Menu

Category Archives: Security

Articles about security

Cloudbleed: Big web brands leaked crypto keys, personal secrets thanks to Cloudflare bug
Someone from China is Distributing Mirai Malware Through Windows Botnet
Policy Experts Push To Make Vulnerability Equities Process Law
I was authorized to trash my employer’s network, sysadmin tells court
US ‘security’ biz trio Sentinel Labs, Vir2us, SpyChatter accused of lying about certification

security update

BitTorrent distribution sites dropping crypto-ransomware on macOS
Google kills SHA-1 with successful collision attack
‘First ever’ SHA-1 hash collision calculated. All it took were five clever brains… and 6,610 years of processor time
Breaking and protecting devops tool chains
Bruce Schneier and the call for “public service technologists”
First Practical SHA-1 Collision Attack Arrives

LinuxSecurity.com: An update for python-oslo-middleware is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: This release fixes pcregrep multi-line matching with –only-matching option, acrash when JIT-compiling some patterns (CVE-2017-6004) and a possible bufferoverflow when formatting a pcregrep error message.

LinuxSecurity.com: it was found that KDE plasma does not honor the setting for prompting whenexecuting executable files on the desktop. This update resolves this issue.

LinuxSecurity.com: Security fix for CVE-2016-10132, CVE-2016-10133, CVE-2016-10141, CVE-2017-5627,CVE-2017-5628.

LinuxSecurity.com: Update to the latest version, fixes a security issue.

LinuxSecurity.com: Security fix for CVE-2016-8745

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…]

LinuxSecurity.com: it was found that KDE plasma does not honor the setting for prompting whenexecuting executable files on the desktop. This update resolves this issue.

LinuxSecurity.com: Security fix for CVE-2016-10132, CVE-2016-10133, CVE-2016-10141, CVE-2017-5627,CVE-2017-5628.

LinuxSecurity.com: Update to the latest version, fixes a security issue.

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…]

Risk Level: Very Low. Type: Trojan.

Ex-employees sued for £15m over data slurpage ordered to pay up just £2
10 Powerful But Not Yet Promoted Antivirus for PC, Mac, Android, iPhone
Barely 1% of Android users are running Nougat, as Apple shows how to update devices properly
Impact of New Linux Kernel DCCP Vulnerability Limited
Smashing Security #009: False flags and hacker clues
Java, Python FTP Injection Attacks Bypass Firewalls
Destructive Mac ransomware spread as cracks to pirate commercial software
Publicly Disclosed Windows Vulnerabilities Await Patches
Released Android malware source code used to run a banking botnet

ESET researchers have discovered a new variant of botnet-forming Android banking malware based on source code made public a couple of months ago. The post Released Android malware source code used to run a banking botnet appeared first on WeLiveSecurity

Deutsche Telekom hack suspect arrested at London airport
At death’s door for years, widely used SHA1 function is now dead
Linux’s decade-old flaw: Major distros move to patch serious kernel bug
Salted Hash: RSAC 2017 Recap
How to scrub your private data from ‘people finder’ sites
‘Zombie script’ deluges Internet Explorer 11 with pop-up alerts until user closes tab
How to Install TOR on Android and iOS Devices
Microsoft catches up to Valentine’s Day Flash flaw massacre
Boffins exfiltrate data by blinking hard drives’ LEDs
Linux kernel gets patch for 11-year-old local-root-hole security bug
Firefox certificate cache leaks user information
US judge halts mass fingerprint harvesting by cops to unlock iPhones

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

New MacOS ransomware spotted in the wild
Criminals Monetizing Attacks Against Unpatched WordPress Sites
Chrome Users Beware- Do Not Fall Prey to Missing Font Malware Campaign
Netflix Stethoscope gives users a BYOD security checkup
Blundering Boeing bod blabbed spreadsheet of 36,000 coworkers’ personal details in email
BugDrop Malware Campaign Obtains Data by Compromising PC Microphones
Google Upspin Secure File-Sharing Released to Open Source
Intermediate CA Caching Could Be Used to Fingerprint Firefox Users

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Android malware: It doesn’t hurt to know about this

Android malware is an increasing problem … but worry not – n this infographic, we highlight some of the key things you should be aware of. The post Android malware: It doesn’t hurt to know about this appeared first on WeLiveSecurity

Gordon Ramsay’s father-in-law charged with hacking celebrity chef’s email
Privacy concerns over gaps in eBay crypto
Good news and bad news on the Microsoft patch front
South Korea’s Asiana Airlines Website Hacked with Pro-Serbian Messages
Operation BugDrop – hackers steal gigabytes of data from organisations, record conversations
Sunny with a chance of stolen credentials: Malicious weather app found on Google Play

ESET has spotted a new banking malware on Google Play. Disguised as a weather forecast app, it steals banking credentials and locks screens. The post Sunny with a chance of stolen credentials: Malicious weather app found on Google Play appeared first on WeLiveSecurity

Infosec firm NCC Group launches review over crap financials
New crypto-ransomware hits macOS

This last month we have seen a new ransomware for Mac. Written in Swift, it is distributed on BitTorrent distribution site as “Patcher” for pirating popular software. The post New crypto-ransomware hits macOS appeared first on WeLiveSecurity

7 Wi-Fi vulnerabilities beyond weak passwords
Why you need a bug bounty program
“Secure” Trump website defaced by hacker claiming to be from Iraq

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: Security Report Summary

Netflix treats security ills with Stethoscope: Open-source self-probing tool
How’s your online bank security looking? The Dutch studied theirs and… yeah, not great
DomainMonster mash: Hundreds of websites vandalized after Brit web host server hacked

LinuxSecurity.com: Ruby Archive::Tar::Minitar is vulnerable to a directory traversal attack.

LinuxSecurity.com: Multiple vulnerabilities have been found in GPL Ghostscript, the worst of which may allow execution of arbitrary code.

LinuxSecurity.com: Several security issues were fixed in the kernel.

LinuxSecurity.com: Several security issues were fixed in the kernel.

LinuxSecurity.com: Several security issues were fixed in the kernel.

LinuxSecurity.com: Several security issues were fixed in the kernel.

LinuxSecurity.com: Several security issues were fixed in the kernel.

Talos opens box, three Aerospike vulns fly out
Researchers offer simple scheme to stop the next Stuxnet
Smashing Security podcast: Macs and malware
Tiny “Spyslide Webcam Cover” Protects Your Privacy From Hackers, Spies
Microsoft rolls out KB 4010250 Flash Player update for Windows 8.1 and 10
US Homeland Security is so secure even its own staff can’t log in
Check How Facebook AI Monitors Your Activities with this Crazy Chrome Extension
The real problem with the security industry
Data Stealing Malware TeamSpy Resurfaces in Spam Campaign
OpenSSL Update Fixes High-Severity DoS Vulnerability
‘Hey, Homeland Security. Don’t you dare demand Twitter, Facebook passwords at the border’

Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.

You are not alone; YouTube is down for everyone (Updated)
Java and Python FTP attacks can punch holes through firewalls
TeamSpy malware targeting users through malicious TeamViewer app