Menu

Category Archives: Security

Articles about security

Ransomware attack hits St Louis Public library
Threatpost News Wrap, January 20, 2017
Trump’s ‘cyber tsar’ Giuliani among creds leaked in mass hacks
Google pushed developers to fix security flaws in 275,000 Android apps
Email Encryption Service Provider ‘ProtonMail’ Now on Tor

MongoDB Hacks Spreading Fast In the past few weeks, researchers have been monitoring the steady rise of hacked MongoDB installations, now surpassing over 28,000 individual systems. While the attacks started with ransoming back the stolen data, the attackers have now begun simply deleting the information from the database and leaving the ransom note for payment […]

Attackers start wiping data from CouchDB and Hadoop databases
How to wake the enterprise from IoT security nightmares
Microsoft’s standing to sue over secret US data requests in question
Fake news alert! Internet breaches are not cloud breaches
Unbreakable Locky ransomware is on the march again
Shocking crime surge – THE TRUTH: England, Wales stats now include hacking and fraud

LinuxSecurity.com: An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…]

Viral Chinese selfie app Meitu phones home with personal data
Operator of DDoS protection service named as Mirai author
Smashing Security #004: ‘You don’t mess with Brian Krebs’
Bring down the White House’s website for Trump’s inauguration, urges software engineer
The Changing Face of Carbanak
Google Maps Will Soon Find Parking Spot for You

LinuxSecurity.com: An update for python-XStatic-jquery-ui is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: An update for openstack-cinder is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: Updated openstack-cinder packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7. [More…]

LinuxSecurity.com: An update for openstack-cinder is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7. Red Hat Product Security has rated this update as having a security impact [More…]

ProtonMail Gets Own Tor-Accessible .Onion Hidden Service
Locky Limps Back into Action After Lull

Ransomware as a Service (RaaS) has been growing steadily since it made its debut in 2015 with Tox. With the new Satan service, it’s easier than ever. The idea is to use this web portal to contract threat actors to create new ransomware samples for distribution via the desired attack vector. This allows any potential […]

Cybersecurity skills shortage ‘still a global problem’

There are signs of improvement in the global cybersecurity skills gap, but serious problems still remain, a new report finds. The post Cybersecurity skills shortage ‘still a global problem’ appeared first on WeLiveSecurity

Risk Level: Very Low. Type: Trojan.

Samsung SmartCam owners warned of hacker hijack vulnerability
Quimitchin Malware Targeting Mac Users also Compatible with Linux
‘Beeeellion-dollar’ mastercrooks in hotel, restaurant blitzkrieg
Facebook, Researcher at Odds Over Messenger Issue
Android Scoring System Roots Out Malicious, Harmful Apps
Justine Bone on St. Jude Vulnerabilities and Medical Device Security
Adobe Acrobat auto-installed a vulnerable Chrome extension on Windows PCs
Trump inauguration DDoS protest is ‘illegal’, warn securobods
How to Keep Hackers out of Your Linux Machine Part 1: Top Two Security Tips
Google Infrastructure Security Design Overview
Oracle to Java devs: Stop signing JAR files with MD5
ProtonMail launches Tor hidden service to dodge totalitarian censorship
What’s the biggest danger to the power grid? Hackers? Terrorists? Er, squirrels
Chrome dev explains how modern browsers make secure UI just about impossible
Insecure Hadoop installs next in ‘net scum crosshairs
Adobe’s naughty Chrome telemetry code had XSS problem

Risk Level: Very Low.

Risk Level: Very Low. Type: Trojan.

security update

Silence is golden: How Google hunts Android malware in the wild
Hacker Exploits Remote Code Execution Bug to Breach Facebook Security
Carbanak Using Google Services for Command and Control
Skills gap could hold back blockchain, AI, IoT advancements in 2017
College fires IT admin, loses access to Google email, successfully sues IT admin for $250,000
Docker Patches Container Escape Vulnerability
Oracle Patches 270 Vulnerabilities in Year’s First Critical Patch Update

“Highest average score for ease of use, quality of support, and […] requirements in endpoint protection.” That’s how Marty Duffy, Director of Research at G2 Crowd, describes Webroot after seeing the results of this year’s G2 Crowd survey on Best Software for IT Teams 2017. We’d be lying if we said we weren’t over the […]

LinuxSecurity.com: **Version 5.2.22** (January 5th 2017) * **SECURITY** Fix[CVE-2017-5223](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5223),local file disclosure vulnerability if content passed to `msgHTML()` is sourcedfrom unfiltered user input. Reported by Yongxiang Li of Asiasecurity. The fixfor this means that calls to `msgHTML()` without a `$basedir` will not importimages with relative URLs, and relative URLs containing `..` will be ignored. *Add simple […]

LinuxSecurity.com: This new point release fixes a security vulnerability in wrestool. For furtherdetails see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850017

LinuxSecurity.com: Security fix for CVE-2016-9888

LinuxSecurity.com: This new point release fixes a security vulnerability in wrestool. For furtherdetails see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850017

LinuxSecurity.com: An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…]

LinuxSecurity.com: An update for kernel-rt is now available for Red Hat Enterprise MRG 2.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…]

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…]

LinuxSecurity.com: An update for qemu-kvm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which [More…]

UK’s ICO releases new guidelines for becoming GDPR ready

The UK’s ICO has released a new set of guidelines aimed at ensuring companies are adequately prepared for the introduction of the GDPR. The post UK’s ICO releases new guidelines for becoming GDPR ready appeared first on WeLiveSecurity

Cyber Criminals Held Cancer Services Computers for Ransom

Risk Level: Very Low. Type: Trojan.

Remote code execution vulnerability affecting Facebook’s servers earns researcher $40,000
Oracle patches raft of vulnerabilities in business applications
‘Ancient’ Mac backdoor discovered that targets medical research firms
Clash of Clans’ Developer “Supercell” Hacked; 1.1 Million Accounts Stolen
Not lovin’ it! Researcher finds way to steal McDonald’s users’ passwords
Hacker claims our private cell number on Facebook may not be so private
How—and why—you should use a VPN any time you hop on the internet
If you’re going to use Windows, it makes security sense to use Windows 10
Passwords: A long goodbye
Ooooh, that’s NASty. Security-watchers warn over man-in-the-middle risk
Flashback Wednesday: Pakistani Brain

This month’s Flashback Wednesday takes us back to the beginning. Pakistani Brain, discovered on January 19th, is considered to be the first-ever PC virus. The post Flashback Wednesday: Pakistani Brain appeared first on WeLiveSecurity

WikiLeaks’ Assange confident of winning ‘any fair trial’ in the US
Can a DDoS attack on Whitehouse.gov be a valid protest?
Spora Ransomware Offers Victims Unique Payment Options
Understanding The Basics Of Two-Factor Authentication
Advances in SSL: 5 Strategies For Secure, High-Performance Load Balancers
Hacker cracks Facebook with remote code execution bug
Ransomware scum infect cancer non-profit
SOHOpeless routers offer hard-coded credentials and command injection bugs

LinuxSecurity.com: An update for runc is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…]

LinuxSecurity.com: An update for docker is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: An update for docker-latest is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact [More…]

Kill it with fire: US-CERT urges admins to firewall off Windows SMB
Thanks to Obama: Chelsea Manning will be out in May 2017
New RCE Flaws Found in Samsung Smartcam
Gmail Phishing Scam Stealing Credentials Through Infected Attachment
Vulnerabilities Leave iTunes, App Store Open to Script Injection
Sensitive access tokens and keys found in hundreds of Android apps

LinuxSecurity.com: NVIDIA graphics drivers could be made to crash under certain conditions.

The unseemly world of Darkweb marketplaces

LinuxSecurity.com: Multiple vulnerabilities have been found in libxml2, the worst of which could lead to the execution of arbitrary code.

LinuxSecurity.com: Security fix for CVE-2016-9131, CVE-2016-9147, CVE-2016-9444

LinuxSecurity.com: Security fix for CVE-2016-9131, CVE-2016-9147, CVE-2016-9444

LinuxSecurity.com: This update avoids a malicious repository writing to files outside the localstorage root.