful Apps
January 19, 2017
Justine Bone on St. Jude Vulnerabilities and Medical Device Security
January 19, 2017
Trump inauguration DDoS protest is ‘illegal’, warn securobods
January 19, 2017
Google Infrastructure Security Design Overview
January 19, 2017
Oracle to Java devs: Stop signing JAR files with MD5
January 19, 2017
Insecure Hadoop installs next in ‘net scum crosshairs
January 19, 2017
Adobe’s naughty Chrome telemetry code had XSS problem
January 19, 2017
Risk Level: Very Low.
January 19, 2017
Risk Level: Very Low. Type: Trojan.
January 19, 2017
security update
January 19, 2017
Silence is golden: How Google hunts Android malware in the wild
January 18, 2017
Carbanak Using Google Services for Command and Control
January 18, 2017
Skills gap could hold back blockchain, AI, IoT advancements in 2017
January 18, 2017
Docker Patches Container Escape Vulnerability
January 18, 2017
“Highest average score for ease of use, quality of support, and […] requirements in endpoint protection.” That’s how Marty Duffy, Director of Research at G2 Crowd, describes Webroot after seeing the results of this year’s G2 Crowd survey on Best Software for IT Teams 2017. We’d be lying if we said we weren’t over the […]
January 18, 2017
LinuxSecurity.com: **Version 5.2.22** (January 5th 2017) * **SECURITY** Fix[CVE-2017-5223](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5223),local file disclosure vulnerability if content passed to `msgHTML()` is sourcedfrom unfiltered user input. Reported by Yongxiang Li of Asiasecurity. The fixfor this means that calls to `msgHTML()` without a `$basedir` will not importimages with relative URLs, and relative URLs containing `..` will be ignored. *Add simple […]
January 18, 2017
LinuxSecurity.com: This new point release fixes a security vulnerability in wrestool. For furtherdetails see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850017
January 18, 2017