Menu

Category Archives: Security

Articles about security

Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows Uniscribe is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows Uniscribe is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows Uniscribe is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows Uniscribe is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.

Hailing frequencies open! WikiLeaks pings Microsoft after promise to share CIA tools

LinuxSecurity.com: Security fix for CVE-2016-9422, CVE-2016-9423, CVE-2016-9424, CVE-2016-9425,CVE-2016-9428, CVE-2016-9426, CVE-2016-9429, CVE-2016-9430, CVE-2016-9431,CVE-2016-9432, CVE-2016-9433, CVE-2016-9434, CVE-2016-9435, CVE-2016-9436,CVE-2016-9437, CVE-2016-9438, CVE-2016-9439, CVE-2016-9440, CVE-2016-9441,CVE-2016-9442, CVE-2016-9443, CVE-2016-9622, CVE-2016-9623, CVE-2016-9624,CVE-2016-9625, CVE-2016-9626, CVE-2016-9627, CVE-2016-9628, CVE-2016-9629,CVE-2016-9631, CVE-2016-9630, CVE-2016-9632, CVE-2016-9633 And new upstream20170102 as well

LinuxSecurity.com: Security fix for integer underflow

Latest Google Chrome Scam Aims At Stealing Credit Card Data
Sad fact of the day: Most people still don’t know how to protect themselves online
38 Android Devices Infected with Malware Preinstalled in Supply Chain

security update

LinuxSecurity.com: This update fixes a possible heap buffer overflow.

LinuxSecurity.com: For changes see: https://www.mozilla.org/en-US/thunderbird/45.8.0/releasenotes/

LinuxSecurity.com: Security update for integer underflow

LinuxSecurity.com: * various security relevant flaws

Facebook, Instagram: No, you can’t auto-slurp our profiles (cough, cough, border officials)
Credit Card Scrapers Continue to Target Magento
Nintendo Switch Can Be Hacked, Thanks to iOS 9.3 Webkit Exploit
March Android Security Update Breaks SafetyNet, Android Pay

Risk Level: Very Low. Type: Trojan.

Telepresence robot ‘hackable’ – security researchers
Telepresence Robots Patched Against Data Leaks
Most of 2016’s holes had fixes the day we knew about ’em. Did we patch? Did we @£$%
Malware found pre-installed on dozens of different Android devices
Cody Pierce on the Future of Exploit Development
How much are vendor security assurances worth after the CIA leaks?
Notepad++ Issues Fix After CIA Attack Revealed in Vault7 Documents
Thousands of NHS staff details lost in breach of IT contractor’s server
Challenges and implications of cybersecurity legislation

Cybersecurity legislation: organization, collaboration and diffusion across the globe, and working towards the populization of cybersecurity culture The post Challenges and implications of cybersecurity legislation appeared first on WeLiveSecurity

News of yet another breach at Target or Yahoo seems pretty commonplace these days. Sometimes, the frequency of big, newsworthy hacks can make us forget about more personal threats we face: the people close to us who have easy access to our financial info, social media accounts, online identity, and even our computer password. Exponential […]

IDG Contributor Network: Preparing for the professional cybercrime industry
Disaster recovery: How is your business set up to survive an outage?
Typo in IP address led to innocent father’s arrest for paedophilia
Setting up DLP features for email security
How Android and iOS devices really get hacked
This is where UK’s Navy will park its 75,000-ton aircraft carriers
Canadians can file online tax returns again after emergency outage
Malware infecting Androids somewhere in the supply chain
Celebrity Websites Hacked with Messages Against ISIS and Turkey
WikiLeaks says it will work with software vendors to fix CIA zero-day exploits… but when?
Security Flaws in MAC Address Randomization Technique makes iOS, Android Devices Vulnerable to Tracking
#OpBlueWhale: “Anonymous” Urges Teens to Quit Playing Suicide Game
Spy satellite scientist sent down for a year for stowing secrets at home
The Best Alternatives Operating Systems
‘Password rules are bullsh*t!’ Stackoverflow Jeff’s rage overflows
Official: America auto-scanned visitors’ social media profiles. Also: It didn’t work properly
New Linux malware hijacks one vendor’s IoT devices by exploiting CGI bug
FCC under fire for trying to ditch cybersecurity
IDG Contributor Network: Mobile devices: The ‘last mile’ to enterprise biometrics

security update

Home Depot agrees to $25 million settlement for data breach

US retail giant Home Depot is set to pay a $25 million settlement in relation to a data breach suffered in 2014. The post Home Depot agrees to $25 million settlement for data breach appeared first on WeLiveSecurity

The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. Microsoft Services Go Offline Was I the only one who wasn’t able to access my Xbox […]

Google Chrome 57 Browser Update Patches ‘High’ Severity Flaws
Threatpost News Wrap, March 10, 2017
Apache Attack Traffic Dropping, Limited to Few Sources
Payments Giant Verifone Suffers Data Breach
Privilege Escalation Flaw Patched in Schneider Wonderware
TeamViewer stopped working? Let me guess, your ISP is TalkTalk…
Mobile security: The reality of malware … augmented

What awaits us in terms of mobile security trends? Throughout this article, we will discuss how risks might develop in the near future. The post Mobile security: The reality of malware … augmented appeared first on WeLiveSecurity

The perils of working from home with young children
WikiLeaks will share CIA hacking details with companies, but can they use it?
Zero Days Have Staying Power
WikiLeaks promises to supply CIA’s hacking tool code to vendors
Google tries to beat AWS at cloud security
Hacktivist or script kiddy? Know your 10 types of hacker
Android YouTube download apps flood devices with ads to secure high ratings for droppers
‘Nigerian princes’ snatch billions from Western biz via fake email – Interpol
MAC randomization: A massive failure that leaves iPhones, Android mobes open to tracking

security update

What a Flake: Congress mulls trashing privacy rules, letting ISPs go to town on your data
Want a Career in Cybersecurity? Find Out Which Degrees Can Get You There
Hundreds of Thousands of Vulnerable IP Cameras Easy Target for Botnet, Researcher Says
640,000 Decrypted PlayStation Accounts Being Sold on DarkWeb

security update

The convenience of having some kind of internet connection on more and more of the devices we use each day is undeniable. However, without proper security vetting, this convenience may come at a hefty price. In the past year alone, we’ve seen millions of routers, DVRs, IP cameras, cars, and more get hacked and either […]

Zero-days? Sexy, sure, but crap passwords and phishing are probably more pressing

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Attacks Heating Up Against Apache Struts 2 Vulnerability
Consumer Reports launches new privacy and data security standard

The US-based nonprofit organization Consumer Reports has come up with a new standard that aims to boost consumer confidence in privacy and data security. The post Consumer Reports launches new privacy and data security standard appeared first on WeLiveSecurity

Instagram phishing apps pulled from Google Play
Brit ISP TalkTalk blocks control tool TeamViewer
Google Patched Hundreds of Android Security Flaws in March Update
Apache Struts bug is under attack, patch now
New Instagram credential stealers discovered on Google Play

ESET researchers discovered 13 new Instagram credential stealers on Google play and looked into the motivations behind their fraudulent schemes. The post New Instagram credential stealers discovered on Google Play appeared first on WeLiveSecurity

Royal Navy’s newest ship formally named in Glasgow yard
Smashing Security #011: WikiLeaks and the CIA
Bots: Biggest player on the cybercrime block
Hackers exploit Apache Struts vulnerability to compromise corporate web servers
WikiLeaks publishes docs from what it says is trove of CIA hacking tools
Google’s ‘SHA-1 Countdown Clock’ Could Undermine Enterprise Security
Ways in which to plug the infosec talent gap

ESET’s Lysa Myers looks at the shortage of qualified information security talent to fill positions, discussing ways in which to plug the infosec talent gap. The post Ways in which to plug the infosec talent gap appeared first on WeLiveSecurity

Oops! 185,000-plus Wi-Fi cameras on the web with insecure admin panels

In honor of International Women’s Day, we hosted our quarterly Women of Webroot meeting this afternoon at our World Headquarters in Broomfield. Women of Webroot brings together women from all parts of our business to celebrate wins and provide support for issues women in tech may face. Although there are more women in technology-related positions […]

Apache Struts 2 needs patching, without delay. It’s under attack now
Buggy backups! Unplug your WD My Cloud until these flaws are fixed

Risk Level: Very Low. Type: Trojan.