LinuxSecurity.com: Security fix for CVE-2019-6706.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
Japan to Hunt Down Citizens’ Insecure IoT Devices
January 29, 2019
Feds Dismantle Dark Web Credentials Market
January 29, 2019
Risk Level: Very Low. Type: Trojan.
January 29, 2019
Risk Level: Very Low. Type: Trojan.
January 29, 2019
Apple takes Group FaceTime offline after discovery of spying bug
The company is rushing to fix a glitch that may let other iPhone users hear and see you – before you answer the call The post Apple takes Group FaceTime offline after discovery of spying bug appeared first on WeLiveSecurity
January 29, 2019
Apple Disables Group FaceTime Following Major Privacy Glitch
January 29, 2019
Apple scrambles to fix FaceTime eavesdropping bug
January 29, 2019
Reading Time: ~4 min. It’ll cost you a buck. Just like everyone else’s. The use of a Social Security Number (SSN) as unique identifiers has long been a contentious subject. SSNs were never intended to be used for identification, and their ubiquitous abuse for identification and authentication has lead me to call them “Social Insecurity […]
January 29, 2019
Hear me out! Thousands tell UK taxman to wipe their voice IDs
Even so, the database has grown to seven million voiceprints amid a controversy that puts the spotlight on the privacy implications of the collection of biometric information The post Hear me out! Thousands tell UK taxman to wipe their voice IDs appeared first on WeLiveSecurity
January 29, 2019
Japanese government will try to hack its citizens’ IOT devices
January 29, 2019
Facebook to tie together WhatsApp, Instagram and Facebook Messenger
January 29, 2019
Thieves’ names and descriptions made public on B&Q database
January 29, 2019
The race to lock down industrial control systems | Salted Hash Ep 44
January 29, 2019
Credential-stuffing attack prompts Dailymotion password reset
January 29, 2019
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
January 29, 2019
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
January 29, 2019
LinuxSecurity.com: Several issues in wireshark, a network traffic analyzer, have been found. Dissectors of – ISAKMP, a Internet Security Association and Key Management Protocol
January 28, 2019
Reading Time: ~4 min. This is the first of a three-part report on the state of three malware categories: miners, ransomware and information stealers. In Webroot’s 2018 mid-term threat report, we outlined how cryptomining, and particularly cryptojacking, had become popular criminal tactics over the first six months of last year. This relatively novel method of cybercrime […]
January 28, 2019
Dailymotion Fights Ongoing Credential-Stuffing Attack
January 28, 2019
Risk Level: Very Low. Type: Trojan.
January 28, 2019
WordPress Users Urged to Delete Zero-Day-Ridden Plugin
January 28, 2019
Russia hit by new wave of ransomware spam
Among the increased number of malicious JavaScript email attachments observed in January 2019, ESET researchers have spotted a large wave of ransomware-spreading spam targeting Russian users The post Russia hit by new wave of ransomware spam appeared first on WeLiveSecurity
January 28, 2019
How my Instagram account got hacked
January 28, 2019
How to protect yourself this Data Privacy Day
January 28, 2019
BGP secure routing experiment ends in online row
January 28, 2019
Twitter scammers jump in on real-time complaints to companies
January 28, 2019
Suspected GDPR violations prompt over 95,000 complaints
Eight months after the landmark rules came into effect, data released by the European Commission provides a glimpse into the law’s application The post Suspected GDPR violations prompt over 95,000 complaints appeared first on WeLiveSecurity
January 28, 2019
Even Microsoft can’t escape ‘reply all’ email storms
January 28, 2019
YouTube subscribers getting spammed by celebrity imposters
January 28, 2019
LinuxSecurity.com: Several issues were discovered in qtbase-opensource-src, a cross-platform C++ application framework, which could lead to denial-of-service via application crash. Additionally, this update fixes a problem affecting vlc, where it would start without a GUI.
January 28, 2019
LinuxSecurity.com: Multiple vulnerabilities were discovered in coTURN, a TURN and STUN server for VoIP. CVE-2018-4056
January 28, 2019
security update
January 28, 2019
security update
January 28, 2019
LinuxSecurity.com: Tavis Ormandy discovered a vulnerability in Ghostscript, the GPL PostScript/PDF interpreter, which may result in denial of service or the execution of arbitrary code if a malformed Postscript file is processed (despite the -dSAFER sandbox being enabled).
January 27, 2019
LinuxSecurity.com: The package nasm before version 2.14.02-1 is vulnerable to denial of service.
January 27, 2019
LinuxSecurity.com: The package haproxy before version 1.9.0-1 is vulnerable to denial of service.
January 27, 2019
LinuxSecurity.com: The package apache before version 2.4.38-1 is vulnerable to multiple issues including denial of service and insufficient validation.
January 27, 2019
LinuxSecurity.com: The package powerdns-recursor before version 4.1.9-1 is vulnerable to multiple issues including insufficient validation and access restriction bypass.
January 27, 2019
LinuxSecurity.com: The package matrix-synapse before version 0.34.1.1-1 is vulnerable to private key recovery.
January 27, 2019
LinuxSecurity.com: The package go before version 2:1.11.5-1 is vulnerable to private key recovery.
January 27, 2019
LinuxSecurity.com: The package go before version 2:1.11.5-1 is vulnerable to private key recovery.
January 27, 2019
LinuxSecurity.com: New version 2.6.6. Security fix for CVE-2019-5716, CVE-2019-5717, CVE-2019-5718, CVE-2019-5719
January 26, 2019
security update
January 26, 2019
LinuxSecurity.com: krb5, a MIT Kerberos implementation, had several flaws in LDAP DN checking, which could be used to circumvent a DN containership check by supplying special parameters to some calls.
January 25, 2019
LabKey Vulnerabilities Threaten Medical Research Data
January 25, 2019
Threatpost News Wrap Podcast For Jan. 25
January 25, 2019
SD-WAN admin? Your number came up in Cisco’s latest bug list
January 25, 2019
Razy Malware Attacks Browser Extensions to Steal Cryptocurrency
January 25, 2019
Reading Time: ~2 min. Anatova Ransomware Reaches Global Market A new ransomware family, dubbed Anatova by researchers, has been infecting machines across the globe. During encryption, Anatova appears to focus on small files to speed up overall encryption times, but doesn’t append the encrypted files with a new extension. Unexpectedly, this variant demands DASH crypto […]
January 25, 2019
Fighting Emotet: lessons from the front line
January 25, 2019
#DeleteFacebook? #DeleteTwitter? #FatLotOfGood that will do you
January 25, 2019
Cops catch $15m crypto-crook
January 25, 2019
Facebook debuts scam ads reporting tool
January 25, 2019
LinuxSecurity.com: The PostgreSQL project has release a new minor release of the 9.4 branch. For Debian 8 “Jessie”, this has been uploaded as version
January 25, 2019
LinuxSecurity.com: New Version
January 25, 2019
Fighting Fire with Fire: API Automation Risks
January 24, 2019
LinuxSecurity.com: Ghostscript could be made to crash, access files, or run programs if it opened a specially crafted file.
January 24, 2019
LinuxSecurity.com: Several security issues were fixed in MySQL.
January 24, 2019