September 6, 2016
Obama says USA has world’s biggest and best cyber arsenal
September 6, 2016
Pokémon-loving VXer targets Linux with ‘Umbreon’ rootkit
September 6, 2016
98.1 million CLEARTEXT passwords pasted as Rambler.ru rumbled
September 6, 2016
CVE-2016-5696 Yue Cao, Zhiyun Qian, Zhongjie Wang, Tuan Dao, and Srikanth V. Krishnamurthy of the University of California, Riverside; and Lisa M. Marvel of the United States Army Research Laboratory discovered that Linux’s implementation of the TCP Challenge ACK feature results in a side channel that can be used to find TCP connections between specific […]
September 5, 2016
Apple issues critical updates for Mac – Users MUST update OS X, Safari
September 5, 2016
An update for thunderbird is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: thunderbird security update Advisory ID: RHSA-2016:1809-01 Product: Red Hat Enterprise […]
September 5, 2016
Debian: 3659-1: linux: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3659-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 04, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : linux CVE ID : CVE-2016-5696 CVE-2016-6136 CVE-2016-6480 CVE-2016-6828 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial […]
September 5, 2016
Debian: 3653-2: flex: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3653-2 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 04, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : flex CVE ID : CVE-2016-6354 Debian Bug : 832768 835542 It was reported that the update for flex as released in DSA-3653-1 did not completely […]
September 5, 2016
7 Million LifeBoat Accounts from Jan 2016 Breach Leaked Online
September 5, 2016
Variety confirms CMS hijack by hacking collective OurMine
Variety has confirmed that its content management system (CMS) was hijacked on the weekend by the hacking collective OurMine. Once in, the group was able to send subscribers to the online and print publisher multiple newsletters via email. The subject line stated “Hacked By #OurMine”, while the body text read: “Hello Variety, it’s #OurMine, don’t […]
September 5, 2016
Suspect arrested in 5-year-old kernel.org breach
September 5, 2016
Podcast with Ahmed Mansoor, the world’s most spied-on man
September 5, 2016
11 easy tips to secure your Mac against hackers
September 5, 2016
Sophos Windows users face black screens after false positive snafu
September 5, 2016
5 security practices hackers say make their lives harder
September 5, 2016
Sundown exploit kit authors champions of copy-paste hacking
September 5, 2016
Microsoft thought of the children and decided to ban some browsers
September 5, 2016
Pixellation popped: AI can ID you, even after PhotoShop phuzzing
September 5, 2016
Risk Level: Very Low. Type: Trojan.
September 5, 2016
Risk Level: Very Low. Type: Trojan.
September 5, 2016
Google swats Nexus 5X vulnerable fastboot memory dump flaw
September 4, 2016
Hacked BitcoinTalk.org Forum Database Goes for Sale on Dark Web
September 4, 2016
It’s 2016, and anti-virus products still goof up like this…
September 4, 2016
Phishing and data theft await users due to target=”_blank” vulnerability
September 4, 2016
Hacker Selling 68 Million Stolen Dropbox User Accounts on Dark Web
September 4, 2016
OurMine Hacks Variety Website; Sends Fake Emails to Readers
September 3, 2016
Firm loses $44m due to an online email scam
September 3, 2016
Risk Level: Very Low.
September 3, 2016
Man who hacked Kernel.org, Linux Foundation in 2011 Arrested
September 3, 2016
Azerbaijani hackers leak secret data from Armenian Intel server
September 3, 2016
BBC mistakenly sent news alert in Bengali; Readers took it as a hack
September 3, 2016
Linux Foundation Restructuring CII Security Effort for Scale
September 3, 2016
Discovered: September 2, 2016 Updated: September 3, 2016 12:00:55 AM Type: Trojan Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Ransom.Fsociety is a Trojan horse that encrypts files on the compromised computer and asks the user to […]
September 3, 2016
European Company Loses Millions in Targeted Phishing Scam In the last couple weeks, Leoni AG, one of the largest electrical wiring companies in Europe fell victim to a Business Email Compromise (BEC) scam involving the CFO transferring a significant sum of money to a non-verified bank account. This location was likely the main target due […]
September 2, 2016
Hanno Boeck discovered multiple vulnerabilities in libidn, the GNU library for Internationalized Domain Names (IDNs), allowing a remote attacker to cause a denial of service against an application using the libidn library (application crash). For the stable distribution (jessie), these problems have been fixed in version 1.29-1+deb8u2. For the testing distribution (stretch), these problems have […]
September 2, 2016
Microsoft Adds .NET Core, ASP.NET to Bug Bounty Program
September 2, 2016
Google patches critical bug on Android Nexus 5X devices
September 2, 2016
Bloke accused of Linux kernel.org hack nabbed during traffic stop
September 2, 2016
NBA’s Golden State Warriors sued for ‘mic snooping’ mobile app
September 2, 2016
Online Music Database Last.fm Hacked; 43M accounts Leaked
September 2, 2016
Debian: 3658-1: libidn: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3658-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 01, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : libidn CVE ID : CVE-2015-8948 CVE-2016-6261 CVE-2016-6263 Hanno Boeck discovered multiple vulnerabilities in libidn, the GNU library for Internationalized Domain Names (IDNs), allowing a remote […]
September 2, 2016
Red Hat: 2016:1797-01: ipa: Moderate Advisory Posted by Anthony Pell An update for ipa is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: ipa security update Advisory […]
September 2, 2016
Hacking mobile login tokens tricky but doable, says reverse-engineer
September 2, 2016
Android Patch Fixes Nexus 5X Critical Vulnerability
September 2, 2016
Two Crypto-currency Websites Suffered Huge Data Breaches
September 2, 2016
Microsoft bug bounty program adds .Net Core and ASP.Net Core
September 2, 2016
Apple quashes 3 zero-days with emergency Mac update
September 2, 2016
Apple Patches Trident Vulnerabilities in OS X, Safari
September 2, 2016
Azerbaijani hacktivists leak Armenian security service docs
September 2, 2016
CEO fraud: How to stay protected against this modern day deception
So, you’re minding your own business working through your day-to-day battle of never-ending emails and sorting through all the stuff you should have finished yesterday. Suddenly, an urgent email drops into your inbox from the boss, asking for an urgent transfer of £8,000 to a designated bank account. It’s not overly unusual: it’s from the […]
September 2, 2016
Threatpost News Wrap, September 2, 2016
September 2, 2016
Kaspersky ‘terminates’ deal with security reseller Quadsys
September 2, 2016
Regular password changes make things worse
September 2, 2016
18 years of Googling: Malware can still be just one click away
How do you navigate through virtual reality? What is the first webpage you open when you are looking for something online? Where do you go to answer a ‘how to’ question most often? For the majority of users, the answer would be Google. It’s been 18 years since Stanford PhD students Larry Page and Sergey […]
September 2, 2016
Adobe ices ColdFusion server admin password, file hack hole
September 2, 2016
Lightspeed PoS vendor breached, sensitive database tapped
September 2, 2016
Google crushes 33 Chrome bugs, pays boffins more than $56k
September 2, 2016
Patch now: Apple emits fix for Pegasus spyware bugs in OS X, Safari
September 2, 2016
Discovered: September 1, 2016 Updated: September 2, 2016 12:02:36 PM Type: Trojan Infection Length: 3,921,408 bytes Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Ransom.Serpico is a Trojan horse that encrypts files on the compromised computer and […]
September 2, 2016
Romanian hacker Guccifer sentenced to 52 months in U.S. prison
September 1, 2016
George W Bush hacker Guccifer to spend 52 months in the big house
September 1, 2016
Malvertising Campaign Pushing Neutrino Exploit Kit Shut Down
September 1, 2016
Slackware: 2016-244-01: mozilla-thunderbird: Security Update Posted by Anthony Pell New mozilla-thunderbird packages are available for Slackware 14.1, 14.2, and -current to fix security issues. [More Info…] [slackware-security] mozilla-thunderbird (SSA:2016-244-01) New mozilla-thunderbird packages are available for Slackware 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: +————————–+ […]
September 1, 2016
Guccifer hacker jailed for four years by Virginia court
September 1, 2016
Insecure Redis Instances at Core of Attacks Against Linux Servers
September 1, 2016
DressCode? More like code for an Android botnet…
September 1, 2016
Transmission hijacked to broadcast Mac malware
September 1, 2016
Financial cybersecurity ‘needs to be a key agenda item at G20’
Improving financial cybersecurity at an international level must be a key agenda item at the G20 Summit in China this month (September 4th-5th). This is according to a group of prominent US senators, who have urged president Barack Obama to raise this critical issue at the event. In a letter to the White House, Gary […]
September 1, 2016
Chrome 53 Fixes Address Spoofing Vulnerability, 32 Other Bugs
September 1, 2016
Patched ColdFusion Flaw Exposes Applications to Attack
September 1, 2016
How one company lost $44 million through an email scam
September 1, 2016
The Dropbox data breach is a warning to update other passwords
September 1, 2016
SWIFT Warns Banks Of More Cyberattacks
September 1, 2016
How to turn on HTTPS company-wide in one swoop
September 1, 2016
VMworld: Can you trust your API?
The VMware ecosystem has become huge and now encompasses a daunting number of platforms that you don’t even think about, including many in the IoT world. But now, all of these devices have to talk to each other in order to get along, and they do that with Application Program Interfaces (API). Are APIs all […]
September 1, 2016
OS X malware spread via signed Transmission app… again
September 1, 2016
Cisco SOHO switches patched for SOHOpeless vuln
September 1, 2016
Blackhat wannabes proffer probably bogus Linux scamsomware
September 1, 2016
L0phtCrack’s back! Crack hack app whacks Windows 10 trash hashes
September 1, 2016
Hanno Boeck and Marcin Noga discovered multiple vulnerabilities in libarchive; processing malformed archives may result in denial of service or the execution of arbitrary code. For the stable distribution (jessie), these problems have been fixed in version 3.1.2-11+deb8u2. For the testing distribution (stretch), these problems have been fixed in version 3.2.1-1. For the unstable distribution […]
August 31, 2016
Two vulnerabilities have been discovered in the server for the Tryton application platform, which may result in information disclosure of password hashes or file contents. For the stable distribution (jessie), these problems have been fixed in version 3.4.0-3+deb8u2. For the unstable distribution (sid), these problems have been fixed in version 4.0.4-1. We recommend that you […]
August 31, 2016
OneLogin SecureNotes Breach Exposed Data in Cleartext
August 31, 2016
Red Hat: 2016:1781-01: rh-postgresql94-postgresql: Moderate Advisory Posted by Anthony Pell An update for rh-postgresql94-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: rh-postgresql94-postgresql security update Advisory ID: RHSA-2016:1781-01 Product: Red Hat Software Collections […]
August 31, 2016
Debian: 3657-1: libarchive: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3657-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff August 30, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : libarchive CVE ID : CVE-2015-8916 CVE-2015-8917 CVE-2015-8919 CVE-2015-8920 CVE-2015-8921 CVE-2015-8922 CVE-2015-8923 CVE-2015-8925 CVE-2015-8926 CVE-2015-8928 CVE-2015-8930 CVE-2015-8931 CVE-2015-8932 CVE-2015-8933 CVE-2015-8934 CVE-2016-4300 CVE-2016-4302 CVE-2016-4809 CVE-2016-5844 Hanno Boeck […]
August 31, 2016
Debian: 3656-1: tryton-server: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3656-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff August 30, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : tryton-server CVE ID : CVE-2016-1241 CVE-2016-1242 Two vulnerabilities have been discovered in the server for the Tryton application platform, which may result in information disclosure […]
August 31, 2016
Ubuntu: 3070-2: Linux kernel (Raspberry Pi 2) vulnerabilities Posted by Anthony Pell Several security issues were fixed in the kernel. ========================================================================== Ubuntu Security Notice USN-3070-2 August 30, 2016 linux-raspi2 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 16.04 LTS Summary: Several security issues were fixed in the […]
August 31, 2016