Menu

Category Archives: Security

Articles about security

US Congress blocks Yahoo Mail after wave of ransomware attacks
SPF (SpeedPhish Framework) – E-mail Phishing Toolkit
Hacker Lexicon: SQL Injections, an Everyday Hacker’s Favorite Attack
Six months on from the TalkTalk hack – how has the firm suffered?
Mozilla wants US to disclose to it first any vulnerability found in Tor by government hackers
TalkTalk profits halve following last year’s major cyberattack

The UK-based telecommunications company TalkTalk has seen its profits more than halve, following last year’s “significant and sustained cyberattack”. Profits were down to $20 million compared with $46 million for the same period last year, which has largely been attributed to the financial fallout of the high-profile incident. The cost of the cyberattack, which was […]

Adobe warns of Flash zero-day vulnerability, being actively exploited by online criminals

As I write this, if you’re running Adobe Flash on your Windows, Mac, Linux or Chrome OS computer you’re potentially at risk. Adobe has issued a security advisory, warning of an as-yet unpatched critical security hole in its popular Flash player software that is reported to being actively exploited by criminals in the wild. No […]

Sophisticated AbbadonPOS malware upgraded in its attempt to exfiltrate credit card data from retailers

Discovered: May 12, 2016 Updated: May 12, 2016 10:56:36 AM Type: Trojan Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Trojan.Wortrik is a Trojan horse that sends spam email messages from the compromised computer. Antivirus Protection […]

This Hacker Got Bored, Wanted Some Fun So He Defaced Several Subreddits
US Congress Dumps Yahoo Mail Over Phishing Attacks

Risk High Date Discovered May 10, 2016 Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Recommendations Permit local access for trusted individuals only. Where possible, use restricted environments and restricted […]

Risk Medium Date Discovered May 10, 2016 Description Microsoft Windows is prone to a local security-bypass vulnerability. A local attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Recommendations Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells. Allow only trusted individuals to have […]

Microsoft Disabling Controversial Wi-Fi Sense Feature in Windows 10

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Slackware: 2016-132-01: imagemagick: Security Update Red Hat: 2016:1019-01: qemu-kvm-rhev: Important Advisory Ubuntu: 2972-1: OpenJDK 6 vulnerabilities Red Hat: 2016:0778-01: icedtea-web: Moderate Advisory Red Hat: 2016:0741-01: openssh: Moderate Advisory Red Hat: […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Slackware: 2016-132-01: imagemagick: Security Update Red Hat: 2016:1019-01: qemu-kvm-rhev: Important Advisory Ubuntu: 2972-1: OpenJDK 6 vulnerabilities Red Hat: 2016:0778-01: icedtea-web: Moderate Advisory Red Hat: 2016:0741-01: openssh: Moderate Advisory Red Hat: […]

Posted by Anthony Pell    Several security issues were fixed in OpenJDK 6. ========================================================================== Ubuntu Security Notice USN-2972-1 May 10, 2016 openjdk-6 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 12.04 LTS Summary: Several security issues were fixed in OpenJDK 6. Software Description: – openjdk-6: Open Source Java […]

Posted by Anthony Pell    An update for icedtea-web is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: icedtea-web security, bug fix, and […]

An update for openssh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: openssh security, bug fix, and enhancement update Advisory ID: RHSA-2016:0741-01 […]

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: kernel security, bug fix, and enhancement update Advisory ID: RHSA-2016:0855-01 […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Slackware: 2016-132-01: imagemagick: Security Update Red Hat: 2016:1019-01: qemu-kvm-rhev: Important Advisory Ubuntu: 2972-1: OpenJDK 6 vulnerabilities Red Hat: 2016:0778-01: icedtea-web: Moderate Advisory Red Hat: 2016:0741-01: openssh: Moderate Advisory Red Hat: […]

Security fix for CVE-2016-1548, CVE-2016-2516, CVE-2016-2518, CVE-2016-1550 ——————————————————————————– Fedora Update Notification FEDORA-2016-5b2eb0bf9c 2016-05-10 11:45:44.970959 ——————————————————————————– Name : ntp Product : Fedora 23 Version : 4.2.6p5 Release : 40.fc23 URL : http://www.ntp.org Summary : The NTP daemon and utilities Description : The Network Time Protocol (NTP) is used to synchronize a computer’s time with another reference […]

Posted by Anthony Pell    This update contains minor security fixes (for CVE-2016-3075, CVE-2016-1234,CVE-2015-8778, CVE-2015-8776, CVE-2014-9761, CVE-2015-8779) and collects fixesfor bugs encountered by Fedora users. ——————————————————————————– Fedora Update Notification FEDORA-2016-68abc0be35 2016-05-10 11:45:44.966689 ——————————————————————————– Name : glibc Product : Fedora 23 Version : 2.22 Release : 15.fc23 URL : http://www.gnu.org/software/glibc/ Summary : The GNU libc libraries […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Slackware: 2016-132-01: imagemagick: Security Update Red Hat: 2016:1019-01: qemu-kvm-rhev: Important Advisory Ubuntu: 2972-1: OpenJDK 6 vulnerabilities Red Hat: 2016:0778-01: icedtea-web: Moderate Advisory Red Hat: 2016:0741-01: openssh: Moderate Advisory Red Hat: […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Slackware: 2016-132-01: imagemagick: Security Update Red Hat: 2016:1019-01: qemu-kvm-rhev: Important Advisory Ubuntu: 2972-1: OpenJDK 6 vulnerabilities Red Hat: 2016:0778-01: icedtea-web: Moderate Advisory Red Hat: 2016:0741-01: openssh: Moderate Advisory Red Hat: […]

Security fix for CVE-2016-2108, CVE-2016-2107, CVE-2016-2105, CVE-2016-2106 ——————————————————————————– Fedora Update Notification FEDORA-2016-1e39d934ed 2016-05-10 11:43:00.963747 ——————————————————————————– Name : openssl Product : Fedora 22 Version : 1.0.1k Release : 15.fc22 URL : http://www.openssl.org/ Summary : Utilities from the general purpose cryptography library with TLS implementation Description : The OpenSSL toolkit provides support for secure communications between machines. […]

US sounds alarm after SAP bug found affecting multinationals
Pornhub Bug Bounty Program: Report critical flaws, earn $25,000
Hackers exploiting unpatched Flash Player vulnerability, Adobe warns
Pornhub asks for help hardening its security
CVE-2016-3710: QEMU: out-of-bounds memory access issue
How to tell if your iPhone has been secretly hacked
Your data, their cloud? Bring your own encryption keys
CryptXXX ransomware evolves, renders decryption tool useless
Enigma ransomware targets Russian-speaking users
Perez Hilton website visitors hit by two malvertising attacks in same week
Viking Horde Malware Turns Android Devices into BotNet

Several vulnerabilities were discovered in qemu, a fast processor emulator. CVE-2016-3710 Wei Xiao and Qinghao Tang of 360.cn Inc discovered an out-of-bounds read and write flaw in the QEMU VGA module. A privileged guest user could use this flaw to execute arbitrary code on the host with the privileges of the hosting QEMU process. CVE-2016-3712 […]

Nitin Venkatesh discovered that websvn, a web viewer for Subversion repositories, is susceptible to cross-site scripting attacks via specially crafted file and directory names in repositories. For the stable distribution (jessie), this problem has been fixed in version 2.3.3-1.2+deb8u2. We recommend that you upgrade your websvn packages.

Privacy advocates want protections for US residents in foreign surveillance law
WordPress Patches SOME, XSS Flaws in Version 4.5.2
Opera Finally Introduces Free VPN for iOS – Opera VPN
Exploiting 1-byte buffer overflows

��}�r�Ȓ���P��d�x�(Y2�e���moKݽ=�E�(��@ ��x܊��݈}݇}؈����ͬ*�)�����9m�@UVVVfVVVV��/�����%�����W�N�K�{��O4�l��4|@&qX�?�)���u�=�0j������Ŕ5د3粧�^̼�8]L#C���*����ᄆ�{�xd�k��W����GƱ? h���=f�Y��G���]:l�a���;v��s�:�,b�Y��s�O�y`H��x¦,��;�f����E���O9�8A���bg���d���A��i��.뿼 F���1X@��l4b!��#ןGO-Q�J@�E�� ������iD����&P��_$� -��EH�.�”gXl����t�@�2�8C�:@��Pz7�Z���Gh8p␆��f�f��0 �y��]o��V�j�Z���RJ�R���H)e�XH2��0^pyv}dv�P�;C��.祗��3t���88J�t�?ј.��,t�?�Ȣ���H(����h����*��Q=� �A��ʺ�l�:�r�3�q���5Z����A�y���l4�+�M}T������pԬw��L阭=��ʜ�xR;�c�S��K#k�c�}��bЕ�C�J��l:Ԗ���ϒl�K�@B�P�c~��RПR�[%JK*~6NY�(!����c��-�O����|Gw6vj��A���l�lE�������O�5�C����l��?[ZC����xc��pȴ��t/^Z�ZM՟���7tg6�t���3/��)���n=�<�k�1h���Į���K ��������p*�h���cs��*~�H�U�ڶV?Y=��&y����4��|A��H����U �ȥc���Q�����`���Q�O��>���vv����~��H��{�F�Ѭ7�f쿠1���7���2oO�֩�wauv%��^����F��V���o��&�a��K�~�u�Ҕ���d���Ќ�a�”����`��^�|qJ�߂H�4�huhդA�<�x�vmX��G�1B��P�z#g��cC�� ��/8��׀�wo���ރ� ���/z)��?��X/i���/�W��j�0�m���.�A� :�Y��A�r��� ��Ƹ�UoЊ��p�wq(�t8�j����ul;��c�0���@�5�AX���u�C�”X�]�W�2#$��>^7F�”��X-�~02��y�hd�s�X�r�W��?d�z�~]��a���Hc�xj ��s5����ߙ��M�-�’D>޿g;Q���̌(���8�3�b�>�Ct4ÿ��ʈ&Ъ�:a�x���?�l�{0@��&1�{ŏ��bw��C!�i���C��U��K@1������T� �u��-Gu��=�`��{�>cXY�%$�U’b��=a�9V��W��4�� ��5���K�L��bx�dxu�DցGub��T՟�;���:3��`����L�;�$т �*���s�.J JҖ���T8s�ʶ1����̍���4�+z�ҹ#� K��� �6�i�v7U�_���8D�dK�XȢ��6���T�Ñq��q��`;ء�3�W[�tD���~{���:c��LTAjZ�����v찱.���dz w{F#����s�C�����g���P���endHE}7����=H����-�k�n�Y��Kp��@����*�����w#�rVz9���C�����P���~x�p���SMO�y�V�:���ʹL��y”Z���’�k�̶�����]c�C�%R<��޶Q���sn������3�w��Шދ��nS��Ծ��`~d4N�&�.�ބ��kC�ŘY�(:���OV�bWj�`˘'^�³T����-j���W��1=�~�O�ӄ0��c-��n۴K ��@;�U^P�Q^b�i�r#� ����ԅO�q.�y�w”�m6�+��B’F�*2���,�p*�.py�>��W{P�j�‹����`!0���~���޺ҌӀ��!��: ~%=��4��o����G>�R?U��=����C),m4�х�0y�’�KE�#��I�+C��3�� ��2��̓!����H|����#�P�#�D�w/��C�jd 3�[�Z����9�!�a+ e�+4ȣ~-��߃Y4�}Щm�w�����Do��O�t��;`Wu�蒸��x�Ӿ02~)�IZ+sx� ��Dp�û�ײ�T��ϗ��:�1^���҈w�’`����R=-�N�KG����HJd:<��q����Gt��޷��Ў��V�ƆX<8�p�۹�!L���� ���ۆQj@aΘ����蜳D5/D� {���/^�5V'���IPy�ր����ز�d`m%G���ë�`��Z�@=EБ�e��hྔ/e�pp�ӹx@r7 ���繤��xjF1 c�����0��:���Po0�Q�T`R�j���s_�?��a�=�AOǭ�7h����G`�?vt������|���� � ����c����3Ec��^��|�`�г�����ҳ�s��{r�`h{f��i̿�n���6�[����!�o�a������+�!������MRX4��Ô�Q���0�b�b9�*�h�]cjO�C4���UT� n���K�N�)%k2t��bc��4,�� �pH��Z�@o��n�},�q��s<� ����tQa�����H�����'/O��wo�~��M ȱa`��a��/0L�O�~��^UVO7PGԍ�a�PN3b�׷^�mjQ�|*} _��#��$V�� ����2A��+� ��3���D'�pt[��� +��ʁ��G��P����#���c`jPy�G���T�����'t�R�����)OlF~|sB�G^F����z�g���h�Y 'Y�������6=/�roM5*K�,Pd�3�2��@��o��*]v�aლ(���X;�)F���w�0�3��uR��p���qb65v�O���[�}G��Y��[p�`�Yz�v�y��TN�m�5��.y�Gq�޶��� ��~�C���^k+]}��A=�.”G�hI���(&߱D��門&����2C*� �Q9�7t�����;�qF*�H�΄��˚�����-Cc��#v��?�T��M+$�yX�V�ZI��,LCh �`��g ���4�!���Iz��X㴝_�-0��L��~s�fNZ��g@Rl@!�0�����wߺ�5��DՌ���go���#������!][����)�����/�n���NW ���BÕ”��2�����w:�m2 �#y� ��}oĀ�CFނrăk2�tKrd,��-]);��v{�!y�J���A����x���]|z��b]�&��?��T �R����’�)�cM%`�d����`P�r��g%��@���:��iT��� �F.�;c�Ya��jB����A��N��[`6�ӯtG�D�J�L,g����N����2�x����s���h+��>w�����’�� ��wv� ���%|��`���k�[���aa3KG[Ɬ�;��:��2FOǽ�n�^M���p�&v�[P�m�0����K@�X�|��a&���P� […]

Garbage in, garbage out: Why Ars ignored this week’s massive password breach
Security researcher arrested for disclosing US election website vulnerabilities
This unusual botnet targets scientists, engineers, and academics
Founder of virtual currency sentenced to 20 years in prison
Where to cut corners when the security budget gets tight
Attackers are probing and exploiting ImageTragick flaws
The Panama Papers can now be searched online
IBM’s Watson is going to cybersecurity school
You too? Who’s on the hacker hit list
<div>You too? Who's on the hacker hit list</div>

Some users’ accounts are more attractive to malicious hackers than others. Computer security experts have long focused on local administrators/root — and recently even more on all-powerful network administrators such as members of the domain admin and enterprise admin groups. Those same experts warn about protecting even slightly elevated accounts, like those of network configuration […]

Risk High Date Discovered May 10, 2016 Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will […]

Risk High Date Discovered May 10, 2016 Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will […]

Rock Stevens, Andrew Ruef and Marcin Icewall Noga discovered a heap-based buffer overflow vulnerability in the zip_read_mac_metadata function in libarchive, a multi-format archive and compression library, which may lead to the execution of arbitrary code if a user or automated system is tricked into processing a specially crafted ZIP file. For the stable distribution (jessie), […]

Risk High Date Discovered May 10, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]

Risk High Date Discovered May 10, 2016 Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can take advantage of this vulnerability to execute arbitrary code in the context of the currently logged-in user. Failed attacks […]

Risk High Date Discovered May 10, 2016 Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can take advantage of this vulnerability to execute arbitrary code in the context of the currently logged-in user. Failed attacks […]

Risk High Date Discovered May 10, 2016 Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can take advantage of this vulnerability to execute arbitrary code in the context of the currently logged-in user. Failed attacks […]

Risk Medium Date Discovered May 10, 2016 Description The Microsoft .NET Framework is prone to an information-disclosure vulnerability. An attacker can exploit this issue to perform man-in-the-middle attacks and obtain sensitive information. Successful exploits will lead to other attacks. Recommendations Block external access at the network boundary, unless external parties require service. If global access […]

Risk Medium Date Discovered May 10, 2016 Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. An attacker can exploit this issue to execute arbitrary script code in the context of the user running the application. […]

Risk Medium Date Discovered May 10, 2016 Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet Explorer 10, and 11 are vulnerable. Technologies Affected Microsoft Internet Explorer 10 Microsoft Internet Explorer 11 Recommendations Run all software as a […]

Risk High Date Discovered May 10, 2016 Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed […]

Sony To Produce Contact Lenses That Can Take Photos and Record Videos
How to work with rogue users

Simon McVittie discovered a cross-site scripting vulnerability in the error reporting of Ikiwiki, a wiki compiler. This update also hardens ikiwiki’s use of imagemagick in the img plugin. For the stable distribution (jessie), this problem has been fixed in version 3.20141016.3. For the unstable distribution (sid), this problem has been fixed in version 3.20160506. We […]

This Hacker was Arrested for Exposing Flaws in Lee County elections website
Aruba fixes networking device flaws that could open doors for hackers

Posted by Anthony Pell    Security fix for CVE-2015-8869 ——————————————————————————– Fedora Update Notification FEDORA-2016-1c4e616564 2016-05-09 00:02:50.053328 ——————————————————————————– Name : ocaml Product : Fedora 24 Version : 4.02.3 Release : 3.fc24 URL : http://www.ocaml.org Summary : OCaml compiler and programming environment Description : OCaml is a high-level, strongly-typed, functional and object-oriented programming language from the ML […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Fedora 24 ocaml-4.02.3-3.fc24 Fedora 22 openvas-gsa-6.0.10-3.fc22 Fedora 22 openvas-cli-1.4.4-1.fc22 Fedora 22 openvas-scanner-5.0.5-3.fc22 Fedora 22 openvas-manager-6.0.8-2.fc22 Fedora 22 openvas-libraries-8.0.7-2.fc22 Debian: 3571-1: ikiwiki: Summary Fedora 24 kernel-4.5.3-300.fc24 Community Linux Events Linux User […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Fedora 24 ocaml-4.02.3-3.fc24 Fedora 22 openvas-gsa-6.0.10-3.fc22 Fedora 22 openvas-cli-1.4.4-1.fc22 Fedora 22 openvas-scanner-5.0.5-3.fc22 Fedora 22 openvas-manager-6.0.8-2.fc22 Fedora 22 openvas-libraries-8.0.7-2.fc22 Debian: 3571-1: ikiwiki: Summary Fedora 24 kernel-4.5.3-300.fc24 Community Linux Events Linux User […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Fedora 24 ocaml-4.02.3-3.fc24 Fedora 22 openvas-gsa-6.0.10-3.fc22 Fedora 22 openvas-cli-1.4.4-1.fc22 Fedora 22 openvas-scanner-5.0.5-3.fc22 Fedora 22 openvas-manager-6.0.8-2.fc22 Fedora 22 openvas-libraries-8.0.7-2.fc22 Debian: 3571-1: ikiwiki: Summary Fedora 24 kernel-4.5.3-300.fc24 Community Linux Events Linux User […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Fedora 24 ocaml-4.02.3-3.fc24 Fedora 22 openvas-gsa-6.0.10-3.fc22 Fedora 22 openvas-cli-1.4.4-1.fc22 Fedora 22 openvas-scanner-5.0.5-3.fc22 Fedora 22 openvas-manager-6.0.8-2.fc22 Fedora 22 openvas-libraries-8.0.7-2.fc22 Debian: 3571-1: ikiwiki: Summary Fedora 24 kernel-4.5.3-300.fc24 Community Linux Events Linux User […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Fedora 24 ocaml-4.02.3-3.fc24 Fedora 22 openvas-gsa-6.0.10-3.fc22 Fedora 22 openvas-cli-1.4.4-1.fc22 Fedora 22 openvas-scanner-5.0.5-3.fc22 Fedora 22 openvas-manager-6.0.8-2.fc22 Fedora 22 openvas-libraries-8.0.7-2.fc22 Debian: 3571-1: ikiwiki: Summary Fedora 24 kernel-4.5.3-300.fc24 Community Linux Events Linux User […]

Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3571-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff May 08, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : ikiwiki CVE ID : CVE-2016-4561 Simon McVittie discovered a cross-site scripting vulnerability in the error reporting of Ikiwiki, a wiki compiler. This update also hardens ikiwiki’s use of imagemagick in the img plugin. For […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Fedora 24 ocaml-4.02.3-3.fc24 Fedora 22 openvas-gsa-6.0.10-3.fc22 Fedora 22 openvas-cli-1.4.4-1.fc22 Fedora 22 openvas-scanner-5.0.5-3.fc22 Fedora 22 openvas-manager-6.0.8-2.fc22 Fedora 22 openvas-libraries-8.0.7-2.fc22 Debian: 3571-1: ikiwiki: Summary Fedora 24 kernel-4.5.3-300.fc24 Community Linux Events Linux User […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Fedora 24 ocaml-4.02.3-3.fc24 Fedora 22 openvas-gsa-6.0.10-3.fc22 Fedora 22 openvas-cli-1.4.4-1.fc22 Fedora 22 openvas-scanner-5.0.5-3.fc22 Fedora 22 openvas-manager-6.0.8-2.fc22 Fedora 22 openvas-libraries-8.0.7-2.fc22 Debian: 3571-1: ikiwiki: Summary Fedora 24 kernel-4.5.3-300.fc24 Community Linux Events Linux User […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Fedora 24 ocaml-4.02.3-3.fc24 Fedora 22 openvas-gsa-6.0.10-3.fc22 Fedora 22 openvas-cli-1.4.4-1.fc22 Fedora 22 openvas-scanner-5.0.5-3.fc22 Fedora 22 openvas-manager-6.0.8-2.fc22 Fedora 22 openvas-libraries-8.0.7-2.fc22 Debian: 3571-1: ikiwiki: Summary Fedora 24 kernel-4.5.3-300.fc24 Community Linux Events Linux User […]

Posted by Anthony Pell    Update to version 20160222-1 to fix bugs(#1285888,1307846,1320511,1320956,1320958) ——————————————————————————– Fedora Update Notification FEDORA-2016-6c03d31846 2016-05-07 11:36:53.859231 ——————————————————————————– Name : parallel Product : Fedora 24 Version : 20160222 Release : 1.fc24 URL : http://www.gnu.org/software/parallel/ Summary : Shell tool for executing jobs in parallel Description : GNU Parallel is a shell tool for executing […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Fedora 24 ocaml-4.02.3-3.fc24 Fedora 22 openvas-gsa-6.0.10-3.fc22 Fedora 22 openvas-cli-1.4.4-1.fc22 Fedora 22 openvas-scanner-5.0.5-3.fc22 Fedora 22 openvas-manager-6.0.8-2.fc22 Fedora 22 openvas-libraries-8.0.7-2.fc22 Debian: 3571-1: ikiwiki: Summary Fedora 24 kernel-4.5.3-300.fc24 Community Linux Events Linux User […]

Century’s Biggest Leak Panama Papers now Available Online
Big businesses in the UK ‘experience regular data breaches’

��}�۶��o�*���R,���ݒ�=vN|>��f&���(�8C�4/�Q��:��_��Cl�>�’�n��4 �8�v.�H��ht7��ѽg?����9������7wM��Cӝ��j?�(��ؾ�)��L��?4o��3j��}��y4��տO�G3���F?��EO9�܈��v��BF�WO��ed`�G���4���X�W��/��_���h���7#{�Ƞ^<�QkB�U]sF{ʅM�DR�mEӞE/��؏�];�MGG�C{�2Hϛ8T�j4���� �`�6/�}�[�w�����2ik��?y1|c�i~�����}�9/ka^��m�՛- ����������q{���nw��l�w�t��V��"��tl���)a�ph8���Ga���l������)tOC��ȡ����vi�F����ȃ������a�;���I���dPs4�!/������4�h8 l?7p����(�%��M��3ϝ�TZ�T����X6����� �����%4���C@-G��t����C��c @�冱gZsGk������n�a�y�l�7�,е�B�9�Y �G�z{8�̜Ѝ�Sҙ��x��#N�(�Ay��A{g�yp����i��”ГP�pd��t�ff�PV��2dbr�F;�h�@j�oفZI?of��:�YQ�s��*zD^pMgqF6ȯ�F����w���lF���l2��&��ĝ��Z��}:���E�!鑏���O��y���P��^0yg0҄�`”��`u�{�˽�;Ci(�T�}w?B/FT9�@g��b�e��}��ݑ[��Y�^��L���g�۳�1r�����#�ֽq�2�W3�ƨ�1�M��Y�xl7� uFe��#ȍj8�u�z��� ���{=x ��)mK�4����m�9�O�k��E�j` �=_i@G�=�i��IF*f����X1R;�������I}�Y������m���ڍ�Wo4�zc�G���~|Y��u’Ѵߡ���&p�VgG�j���,��a�Zk�6��F�����m���ﵮR��54�V?�a0Ꙉl);6�ت�>]���� 5&JZ�Mߧ�u����О�0�X�0{��D*�F�� ��W?�E�^~����34G罔q��M��4�s���+����I@v �e=��.��Cl<���hY,�^�&��Ҙ4�� ��,��FJD�RV��x��Ƕ�_va�k7T]CB�; 8t�{r�e���~Ձ� 3����Uc�K����2��c]h��z4�5,'~��C����W5���7��G+tW5�#��U��A��N��l�pf;t�`? ����}����L���8�nЇ0s��&`��j���ʾN�=�F��Eg�l�Z���燤I��^�#(���6'PHk�8�4X� `�*HMK����Q5� v����-�^���h�Ѡ:�9�+���u����h��MO�y��V�*����L��Y”Z���%�k���_�>m��̞�5$y.��Q(��3f{޹M����:P2h�o@�p�)acӺ0��;�f0��M^�³P�C�j�����ܕ�t”�&�@yM�w�����˙��![�q�ONH[o��(�r�8�W���Ɓ����1����| ��D nd^N��e60 `��^��SI;ʢOKR��!����H�$kz����&���G��=&�{�Vw�$�š���0�Q�9�T!I 0���&te�� ��/ q�^5`j�r��Gl�s�”��6��<���}�x~<�����~)0��ԀŒ193���c�r^p�=]��j�N�ߙ��� �t��D9���Z�s��������F�#����Q�}%_����^��x@p7

UAE InvestBank Hack: Leaked Data showing passport and Credit Card Details
Kiddicare customers at risk after data spills from test server
Twitter blocks access to analytics around its data by US intelligence agencies
The security review: Jigsaw and passphrases

��}�۶��o�*��)S�E�k�ǒ�=vN|�{3N���w “!�3��c4�3U���n�n�}���’��&�I�)�CI#;ɮ}>�”�F����n4�G�>y�˛�价�^��hO�Ro�Әg�x�� dC窧�#2�����G�9aM/��A�;�ƌ��;����h�bʋ��Ĺ�i’�3/6���K��i1�����5�a��^��4��p�����ğ4v� ����G,_գ��.6 �0VJO;�lv�X��?��ء�Y�e�v���fDŇK:C�D|O�|6�������a���iw,”�L��.H�ܞ�3�Ecƀ1�_�݊”�L��О��_�0�=M�t:5��u.YĬ$t�i��40$R�x�&,j�w��28,�C����}t�0�۱$��~;�7f��� #1���G����^�-CGp��ߝQD��z6 h�F,z�U�Yd�NP����`$�E�b���?��ߣbS 2;���r���N�c�,| �oD�h�(Ry��CR/�’S2�+/?A��Ű����5��xY��=`,w���{��n�u�L���9��P�j�H2��0�q�v}�z�P�;Cٯ.�Ř��c�lai��#��_hp� ]��1�(xg(9����9�`+���=����M��(�$��c���� c��֮�:|�nu[G�;[��Vk)��o��]m���9�= ����=gBGl�qTtg�>�#9�;M� #�1�{���N�c�#�}��bP�1�,�J�Q2��p�-(��=��.Y�B��/�[HJBo�(-���Xf���~xC�q�n�_|����k����L>A��”�H�’��%o�>��3u=��&y ����4��|A�I��’!X�@��KGZ�ףX1R;��6��П���}�۬�����k���;�칵_o��z�2c���?���M�y�x��n�h����+a���z6v��0B�����F�n�>��Z��{�댦l M%�Տ-3 �Ed+ٱ1�Ve����-}”Q��k��ЪI��y���q�U����BNTQQ�c� � �O0�He|�]���~�����W��’�uԺ�e�S��la��S�F��^!�����r�k������m�҉@�Y�V~WӠe鍽u�l�1j�k���,*�FJ�1�ƼPM�=�m�p��;�]CA�; Z8t zr�e���~Ձ� 3B����uch*����r��GCSj��f<��5,'��C�����5���o%�#�����QS�U��Aty�^U��3|#�8.�5�O�|�{�v���#�,Q�ɽt���m��?”-b��A�������2KpxF��xv>�P���>^����sU’����q����͝J �N�;���]723C���5&������bx�txu�4��:i��T՟�;���:3��`�N�b����$� r�{�{Υo�(%(I[F;�S���-���pl6�����4�#��K疨�5U���h�6��o�P5��l��Z&[����;@Q@�m#��A�?�GqH��`�A�$������H��=�5a��LTAj�������v찑ζ��dz w{F#�����rBx5�p��Y4�=�c:pY�aC*����9<ރT��6����8;x������� �j�^A�J/�=#qHb�#�u����7�]���[����T�z�[� :�7�2 4�S�J%�<��mv���_��g⺑�`�B��s����/�က��|%�F��Ԛ�O)S�C�0?2Zc��'3�!�7! ��d1f�I��$�ST�S-Xl�D��x.���'�Z�Dօ+[�߯����+t��v?����F,����c��(j����x�*��_�6���]u��У=�A�ʵ�fE�&.|��k9�I~8=%�E�e�.�^E&�� =ԅ0��a�ϣ��.4�-�y1����m`�(��P�g�,��e��J�B0�s6�Jz$����ᅮ��G�}��*ΐ���[�����6��LG��ҥ$��/oR���0a�/ q�^o6��=��a~���D�pM^�<ҏUdU#Sع��63Ax��ʆ~�j�J�Ds��Q��� �Ƶw:��o�+澰��ۻ���a�s��E�P�Ľ���C��y�X&m�,�m��zB�w�e#���/=r

FBI: No, you shouldn’t pay ransomware extortionists
How to protect your Dropbox account with two-step verification (2SV)
OpIcarus Finds More Targets as Banks in Panama, Bosnia and Kenya Go Offline
According to Chrome, Safari and FireFox ThePirateBay is a Phishing Site
40 million User Data from Adult Social Network Emerges on Dark Net
10-year-old gets $10,000 bounty for finding Instagram vulnerability
Another breach, another dollar: Is it time to kill the password?