Menu

Category Archives: Security

Articles about security

How to better protect your Instagram account using two-step verification (2SV)
Chinese Video Service Giant Youku Hacked; 100M Accounts Sold on Dark Web

Risk Level: Very Low. Type: Trojan.

Cars with Vulnerable WIFI Dongle can be Hacked via Bluetooth
Someone Hacked Far-Right Group Britain First’ Website, Twitter and YouTube
New Leak from Shadow Brokers Show NSA targeted Windows and Banks
SEI CERT C++ Coding Standard
Microsoft begins denying updates to some Windows 7 users
ShadowBrokers Expose NSA Access to SWIFT Service Bureaus

The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. Microsoft Patches Critical Zero-day Vulnerability On Tuesday of this week, Microsoft released a patch for a […]

Hackers using leaked hacking tools to target Governments
Samsung taps DOD tech veteran to head enterprise push

LinuxSecurity.com:

LinuxSecurity.com:

LinuxSecurity.com:

OurMine strikes again, hundreds of popular Youtube accounts hacked
Hacked Nude Photos of Rosario Dawson, Miley Cyrus, Kate Hudson Leaked
Google Making Life Difficult for Ransomware to Thrive on Android
Threatpost News Wrap, April 14, 2017
10 ways to prepare your organization for GDPR

GDPR is coming into play in May 2018, but a lot of companies remain unprepared, which could have implications on how they process data. The post 10 ways to prepare your organization for GDPR appeared first on WeLiveSecurity

Stories From Two Years in an IoT Honeypot
How secure is your supply chain?
Exploit Kit Activity Quiets, But Is Far From Silent

When you meet Gary Hayslip, don’t let his calm demeanor fool you — underneath is a deep passion for and understanding of the “Internet of Everything” or IoE. To say his 25-year career in information security is impressive would be an understatement. From serving as Command Information Security Officer in the United States Navy to […]

Inmates Caught Hacking into Ohio Correctional Facility Network System

LinuxSecurity.com: New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…]

Type: Vulnerability. libjpeg and libjpeg-turbo libraries are prone to a memory-corruption vulnerability; fixes are available.

New Linux SSH server shows off Golang’s infrastructure power
FDA Demands St. Jude Take Action on Medical Device Security
Microsoft’s critical Windows and Office patches present a panoply of problems

LinuxSecurity.com:

LinuxSecurity.com:

LinuxSecurity.com:

LinuxSecurity.com:

LinuxSecurity.com:

LinuxSecurity.com:

LinuxSecurity.com: An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…]

LinuxSecurity.com: An update for libreoffice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…]

LinuxSecurity.com: An update for tomcat is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…]

LinuxSecurity.com: An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…]

LinuxSecurity.com: An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com:

DDoS attacks abusing exposed LDAP servers on the rise
14% off APC 11-Outlet Surge Protector with USB Charging Ports and SurgeArrest – Deal Alert
Your AGA ovens can be hacked; turned on and off remotely because IoT
‘High Risk’ Zero Day Leaves 200,000 Magento Merchants Vulnerable
Attackers can guess our passcode “just from the way we tilt our phone”
Don’t let hackers ruin your roast! Security flaws found in AGA cooker app
Selling spyware, making millions, breaking sanctions…
Microsoft zero-day vulnerability was being exploited for cyber-espionage
Real or virtual currency? Scammers accept both

ESET researchers have discovered and reported scammers stealing PayPal and Paxful credentials disguised as a tool for YouTube monetization, and a bitcoin trading marketplace. The post Real or virtual currency? Scammers accept both appeared first on WeLiveSecurity

Hacked home routers are trying to brute force their way into WordPress websites
Microsoft kills off security bulletins after several stays
Smashing Security #016: Wonga wronga!

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Netflix’s HTTPS Update Can’t Combat Passive Traffic Analysis Attacks

security update

Hackers Cloning Popular Android Apps to Infect Users with Malware
Phone Hack Uses Sensors To Steal PINs
Shadow Brokers dump contained Solaris hacking tools
Office Zero Day Delivering FINSPY Spyware to Victims in Russia
Microsoft Word exploit linked to cyberspying in Ukraine conflict

LinuxSecurity.com: Security Report Summary

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low.

Risk Level: Very Low. Type: Trojan.

New tech allows researchers to bypass fingerprint scanner on smartphone
Internet Society: Encryption is key to growing world economy

The Internet Society says that current perceptions of data encryption are misguided and need to change for the sake of the digital economy. The post Internet Society: Encryption is key to growing world economy appeared first on WeLiveSecurity

For a while the infamous Mirai botnet could have exploited your IoT devices to mine Bitcoins
SAP Updates Two-Year-Old Patch for TREX Vulnerability
Microsoft fixes 45 flaws, including three actively exploited vulnerabilities
Determining your risk
Inmates hid self-built PCs in the ceiling and connected them to prison network
Don’t buy the elixir of youth: Machine learning is not magic

There is no magic in machine learning. It’s a field of computer science that gives computers the ability to find patterns in huge amounts of data. The post Don’t buy the elixir of youth: Machine learning is not magic appeared first on WeLiveSecurity

Insider hacks Marriott hotel reservation system; slashes rates up to 95%
Mark Shuttleworth says some free software folk are ‘deeply anti-social’ and ‘love to hate’
Microsoft patches Word zero-day vulnerability being actively exploited in attacks
Microsoft Patches Three Vulnerabilities Under Attack
Fortinet upgrades for better cloud, SD-WAN protection

security update

FBI Kills Kelihos Botnet after Russian Hacker Arrested in Spain
Adobe Patches 59 Vulnerabilities Across Flash, Reader, Photoshop
Microsoft Patches Word Zero-Day Spreading Dridex Malware

LinuxSecurity.com: Multiple vulnerabilities have been found in X.Org server and libraries, the worse of which allowing local attackers to execute arbitrary code.

LinuxSecurity.com: New vim packages are available for Slackware 14.0 and 14.1 to fix a security issue. [More Info…]

LinuxSecurity.com: Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in QEMU, the worst of which could the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition.

LinuxSecurity.com: Security Report Summary

Triple malware threat delivered by USPS-themed spam
Spammer’s Arrest Puts End to Kelihos Botnet
Graham Cluley speaking at the Foursys SecureTour, up and down the UK
DNS record will help prevent unauthorized SSL certificates
Third-Party Sellers From Amazon Hacked by Cyber Criminals
Tools Used by Lamberts APT Found in Vault 7 Dumps
Rollback of FCC privacy requirements could have broad repercussions
Fighting post-truth with reality in cybersecurity

Welcome to the beginning of a new series of short articles focused on the currents state of AI, all the ins and outs of machine learning, and how it affects cybersecurity. The post Fighting post-truth with reality in cybersecurity appeared first on WeLiveSecurity