Menu

Category Archives: Security

Articles about security

LinuxSecurity.com: An integer overflow in LZO might allow remote attackers to execute arbitrary code or cause a Denial of Service condition.

LinuxSecurity.com: Multiple vulnerabilities have been found in HDF5 which could lead to the arbitrary execution of code.

LinuxSecurity.com: Multiple vulnerabilities have been found in memcached which could lead to the remote execution of arbitrary code.

LinuxSecurity.com: An integer overflow in musl might allow an attacker to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in libotr and Pidgin OTR, allowing remote attackers to execute arbitrary code.

LinuxSecurity.com: An update for ipa is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…]

LinuxSecurity.com: This update fixes CVE-2016-9580 and CVE-2016-9581. —- This update adds apatch to fix CVE-2016-9573 and CVE-2016-9572.

LinuxSecurity.com: This update fixes CVE-2016-9580 and CVE-2016-9581.

Risk Level: Very Low. Type: Trojan.

If you’re anything like me, you probably make a bunch of lofty resolutions every year that you probably won’t, or even can’t, achieve. (For instance, I’ve been promising to hit the gym a little harder for about 6 years now.) But enough is enough. Here are 5 completely achievable resolutions to help keep you and […]

CNN Report Shows Fallout 4 Screenshots to Explain Russian Hacking Scheme
New Android-infecting malware brew hijacks devices. Why, you ask? Your router
How to remove ransomware from your LG Smart TV
Apple sued over fatal FaceTime car crash
Deprecation of Insecure Algorithms and Protocols in RHEL 6.9
Data breaches through wearables put target squarely on IoT in 2017
How to tell if your Snapchat has been hacked, and how to get it back
Army social media psyops bods struggling to attract fresh blood
Better authentication: Go get 'em, FIDO

Only a handful of industry associations accomplish what they set out to do. In the security realm, I’ve always been a huge fan of the Trusted Computing Group. It’s one of the few vendor organizations that truly makes computers more secure in a holistic manner. The Fast Identity Online (FIDO) Alliance is another group with lots […]

LinuxSecurity.com: Multiple vulnerabilities have been found in Mozilla Firefox, SeaMonkey, and Thunderbird the worst of which could lead to the execution of arbitrary code.

Programmer finds way to liberate ransomware’d Google Smart TVs
Libpng library gets fix for truly ancient bug
Hate ‘contact us’ forms? This PHPmailer zero day will drop shell in sender
Android tops 2016 vuln list, with 523 bugs
Russian ‘grid attack’ turns out to be a damp squib
Top Secret -cleared SOCOM staff in 11GB Govt contractor breach

security update

5 Premium VPN Services To Access HULU Outside The US
Philippine Military Website Hacked and Defaced
Latest iMessage Hack Crashes iPhone within Minutes
A lesson from network outages: Redundancy matters
Cyber-savvy New Year’s resolutions you’ll want to keep

Put cyber security at the top of your New Year’s resolution list for 2017, implementing a digital detox and improving your online behaviors. The post Cyber-savvy New Year’s resolutions you’ll want to keep appeared first on WeLiveSecurity

Russian Malware Found in Vermont Electricity Department Laptop
Anonymous Hacks, Defaces Bilderberg Group Website Against World Crisis

security update

OurMine Group Hacks Nat Geo Photography’s Twitter Account
New Malware Poses as Android Client to Infect Wi-Fi Networks and Hijack DNS
FBI-DHS Report Links Fancy Bear Gang to Election Hacks
Pakistan automotive giant PakWheels Hacked, 700k accounts stolen
Lithuania says Russian spyware infected government computers

  Ransomware “Star” Shines on LG Smart TV As ransomware continues to steal the malware stage, its authors have widened their target audience to include smart devices, such as TVs. Since a number of smart TVs use Android® operating systems, they can be susceptible to the same Android malware that usually strikes mobile devices. Recently, […]

The 10 biggest security incidents of 2016

In 2016, companies have had their security solutions tested by increasingly sophisticated cybercriminals. We look at the year’s biggest security incidents. The post The 10 biggest security incidents of 2016 appeared first on WeLiveSecurity

What 2017 has in store for cybersecurity
The shocking failure in how the FBI warned the DNC that it had been hacked
Obama expels 35 Russian spies over election hacking
Who helped Russia “hack” the US election? It might have been you…
Beware: Facebook collects data about your offline life through data brokers

Why wait for news on the next big thing in technology, when you can get a sneak peek at the hottest, up-and-coming consumer tech and innovations at CES 2017? For the last 50 years, the yearly CES event has served as a showcase and springboard for the latest advancements in tech as they enter the […]

Anonymous Hacks Thai LA Consulate to Protest Arrests and Cyber Law

LinuxSecurity.com: A vulnerability in mod_wsgi could lead to privilege escalation.

Retailers! Avoid getting hacked during the holiday season (or any other time of the year)

Tips for cash-strapped retailers looking to avoid getting hacked, during the holiday shopping season, or any other season. The post Retailers! Avoid getting hacked during the holiday season (or any other time of the year) appeared first on WeLiveSecurity

PHPMailer, SwiftMailer Updates Resolve Critical Remote Code Execution Vulnerabilities
Microsoft May Stop Forcing You to Upgrade to Windows 10
Threatpost 2016 Year in Review
Meet the Leet DDoS Botnet, Just as Powerful as Mirai
Sultry Sextortion Sisters Meet Their Match In Nigerian Oil Billionaire
5 key technologies to double down on now
5 signs we’re finally getting our act together on security

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: New samba packages are available for Slackware 14.2 and -current to fix security issues. [More Info…]

LinuxSecurity.com: New python packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…]

LinuxSecurity.com: Update to 2.2.4 with backport for XSS vulnerability.

LinuxSecurity.com: Update to latest jquery1 stable, with backport fix for XSS vulnerability.)

LinuxSecurity.com: This update adds security sandboxing to tracker-extract.

LinuxSecurity.com: Update to latest jquery1 stable, with backport fix for XSS vulnerability.)

LinuxSecurity.com: fix for “TLS SecurityMode.required bypass via StripTLS attack”(rhbz#1406703,1406704)

security update

LG Smart TV Screen Bricked After Android Ransomware Infection
How to Choose the Perfect Laptop for Online Study
Someone DDoSed ExtraTorrent Domain while ThePirateBay suffered downtime

LinuxSecurity.com: * Mon Dec 12 2016 Norvald H. Ryeng – 5.7.17-1 -Update to MySQL 5.7.17, for various fixes described athttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-17.html – Add newplugin: connnection_control.so – Add MySQL Group Replication:group_replication.so – Add numactl-devel to buildreq and enable NUMA support (ifavailable) – Simplify boost path – Build compat-openssl10 in rawhide for now -Reqs. in -devel packages was […]

LinuxSecurity.com: Updated to 2.1.4

LinuxSecurity.com: This update contains a **SECURITY** fix for an issue with potentially seriousconsequences but very limited scope. If an administrator of a wiki you talked tousing python-wikitcms were malicious, they could cause arbitrary code executionas the user running wikitcms. No-one besides a wiki administrator could do this,as it requires crafting the wiki’s response to an […]

LinuxSecurity.com: Updated to 2.1.4

LinuxSecurity.com: This update contains a **SECURITY** fix for an issue with potentially seriousconsequences but very limited scope. If an administrator of a wiki you talked tousing python-wikitcms were malicious, they could cause arbitrary code executionas the user running wikitcms. No-one besides a wiki administrator could do this,as it requires crafting the wiki’s response to an […]

LinuxSecurity.com: Update to 2.2.4 with backport for XSS vulnerability.

LinuxSecurity.com: Security fix for CVE-2016-4330, CVE-2016-4331, CVE-2016-4332, CVE-2016-4333

LinuxSecurity.com: two security flaws (#1406840) x86 PV guests may be able to mask interrupts[XSA-202, CVE-2016-10024] x86: missing NULL pointer check in VMFUNC emulation[XSA-203, CVE-2016-10025] x86: Mishandling of SYSCALL singlestep duringemulation [XSA-204, CVE-2016-10013] (#1406260)

LinuxSecurity.com: * Mon Dec 12 2016 Norvald H. Ryeng – 5.7.17-1 -Update to MySQL 5.7.17, for various fixes described athttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-17.html – Add newplugin: connnection_control.so – Add MySQL Group Replication:group_replication.so – Add numactl-devel to buildreq and enable NUMA support (ifavailable) – Simplify boost path – Build compat-openssl10 in rawhide for now -Reqs. in -devel packages was […]

LinuxSecurity.com: – fix floating point buffer overflow issues (CVE-2016-9586)

Three Chinese Hackers Made Millions by Hacking American Law Firms
Thai Police Arrest 9 Suspects Behind Cyber Attacks on Gov’t Sites
Leaked info confirms in-house hacking capabilities of Israeli firm Cellebrite
US Immigration asking foreign travelers for their social media account details
Four New Normals for 2017
Trio charged with $4m insider trading by hacking merger lawyers
Encryption in 2016: Small victories add up
How Microsoft will drive enterprise IT in 2017
Android Trojan Switcher Infects Routers via DNS Hijacking
What is encryption and how does it work?

It has become one of the most topical and discussed topics in information security in recent times. In this video we outline some of the key aspects of encryption. The post What is encryption and how does it work? appeared first on WeLiveSecurity

security update

PHPMailer Bug Leaves Millions of Websites Open to Attack

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: Security fix for CVE-2016-8743, CVE-2016-2161, CVE-2016-0736

LinuxSecurity.com: Security fix for CVE-2016-8743, CVE-2016-2161, CVE-2016-0736

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: New expat packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…]

LinuxSecurity.com: New openssh packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…]

LinuxSecurity.com: New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…]