January 12, 2017
Donald Trump finally believes Russia hacked the DNC
Google Cloud unlocks key achievement
January 12, 2017
LinuxSecurity.com: fix CVE-2016-8741 (rhbz#1409836,1409835)
January 12, 2017
LinuxSecurity.com: update to 3.2.10.RELEASE, fix CVE-2016-9879
January 12, 2017
LinuxSecurity.com: Update to the latest upstream release 1.3.2, also with some security fixes (seebug #1193445 from the native flac package).
January 12, 2017
LinuxSecurity.com: Security fix for CVE-2016-8605
January 12, 2017
security update
January 12, 2017
Risk Level: Very Low. Type: Trojan.
January 12, 2017
Risk Level: Very Low. Type: Trojan.
January 12, 2017
Professionally designed ransomware Spora might be the next big thing
January 11, 2017
Buggy Domain Validation Forces GoDaddy to Revoke Certs
January 11, 2017
Cloudflare Shares National Security Letter It Received in 2013
January 11, 2017
ShadowBrokers Selling Windows Exploits, Attack Tools
January 11, 2017
How Blockchain Can Revolutionize Personal Data Storage?
January 11, 2017
Second Try at Windows LSASS Patch Addresses Vulnerability
January 11, 2017
Spammers Revive Hancitor Downloader Campaigns
January 11, 2017
Trump: It was probably Russia that hacked the DNC, Clinton campaign
January 11, 2017
Notorious Shadow Brokers’ Group Now Selling Windows Hacking Tools
January 11, 2017
GoDaddy revokes digital certificates improperly validated due to bug
January 11, 2017
Debugging a kernel in QEMU/libvirt
January 11, 2017
GCHQ feeds first crop of infosec startups to Cyber Accelerator
January 11, 2017
LA College Hit By Ransomware: Pays $28,000 to Unlock Files
January 11, 2017
CES: IoT security comes of age
For years, IoT security seemed like solving a problem that didn’t exist. Not anymore says ESET’s Cameron Camp, who was at this year’s CES. The post CES: IoT security comes of age appeared first on WeLiveSecurity
January 11, 2017
How White Hat hackers do bad things for good reasons
January 11, 2017
Pay the ransom? You won’t get your data back
January 11, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in phpMyAdmin, the worst of which could lead to arbitrary code execution.
January 11, 2017
LinuxSecurity.com: Flex might generate code with a buffer overflow making applications using such scanners vulnerable to the execution of arbitrary code.
January 11, 2017
LinuxSecurity.com: A vulnerability has been found in Vim and gVim concerning how certain modeline options are treated.
January 11, 2017
LinuxSecurity.com: A vulnerability in vzctl might allow attackers to gain control over ploop containers.
January 11, 2017
LinuxSecurity.com: A heap-based buffer overflow in c-ares might allow remote attackers to cause a Denial of Service condition.
January 11, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in 7-Zip, the worst of which may allow execution of arbitrary code.
January 11, 2017
LinuxSecurity.com: A vulnerability in BIND might allow remote attackers to cause a Denial of Service condition.
January 11, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in phpBB, the worst of which may allow remote attackers to inject arbitrary web script or HTML.
January 11, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in PgBouncer, the worst of which may allow an attacker to bypass authentication.
January 11, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Botan, the worst of which might allow remote attackers to obtain ECDSA secret keys.
January 11, 2017
New Windows 10 privacy controls: Just a little snooping – or the max
January 11, 2017
LinuxSecurity.com: Gentoo’s NGINX ebuilds are vulnerable to privilege escalation due to the way log files are handled.
January 11, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Expat, the worst of which may allow execution of arbitrary code.
January 11, 2017
Sundown exploit kit weaves Edge hack hole
January 11, 2017
Ansible patches ‘own the farm’ vulnerability
January 11, 2017
EMC slings patch at remote hack nonce-nse
January 11, 2017
Juniper warns: Borked upgrade opens root on firewalls
January 11, 2017
Risk Level: Very Low. Type: Trojan.
January 11, 2017
US Intel: Russia hacked Republican groups during election
January 10, 2017
Adobe patches critical flaws in Flash Player, Reader, and Acrobat
January 10, 2017
Netflix users targeted by credit card phishing scheme
January 10, 2017
Microsoft Issues Record Low Number of Patch Tuesday Bulletins
January 10, 2017
It’s now 2017, and your Windows PC can still be pwned by a Word file
January 10, 2017
Amazon Echo and the Alexa dollhouses: Security tips and takeaways
Tips on securing the Alexa service on Amazon Echo devices, notably voice purchasing, a topic brought into focus by the recent “San Diego dollhouse TV story”. The post Amazon Echo and the Alexa dollhouses: Security tips and takeaways appeared first on WeLiveSecurity
January 10, 2017
Anonymous hacks Thai Gov’t job portal; leaks a trove of data
January 10, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in libTIFF, the worst of which may allow execution of arbitrary code.
January 10, 2017
Adobe Patches Code Execution Flaws in Flash, Reader, Acrobat
January 10, 2017
Cybercriminals ‘should be punished with Wi-Fi jammers’
A senior UK police officer has suggested that offenders of cybercrime should be penalized by being made to wear Wi-Fi jammers rather than being sent to prison. The post Cybercriminals ‘should be punished with Wi-Fi jammers’ appeared first on WeLiveSecurity
January 10, 2017
Disk-wiping malware Shamoon targets virtual desktop infrastructure
January 10, 2017
Lawmakers Reintroduce Popular Email Privacy Act
January 10, 2017
Two New Edge Exploits Integrated into Sundown Exploit Kit
January 10, 2017
Security scare over hackable heart implants
A US government probe into claims that certain heart implants are vulnerable to hacking attacks, has resulted in emergency security patches being issued for devices that cardiac patients have in their homes. The post Security scare over hackable heart implants appeared first on WeLiveSecurity
January 10, 2017
EU tosses Europe’s cookies… popups
January 10, 2017
Google Patches Android Custom Boot Mode Vulnerability
January 10, 2017
Experts Warn of Novel PDF-Based Phishing Scam
January 10, 2017
Threatpost News Wrap, January 6, 2017
January 10, 2017
Attacks On MongoDB Rise As Hijackings Continue
January 10, 2017
FTC: D-Link Failed to Secure Routers, IP Cameras
January 10, 2017
Ransomware extorts Los Angeles school to the tune of $28,000
January 10, 2017
Dangerous assumptions that put enterprises at risk
January 10, 2017
Privacy legislation reintroduced for mail older than 180 days
January 10, 2017
MongoDB ransacked: Now 27,000 databases hit in mass ransom attacks
January 10, 2017
GitHub secret key finder released to public
January 10, 2017
Trump Plans To Build Anti-Hacking Team
January 10, 2017
Hacker: Lol, I pwned FBI.gov! Web devs: Nuh-uh, no you didn’t
January 10, 2017
Q&A: RSA crypto pioneer Adleman keeps pushing the limits
I recently had the pleasure of interviewing Dr. Leonard Adleman — the “A” in the very popular public cryptographic algorithm RSA — as part of the Association for Computing Machinery’s 50th anniversary celebration of the Turing Award. In 2002, Adleman himself won the Turing Award, often referred to at the Nobel Prize of the computing […]
January 10, 2017
Git Hound, Truffle Hog root out GitHub leaks
January 10, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Python, the worst of which could lead to arbitrary code execution.
January 10, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.
January 10, 2017
Autocomplete a novel phishing hole for Chrome, Safari crims
January 10, 2017
St Jude patching Merlin@home heart kit
January 10, 2017
Type: Vulnerability. Microsoft Windows LSASS is prone to a local privilege-escalation vulnerability; fixes are available.
January 10, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote privilege-escalation vulnerability; fixes are available.
January 10, 2017
Type: Vulnerability. Microsoft Office is prone to a remote memory-corruption vulnerability; fixes are available.
January 10, 2017