Menu

Category Archives: Security

Articles about security

LinuxSecurity.com: An update for bind is now available for Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: An update for bind97 is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…]

Terrorists are winning the digital arms race
Router Vulnerabilities Disclosed in July Remain Unpatched
Credential-stuffers enjoy up to 2% attack success rate – report
Mega UK hospitals trust Barts says IT borkage was due to trojan – not ransomware
SHA-1 End Times Have Arrived
Why WhatsApp’s ‘Backdoor’ Isn’t a Backdoor
It makes good security sense to change Alexa’s name – here’s how
Andrew Macpherson on Intelligence Gathering with Maltego
Facebook took two weeks to remove video of 12-year-old girl that livestreamed her suicide
Ransomware: Should you pay up?

ESET’s Cameron Camp provides valuable insight into what you should do if you’re a victim of ransomware. The post Ransomware: Should you pay up? appeared first on WeLiveSecurity

The war for cybersecurity talent hits the Hill
Ransomware brutes smacked 1 in 3 NHS trusts last year
Got microservices? You'd better secure them

One of the toughest parts of being a computer security pro is trying to figure out what to hang your career on every two to five years. Which new buzzwords will stick to become a new paradigms, and which will disappear into the ether? Keeping up with the latest and greatest enterprise tech is part […]

Google ventures into public key encryption
Is your IP security camera making you less secure?
Devs reverse-engineer 16,000 Android apps, find secrets and keys to AWS accounts
Dodgy Dutch developer built backdoors into thousands of sites

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: Multiple vulnerabilities have been found in file, the worst of which could allow remote attackers to execute arbitrary code.

LinuxSecurity.com: A buffer overflow in MiniUPnPc might allow remote attackers to cause a Denial of Service condition.

911 app is a joke, says security researcher Randy Westergren
Dovecot mailserver graded ‘nearly impenetrable’
Top tips (not including anti-virus) for protecting your Android from malware

Risk Level: Very Low. Type: Trojan.

LinuxSecurity.com: A buffer overflow in xdelta might allow remote attackers to execute arbitrary code.

LinuxSecurity.com: A buffer overflow in VLC might allow remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code.

Researchers Expose Fake Android Apps Stealing Instagram Passwords

Type: Vulnerability. Microsoft Identity Model Extensions is prone to a privilege-escalation vulnerability; fixes are available.

I love podcasts so much, I took a deep breath and made one…
White House Approves New Rules for Sharing of Raw Intelligence Data
Botnet of things: Samsung SmartCams vulnerable to hackers
Invest in encryption and get it right

The heavy ICO fine against Royal & Sun Alliance Insurance PLC has highlighted a shortcoming with encryption. The post Invest in encryption and get it right appeared first on WeLiveSecurity

Facebook’s new public Wi-Fi locator is raising privacy concerns
Free IoT Vulnerability Scanner Hunts Enterprise Threats
The CSO guide to top security conferences
IHOP’s Twitter account hacked; retweets a tweet against Hillary clinton
Wandera has uncovered severe mobile data exposures that affect a high proportion of enterprises. Try it now for free.
French spies warn politicians of hack risk as election draws near
Google Cloud Platform finally offers key management service
Windows 10 Anniversary Update crushed exploits without need of patches
Google reveals its servers all contain custom security silicon
Brilliant phishing attack probes sent mail, sends fake attachments
Just give up: 123456 is still the world’s most popular password

Risk Level: Very Low. Type: Trojan.

Netflix Users Targeted with yet another sophisticated Phishing Scam
Meet Spora, a ransomware that infects users in good faith – Literally

security update

security update

security update

Student Arrested for Selling Keylogger that Infected thousands of devices
WhatsApp vulnerability could allow Facebook and others to read messages
Facebook users hit with “You are in this video?” malware scam
Just in Time for Trump, the NSA Loosens Its Privacy Rules
First came mass MongoDB ransacking: Now copycat ransoms hit Elasticsearch
Guccifer 2.0, alleged Russian cyberspy, returns to deride U.S.
Suspected NSA tool hackers dump more cyberweapons in farewell
How to set up your Android phone for ultimate privacy
Promising compsci student sold key-logger, infects 16,000 machines, pleads guilty, faces jail
US Marines seek more than a few good men (3,000 men and women, actually) for cyber-war

security update

Playpen child sex abuse archive admin gets 20 years in the Big House

security update

Researchers Warn Against “free internet without Wi-Fi” WhatsApp Scam
Adobe’s Latest Security Patch Installs Chrome Extension to Collect Data
WhatsApp Says ‘Backdoor’ Claim Bogus
Adobe Acrobat Reader DC security update installs Chrome spyware
Google’s Key Transparency Simplifies Public Key Lookups
UK’s largest hospital trust battles Friday 13th malware outbreak

LinuxSecurity.com: A vulnerability in runC could lead to privilege escalation.

LinuxSecurity.com: Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in execution of arbitrary code or privilege escalation.

LinuxSecurity.com: Security Report Summary

Google floats prototype Key Transparency in bid to tackle secure swap woes
Pirates, pirates, whatchu gonna do? Advertisers cop a visit from PIPCU
Windows 10 anniversary update: Security and privacy, hope and change?

With analysts predicting a big shift to Windows 10 in the enterprise in 2017, a new ESET white paper looks at security and privacy changes in Windows 10 Anniversary Update, the build that Microsoft expects its business customers to run on the majority of their desktop computers. The post Windows 10 anniversary update: Security and […]

After MongoDB, ransomware groups hit exposed Elasticsearch clusters
Oh, for F…acebook: Critics bash WhatsApp encryption ‘backdoor’
WhatsApp bug: Messages ‘can be intercepted and read’

A WhatsApp ‘security issue’ has been identified, meaning third parties may be able to both intercept and read encrypted messages, according to new research. The post WhatsApp bug: Messages ‘can be intercepted and read’ appeared first on WeLiveSecurity

Threatpost News Wrap, January 13, 2017
Don’t follow the example of Donald Trump’s choice for cybersecurity czar
Podcast on ransomware’s threat to the healthcare industry
Forensic analysis techniques for digital imaging

ESET’s Miguel Ángel Mendoza looks at a range of forensic analysis techniques that are used to examine digital images. The post Forensic analysis techniques for digital imaging appeared first on WeLiveSecurity

Suspected NSA tool hackers dump more cyberweapons
GoDaddy revokes nearly 9,000 SSL certificates issued without proper validation
Trump’s CIA nominee grilled on his advocacy of surveillance database
Microsoft sued over forcing employees to watch child porn for online safety
UK launches major cybersecurity inquiry

The UK parliament has launched an inquiry into its cybersecurity defense measures, describing cyberthreats as a “major security challenge”. The post UK launches major cybersecurity inquiry appeared first on WeLiveSecurity

5 data breach predictions for 2017

LinuxSecurity.com: Multiple vulnerabilities have been found in Mozilla SeaMonkey, the worst of which could lead to the remote execution of arbitrary code.

EU policy makers consider FRAND licensing of machine-generated data
WordPress plugs eight holes in latest release

LinuxSecurity.com: Security Report Summary

MongoDB hackers now sacking ElasticSearch

LinuxSecurity.com: An update for java-1.6.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: Update to 0.24.6

LinuxSecurity.com: New upstream release

Trump’s cyber-guru Giuliani runs ancient ‘easily hackable website’
ISC squishes BIND packet-of-death bugs