Type: Vulnerability. Microsoft Office is prone to a remote memory-corruption vulnerability; fixes are available.
January 10, 2017
MongoDB Attacks Jump From Hundreds to 28,000 In Just Days
January 9, 2017
St. Jude Medical Patches Vulnerable Cardiac Devices
January 9, 2017
LinuxSecurity.com: Security Report Summary
January 9, 2017
LinuxSecurity.com: Security Report Summary
January 9, 2017
LinuxSecurity.com: MinGW cross compiled libpng 1.6.27 release, fixing a potential security issue.For details, see https://sourceforge.net/p/png-mng/mailman/message/35575076/
January 9, 2017
LinuxSecurity.com: This update fixes an old NULL pointer dereference bug in png_set_text_2()discovered and patched by Patrick Keshishian (CVE-2016-10087). The potential”NULL dereference” bug has existed in libpng since version 0.71 of June 26,1995. To be vulnerable, an application has to load a text chunk into the pngstructure, then delete all text, then add another text chunk […]
January 9, 2017
LinuxSecurity.com: Update —- Update to 0.11 —- Update —- Update. **WARNING:** if youare using your own config file, add “` include /etc/sway/config.d/* “` Atthe end of it, otherwise nothing will work on Wayland
January 9, 2017
LinuxSecurity.com: MinGW cross compiled libpng 1.6.27 release, fixing a potential security issue.For details, see https://sourceforge.net/p/png-mng/mailman/message/35575076/
January 9, 2017
LinuxSecurity.com: This update fixes an old NULL pointer dereference bug in png_set_text_2()discovered and patched by Patrick Keshishian (CVE-2016-10087). The potential”NULL dereference” bug has existed in libpng since version 0.71 of June 26,1995. To be vulnerable, an application has to load a text chunk into the pngstructure, then delete all text, then add another text chunk […]
January 9, 2017
Man pleads guilty to role in harassment scheme against senior US government officials
Justin Liverman, a student from North Carolina, has admitted collaborating in a harassment scheme targeting US officials and their families. The post Man pleads guilty to role in harassment scheme against senior US government officials appeared first on WeLiveSecurity
January 9, 2017
US Voting Systems Deemed Critical Infrastructure
January 9, 2017
Top cop: Strap Wi-Fi jammers to teen web crims as punishment
January 9, 2017
Drug Trade on Dark Web Lands Two Men into Jail
January 9, 2017
Connected car hacking: Who’s to blame?
ESET’s Cameron Camp just about recovered from the sensory overload that is CES to gather his thoughts on what was another fascinating event. The post Connected car hacking: Who’s to blame? appeared first on WeLiveSecurity
January 9, 2017
What a Locky Ransomware attack looks like
January 9, 2017
How to recover your system from a Ransomware attack
January 9, 2017
Open source server simplifies HTTPS, security certificates
January 9, 2017
Hacker publishes GitHub secret key hunter
January 9, 2017
Google caps punch-yourself-in-the-face malicious charger hack
January 9, 2017
VNC server library gets security fix
January 9, 2017
MongoDB ransom attacks soar, body count hits 27,000 in hours
January 9, 2017
Risk Level: Very Low. Type: Trojan.
January 9, 2017
security update
January 9, 2017
LinuxSecurity.com: Security Report Summary
January 8, 2017
How to respond to a ransomware infection
January 8, 2017
LinuxSecurity.com: Update to Samba 4.4.9 —- Security fix for CVE-2016-2125, CVE-2016-2126
January 8, 2017
LinuxSecurity.com: For changes see: https://www.mozilla.org/en-US/thunderbird/45.6.0/releasenotes/
January 8, 2017
LinuxSecurity.com: **Version 5.4.5** (2016-12-29) * SECURITY FIX: fixed CVE-2016-10074 bydisallowing potentially unsafe shell characters Prior to 5.4.5, the mailtransport (Swift_Transport_MailTransport) was vulnerable to passing arbitraryshell arguments if the “From”, “ReturnPath” or “Sender” header came from anon-trusted source, potentially allowing Remote Code Execution * deprecatedthe mail transport
January 8, 2017
Super Mario Run for Android? No, it’s malware
January 8, 2017
LinuxSecurity.com: **Version 5.4.5** (2016-12-29) * SECURITY FIX: fixed CVE-2016-10074 bydisallowing potentially unsafe shell characters Prior to 5.4.5, the mailtransport (Swift_Transport_MailTransport) was vulnerable to passing arbitraryshell arguments if the “From”, “ReturnPath” or “Sender” header came from anon-trusted source, potentially allowing Remote Code Execution * deprecatedthe mail transport
January 8, 2017
security update
January 8, 2017
security update
January 8, 2017
How to use “Find my iPhone” app to locate your smartphone
January 7, 2017
Now hiring: 1 million cybersecurity job openings in 2017
January 7, 2017
UK’s Largest Hosting firm 123-Reg ‘Pounded’ by DDoS Attack
January 7, 2017
FTC IoT privacy and security push points out D-Link router and webcam flaws
The US Federal Trade Commission has again acted on its serious concerns about data privacy and security in the Internet of Things (IoT). This time D-Link webcams and routers are the focus. Stephen Cobb puts this latest FTC move in context. The post FTC IoT privacy and security push points out D-Link router and webcam […]
January 7, 2017
security update
January 6, 2017
CIA director AOL email hacker coughs to crime
January 6, 2017
Risk Level: Very Low. Type: Trojan.
January 6, 2017
Risk Level: Very Low. Type: Trojan.
January 6, 2017
Risk Level: Very Low. Type: Trojan.
January 6, 2017
Risk Level: Very Low. Type: Trojan.
January 6, 2017
FireCrypt Ransomware Builder Found in Wild Researchers have discovered a new ransomware variant that uses “.firecrypt” as its amended extension once encryption has taken place. FireCrypt is compiled using a command line builder software that allows varying inputs and outputs to be determined by the author for a unique hash, as this allows for […]
January 6, 2017
Ransomware sleazeballs target UK schools
January 6, 2017
Children in a digital world ‘need lessons in online safety’
More needs to be done to better equip children for life in a digital world, according to a new report from England’s children’s commissioner. The post Children in a digital world ‘need lessons in online safety’ appeared first on WeLiveSecurity
January 6, 2017
MongoDB Databases being Targeted by Cyber-criminals for Ransom
January 6, 2017
3… 2…1… and 123-Reg hit by DDoSers. Again
January 6, 2017
Dodgy dealer on Amazon lures marks towards phishing site
January 6, 2017
Netgear unveils world’s easiest bug bounty
January 6, 2017
LinuxSecurity.com: New upstream release
January 6, 2017
LinuxSecurity.com: Update to the latest upstream release
January 6, 2017
LinuxSecurity.com: This update includes the latest stable release of _Apache Subversion_, version**1.9.5**. #### Client-side bugfixes: * fix accessing non-existent paths duringreintegrate merge * fix handling of newly secured subdirectories in workingcopy * info: remove trailing whitespace in –show-item=revision ([issue4660](http://subversion.tigris.org/issues/show_bug.cgi?id=4660)) * fix recordingwrong revisions for tree conflicts * gpg-agent: improve discovery of gpg-agentsockets * gpg-agent: fix […]
January 6, 2017
LinuxSecurity.com: Update to 4.5.1.
January 6, 2017
Risk Level: Very Low. Type: Trojan.
January 6, 2017
LinuxSecurity.com: For changes see: https://www.mozilla.org/en-US/thunderbird/45.6.0/releasenotes/
January 5, 2017
LinuxSecurity.com: **Version 5.2.21** (December 28th 2016) * Fix missed number update in versionfile – no functional changes —- **Version 5.2.20** (December 28th 2016) ***SECURITY** Critical security update for CVE-2016-10045 please update now!Thanks to [Dawid Golunski](https://legalhackers.com) and Paul Buonopane(Zenexer). —- ** Version 5.2.19** (December 26th 2016) * Minor cleanup** Version 5.2.18** (December 24th 2016) * **SECURITY** […]
January 5, 2017
Tech Support Scammers Targeting Mac Users with DoS attacks
January 5, 2017
Smashing Security #002: ‘Invest in carrier pigeons’
January 5, 2017
security update
January 5, 2017
LinuxSecurity.com: An update for puppet-tripleo is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact [More…]
January 5, 2017
Netgear launches Bug Bounty program; offering lucrative rewards
January 5, 2017
LinuxSecurity.com: Security Report Summary
January 5, 2017
LinuxSecurity.com: CVE-2016-3189 bzip2: heap use after free in bzip2recover
January 5, 2017
LinuxSecurity.com: libpng 1.6.27 release, fixing a potential security issue. For details, seehttps://sourceforge.net/p/png-mng/mailman/message/35575076/
January 5, 2017
LinuxSecurity.com: Update to 2.46 Fixes various security issues, seehttp://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for moreinfo. No more includes Chatzilla and DOM Inspector in the package — installthem yourself now (as usual other addons) from https://addons.mozilla.org
January 5, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Mozilla Firefox and Thunderbird the worst of which could lead to the execution of arbitrary code.
January 5, 2017
Spy code dormant for three years resurfaces in two new variants
January 5, 2017
KillDisk now targeting Linux: Demands $250K ransom, but can’t decrypt
ESET has discovered a Linux variant of the KillDisk component that renders Linux machines unbootable, while encrypting files and requesting a large ransom at the same time. The post KillDisk now targeting Linux: Demands $250K ransom, but can’t decrypt appeared first on WeLiveSecurity
January 5, 2017
By now, everybody has probably heard of CryptoLocker. It makes sense that CryptoLocker would get a fair amount of media attention, since it’s been involved in several high-profile hacks, but there are a number of other players on the ransomware stage that deserve a place of distinction among the list of players. Managed service […]
January 5, 2017
Schools warned about cold-calling ransomware attacks
January 5, 2017
Windows exploitation in 2016
We are pleased to present our annual report Windows exploitation in 2016. In this latest version of our report, we offer a fresh look at modern security features in Windows 10. The post Windows exploitation in 2016 appeared first on WeLiveSecurity
January 5, 2017
Security expert: Ransomware took in $1 billion in 2016
January 5, 2017
LG threatens to put Wi-Fi in every appliance it releases in 2017
January 5, 2017