Menu

Category Archives: Security

Articles about security

Melbourne hacker adds padding oracle to free popular hacker course
Germany warns Moscow will splash cash on pre-election propaganda and misinformation spree

Risk Level: Very Low. Type: Trojan.

Ransomware scum offer free decryption if you infect two mates

LinuxSecurity.com: Multiple heap overflows in SoX may allow remote attackers to execute arbitrary code.

LinuxSecurity.com: A vulnerability in Docker could lead to the escalation of privileges.

LinuxSecurity.com: Multiple vulnerabilities have been found in VirtualBox, the worst of which allows local users to escalate privileges.

LinuxSecurity.com: Two vulnerabilities have been found in exFAT allowing remote attackers to execute arbitrary code or cause Denial of Service.

Adult Toys Manufacturer Facing Lawsuit for Collecting “Users Personal Data”

LinuxSecurity.com: Multiple heap overflows in SoX may allow remote attackers to execute arbitrary code.

LinuxSecurity.com: A heap-based buffer overflow vulnerability in libmms might allow remote attackers to execute arbitrary code.

LinuxSecurity.com: update

LinuxSecurity.com: A vulnerability in Docker could lead to the escalation of privileges.

LinuxSecurity.com: Multiple vulnerabilities have been found in VirtualBox, the worst of which allows local users to escalate privileges.

security update

security update

Child Pornography Case: 73-year old Pedophile gets 300 years sentence
Inherent Vulnerability making Netgear’s Routers Exploitable by Hackers

LinuxSecurity.com: An update for python-XStatic-jquery-ui is now available for Red Hat OpenStack Platform 8.0 (Liberty). Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: An update for python-XStatic-jquery-ui is now available for Red Hat OpenStack Platform 9.0 (Mitaka). Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: Security fix for CVE-2016-8740

LinuxSecurity.com: An update for rh-mariadb100-mariadb is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: An update for rh-mariadb101-mariadb is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…]

Fatal flaw found in PricewaterhouseCoopers SAP security software
Russian hackers got Trump elected? Yeah, let’s take a close look at that, says Obama
Ex-Expedia IT worker hacked firm to commit insider trading after he left
‘I found a bug that let anyone read anyone’s Yahoo! Mail and all I got was this $10k check’
After Spying Webcams, Welcome the Spy Toys “My Friend Cayla and I-Que”
Obama orders review of election hacks as Trump doubts Russia’s role
Ransomware attacks against businesses increased threefold in 2016
Ransomware Gives Free Decryption Keys to Victims Who Infect Others

Risk Level: Very Low. Type: Trojan.

Attackers use hacked home routers to hit Russia’s 5 largest banks

  Personal computers and devices aren’t the only targets for ransomware authors. Their methods have evolved to target government offices and profitable organizations, forcing them to rethink their cybersecurity mitigation plans.   Blackheart Records Data Left Exposed Online Recently, it has been discovered that a large, unsecured database containing sensitive information on several prominent recording […]

Making in-flight cellphone calls? GCHQ, NSA have been listening
NYU Students Apply Blockchain Solution to Electronic Voting Security
Fancy that! Google was keen on ‘draining the swamp’ in 2013
Bahamian Hacker Gets 5 Years Jail Time for Hacking, Leaking Celebrities Photos
Threatpost News Wrap, December 8, 2016
‘Professional’ hackers steal industrial secrets from ThyssenKrupp
The IoT: Gateway for enterprise hackers
Yahoo Mail XSS Bug Worth Another $10K to Researcher
Yahoo flaw, now fixed, allowed hackers to access any user’s email
Ugh! Is that your security budget? *Sucks teeth and shakes head*
10 essential PowerShell security scripts for Windows administrators
UK.gov state of the nation report: Infosec’s very important, mmmkay
Expedia support tech raided his CFO to rack up insider trades
Hacker who stole celebrity emails, sex videos, movie scripts gets five years in prison
Yahoo patches critical vulnerability that allowed hackers to read any email

Risk Level: Very Low. Type: Trojan.

Japanese hosting company Kagoya hacked; credit card data stolen

security update

Real deal: Hackers steal steelmaker trade secrets
Trend Micro AV nukes innocent Sharepoint code, admins despair
Researchers Question Security in AMD’s Upcoming Zen Chips
OpenVPN to Undergo Cryptographic Audit
Get $20k in cash prize if you can exploit Nintendo 3DS system
New Call to Regulate IoT Security By Design
Kids’ privacy-endangering internet-connected toys should be banned, says EPIC
Turkish Hackers Offering Hacking Tools as Prizes for DDosing Political Websites
OpenVPN will be audited for security flaws
Old Linux Kernel Code Execution Bug Patched
US commission whistles to FIDO: Help end ID-based hacks by 2021
Solar Power Firm Patches Meters Vulnerable to Command Injection Attacks
Mirai variant turns TalkTalk routers into zombie botnet agents
The cybercrime business model and its value chain

The security landscape has evolved to a point where most IT threats occur with the intention of generating financial gain for their creators and financiers. The post The cybercrime business model and its value chain appeared first on WeLiveSecurity

Fighting ransomware: A fresh look at Windows Server approaches
Patch your Sony security cameras against backdoor attacks!
Where Cybercriminals Go To Buy Your Stolen Data
Get Safe Online: Watch out for banking scammers

Get Safe Online has issued a warning to consumers to be aware of banking scammers, as cybercriminals are finding more sophisticated ways to access their account details. The post Get Safe Online: Watch out for banking scammers appeared first on WeLiveSecurity

Can ISPs step up and solve the DDoS problem?

LinuxSecurity.com: Multiple vulnerabilities have been found in OpenJPEG, the worst of which may allow execution of arbitrary code.

LinuxSecurity.com: A vulnerability in CrackLib could lead to the execution of arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities were found in Binutils, the worst of which may allow execution of arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in socat, the worst of which may allow execution of arbitrary code.

LinuxSecurity.com: A vulnerability in Coreutils could lead to the execution of arbitrary code or a Denial of Service condition.

Playtime’s over: Internet-connected kids toys ‘fail miserably’ at privacy

LinuxSecurity.com: Multiple vulnerabilities were found in SQLite, the worst of which may allow execution of arbitrary code.

LinuxSecurity.com: A buffer overflow in jq might allow remote attackers to execute arbitrary code.

Stealing, scamming, bluffing: El Reg rides along with pen-testing ‘red team hackers’
Silver screen script hacker and dox douche gets 5 years in US cooler
Need Xmas ideas? Try CVE-2015-7645, a Flash gift that keeps on giving
Masterful malvertisers pwn Channel 9, Sky, MSN in stealth attacks
Santa says you’ve been nice kids: OpenVPN to get security audit
Body cams too fragile for Canadian Mounties – so they won’t be used

  Corny title aside, ‘tis officially the season for online shopping, and that means a drastic increase in phishing scams. In order to obtain sensitive information from specific organizations and people, these threats have become increasingly sophisticated and are carefully crafted. According to the latest Webroot Quarterly Threat Update, 84 percent of phishing sites exist […]

Sigh… ‘Hundreds of thousands’ of… sigh, web CCTV cams still at risk of… sigh, hijacking
When it comes to security, TalkTalk is all talk talk…
3 Reasons why cyberattacks force competitors to share information
Could this be you? Really Offensive Security Engineer sought by Facebook

LinuxSecurity.com: Update to the latest upstream release, which fixes CVE-2016-8704, CVE-2016-8705,CVE-2016-8706.

LinuxSecurity.com: Security fix for CVE-2016-7433, CVE-2016-7426, CVE-2016-7429, CVE-2016-9310,CVE-2016-9311

LinuxSecurity.com: phpMyAdmin 4.6.5.1 (2016-11-26) =============================== A patch-levelrelease fixing two small issues: * an issue affecting a small number of usersusing $cfg[‘Servers’][$i][‘hide_db’] or $cfg[‘Servers’][$i][‘only_db’]. * anissue affecting the create table dialog where the partition selection tool wasoverzealous and made it difficult to create a new table. There are also minorimprovements to the Czech language file. phpMyAdmin […]

LinuxSecurity.com: php-gettext 1.0.12 ================== * Security fix for potential codeinjection bug (LP#1515334) * Do not assume mbstring functions are alwaysthere, pass text through if they aren’t (LP#734494)

LinuxSecurity.com: Security fix for CVE-2016-7433, CVE-2016-7426, CVE-2016-7429, CVE-2016-9310,CVE-2016-9311

IDG Contributor Network: Ubuntu Core has the keys to IoT security
You can Download Music, Videos, Webpages and View them Offline with Chrome 55 for Android
Don’t have a Dirty COW, man: Android gets full kernel hijack patch
Zeus Variant ‘Floki Bot’ Targets PoS Data
Buffer Overflow in BSD libc Library Patched