Menu

Category Archives: Security

Articles about security

Google Discloses Unpatched Microsoft Vulnerability
Verizon knocks off $350M from Yahoo deal after breaches
Rook Security on Online Extortion
Windows Botnet Spreading Mirai Variant
Hacking group RTM able to divert bulk financial transfers with malware
Healthcare data breaches reach a ‘sizeable number of US consumers’

Approximately 26% of Americans have been compromised by healthcare data breaches, according to a new survey from Accenture. The post Healthcare data breaches reach a ‘sizeable number of US consumers’ appeared first on WeLiveSecurity

Surprise! Microsoft issues Flash patches for Internet Explorer, Edge
Prison for former sysadmin who hacked industrial facility and caused a million dollars worth of damage
How to protect your Microsoft account with two-step verification (2SV)
RTM: Stealthy group targeting remote banking system

Today, ESET has released a white paper on RTM, a cybercrime group that has been relentlessly targeting businesses in Russia and neighboring countries. The post RTM: Stealthy group targeting remote banking system appeared first on WeLiveSecurity

TeamSpy hackers get the crew back together after four-year hiatus
Kaspersky: No whiff of Linux in our OS because we need new start to secure IoT
Intent-Based Security Gains Momentum at RSA
Would killing Bitcoin end ransomware?
12 steps to small business security
The 7 security threats to technology that scare experts the most
RSA: Elite cryptographers scoff at idea that law enforcement can ‘overcome’ encryption
Build your security defense on data, not guesswork

One of the biggest problems with security defenses is the lack of concrete data to measure the effectiveness of mitigations against threats. In almost any other industry, the dearth of data would be embarrassing. As I’ve noted before, every organization needs to develop a data-driven security defense. Such a defense uses a company’s own threat intelligence to […]

Java and Python have unpatched firewall-crossing FTP SNAFU
EA Servers Go Down; Battlefield 1 Servers Facing Outage

LinuxSecurity.com: Multiple vulnerabilities have been found in tcpdump, the worst of which may allow execution of arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in PHP, the worst of which could lead to arbitrary code execution or cause a Denial of Service condition.

LinuxSecurity.com: Multiple vulnerabilities have been found in Xen, the worst of which could lead to the execution of arbitrary code on the host system.

LinuxSecurity.com: Multiple vulnerabilities have been found in Nagios, the worst of which could lead to privilege escalation.

LinuxSecurity.com: Multiple vulnerabilities have been found in QEMU, the worst of which could lead to the execution of arbitrary code on the host system.

LinuxSecurity.com: Multiple vulnerabilities have been found in libass, the worst of which have unknown impacts.

LinuxSecurity.com: Multiple vulnerabilities have been found in LibVNCServer/LibVNCClient, the worst of which allows remote attackers to execute arbitrary code when connecting to a malicious server.

LinuxSecurity.com: Multiple vulnerabilities have been found in Dropbear, the worst of which allows remote attackers to execute arbitrary code.

Gun Retailer Airsoft GI’s Forum Hacked; 65,000 User Accounts Leaked

LinuxSecurity.com: A vulnerability in Opus could cause memory corruption.

LinuxSecurity.com: Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.

LinuxSecurity.com: A buffer overflow in TigerVNC might allow remote attackers to execute arbitrary code.

Hacker defaces Donald Trump fundraising site via subdomain takeover attack

LinuxSecurity.com: Security fix for CVE-2017-3135

LinuxSecurity.com: Multiple vulnerabilities have been found in MuPDF, the worst of which allows remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in the GNU C Library, the worst of which allows context-dependent attackers to execute arbitrary code.

LinuxSecurity.com: A vulnerability in NTFS-3G allows local users to gain root privileges.

LinuxSecurity.com: Security fix for CVE-2017-5595

LinuxSecurity.com: Security fix for CVE-2017-5595

LinuxSecurity.com: Update to 0.6.1

It’s too easy to steal a second-hand connected car

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low.

Is your child a hacker? Liverpudlian parents get warning signs checklist
Beeps, roots and leaves: Car-controlling Android apps create theft risk
Support scams now reign in Spain

If you thought that the problem of tech support scams was disappearing, think again, says Josep Albors and David Harley. The post Support scams now reign in Spain appeared first on WeLiveSecurity

Donald Trump Website Hacked by Iraqi Hacker
Nowhere to hide: 9 new hacks coming to get you
Trends in Android ransomware

2016 saw interesting developments within the Android ransomware scene. Ransomware emerged as one of the most pressing cybersecurity issues on the mobile platform. The post Trends in Android ransomware appeared first on WeLiveSecurity

LinuxSecurity.com: An update for openssl is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…]

Connected car in the second-hand lot? Don’t buy it if you’re not hack-savvy
Google goes public about unpatched Windows vulnerability
German parents urged to destroy data-collecting toy doll
Google bellows bug news after Microsoft sails past fix deadline

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Goodbye Spy Toy: Germany Bans My Friend Cayla Doll
Charging Smartphone in Public Ports Leads to Data Hack — So Let’s Stop

LinuxSecurity.com: Backport upstream fix to force limit and offset to be numeric

LinuxSecurity.com: Backport upstream fix to force limit and offset to be numeric

LinuxSecurity.com: USN-3199-1 introduced a regression in the Python Cryptography Toolkit whichcaused programs which relied on the original behavior to fail.

LinuxSecurity.com: Multiple vulnerabilities have been found in ImageMagick, the worst of which allows remote attackers to execute arbitrary code.

LinuxSecurity.com: Programs using the Python Cryptography Toolkit could be made to crash or runprograms if they receive specially crafted network traffic or other input.

LinuxSecurity.com: Security Report Summary

Apple May Introduce Facial Recognition Instead of Touch ID in iPhone 8
Florida Man jailed for 4 years after raking in a million bucks from spam
Hackers Selling Undetectable Proton Malware for macOS in 40 BTC
RSA – day 3: Security for those who don’t know what that means

Here at RSA, an increasing amount of security purchases are made by those who got the task dumped in their laps, but who have little or no formal or practical training. The post RSA – day 3: Security for those who don’t know what that means appeared first on WeLiveSecurity

Paper factory fired its sysadmin. He returned via VPN and caused $1m in damage. Now jailed
RSA demo: TruStar anonymizes incident data to improve information exchange
Why cyber-robotics is key to cybersecurity’s future
Probe President Trump and his crappy Samsung Twitter-o-phone, demand angry congressfolk

security update

Smash up your kid’s Bluetooth-connected Cayla ‘surveillance’ doll, Germany urges parents
IDF targeted by sophisticated cyber espionage through Android devices
Squirrels, Not Hackers, Pose Biggest Threat to Electric Grid

Risk Level: Very Low. Type: Trojan.

US account holders more likely to switch banks following fraud
SMTP Strict Transport Security Coming Soon to Gmail, Other Webmail Providers
Cris Thomas on Cyberwar Rhetoric
To Spy or Not to Spy; Congress to Decide

Outerwear Online Retailer Hit with Cyber Attack Columbia Sportswear announced that they were in the midst of investigating a cyberattack on one of its subsidiary retail sites, prAna, a brand that was acquired by Columbia in 2014. While officials still haven’t confirmed the type of attack, they have stated that it shouldn’t affect any of […]

8 things you should know about spyware

WeLiveSecurity takes a look at what you need to know about spyware – the malware secretly prying on your online activities. The post 8 things you should know about spyware appeared first on WeLiveSecurity

Mystery deepens over Android spyware targeting Israeli soldiers
Tips for negotiating with cyber extortionists
Experts at RSA give their best cybersecurity advice
New Royal Navy Wildcat helicopters can’t transmit vital data
Xen Project asks to limit security vulnerability advisories
How Google reinvented security and eliminated the need for firewalls
RSA 2017 hit parade: All the cool new security tools
RSA 2017 – day 2: Attacking yourself

Want to find holes in your security perimeter? What better way than to attempt to attack yourself, and here at RSA there are plenty of tools to help. The post RSA 2017 – day 2: Attacking yourself appeared first on WeLiveSecurity

Graham Cluley named most entertaining security blog

Successful companies stand on the shoulders of great customer service. At Webroot, we aim to consistently be the best, and to do so, we rely heavily on our highly skilled, globally-based technical support team to delight our customers at every turn. At Webroot, we utilize a follow-the-sun approach with customer service support staff in Australia, […]

US visitors must hand over Twitter, Facebook handles by law – newbie Rep starts ball rolling
Don’t panic over cyber-terrorism: Daesh-bags still at script kiddie level

security update

Corpse of US anti-spying law unearthed, reanimated, pushed blinking into the sunlight
Bangkok Police Arrests Ukrainian Hacker Planning ATM Malware Attack
Divide Between Work, Personal Data on Android Breached