LinuxSecurity.com: A vulnerability in the HTML_QuickForm package has been found which potentially allows remote code execution. References: – https://bugs.mageia.org/show_bug.cgi?id=24185
January 24, 2019
LinuxSecurity.com: It was discovered that libcaca incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service (CVE-2018-20544). It was discovered that libcaca incorrectly handled certain images. An
January 24, 2019
LinuxSecurity.com: An issue has been found in PowerDNS Recursor where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua (CVE-2019-3806).
January 24, 2019
Risk Level: Very Low. Type: Trojan.
January 24, 2019
ThreatList: Credential-Sniffing Phishing Attacks Erupted in 2018
January 24, 2019
Passwords at risk for users who fall for Eileen’s cousin’s voicemail
January 24, 2019
Colour us shocked: Google in €50m GDPR fine appeal bombshell
January 24, 2019
Bit-and-Piece DDoS Method Emerges to Torment ISPs
January 24, 2019
DarkHydrus Phishery tool spreading malware using Google Drive
January 24, 2019
Malicious apps deploy Anubis banking trojan using motion detection
January 24, 2019
World’s favourite open-source PDF interpreter needs patching (again)
January 24, 2019
Bomb threat spam may stem from GoDaddy DNS weakness
January 24, 2019
Can you spot the phish? Take Google’s test
Everybody loves quizzes. So why not take this one and hone your phish-spotting prowess? The post Can you spot the phish? Take Google’s test appeared first on WeLiveSecurity
January 24, 2019
Supreme Court won’t consider case against defamatory reviews on Yelp
January 24, 2019
How to stop a hacker home invasion! [VIDEO]
January 24, 2019
Update now! Apple releases first 2019 iOS and macOS patches
January 24, 2019
Nasty security bug found and fixed in Linux apt
January 24, 2019
New ransomware strain is locking up Bitcoin mining rigs in China
January 24, 2019
Hadoop coop thrown for loop by malware snoop n’ scoop troop? Oh poop
January 24, 2019
LinuxSecurity.com: Security fix for CVE-2018-20551, CVE-2018-20481, CVE-2018-20650 and CVE-2018-18897.
January 24, 2019
LinuxSecurity.com: – xattr: strip credentials from any URL that is stored (CVE-2018-20483)
January 24, 2019
LinuxSecurity.com: Security fix for CVE-2019-5010 in Python. Anaconda is joined because an unrelated fix was done there that allowed to remove a workaround in Python.
January 24, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 24, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 24, 2019
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
January 23, 2019
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
January 23, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 23, 2019
Redaman Spams Russian Banking Customers with Rotating Tactics
January 23, 2019
Malware in Ad-Based Images Targets Mac Users
January 23, 2019
Monero: Cybercrime’s Top Choice for Mining Malware
January 23, 2019
Risk Level: Very Low. Type: Trojan.
January 23, 2019
Risk Level: Very Low. Type: Trojan.
January 23, 2019
Risk Level: Very Low. Type: Trojan.
January 23, 2019
Risk Level: Very Low. Type: Trojan.
January 23, 2019
Got a Nest security camera? Enable two-step verification now
January 23, 2019
6 Signs of Successful Threat Hunting
January 23, 2019
‘Chaos’ iPhone X Attack Alleges Remote Jailbreak
January 23, 2019
Popular free Android VPN apps on Play Store contain malware
January 23, 2019
U.S. Gov Issues Urgent Warning of DNS Hijacking Attacks
January 23, 2019
100 million online bets exposed by leaky database
January 23, 2019
Reading Time: ~3 min. Fitness trackers and other digital wearables have unlocked a new era of convenience and engagement in consumer health. Beyond general fitness trackers, you can find wearables for a variety of purposes; some help diabetics, some monitor for seizure activity, and some can aid in senior citizens’ health and quality of life. […]
January 23, 2019
Black hats are great for language diversity, says Eugene Kaspersky
January 23, 2019
PewDiePie-spammers and whale-flingers exploit hole in Atlas game
January 23, 2019
Former employee blamed for hack of WordPress plugin maker
The plugin’s users are recommended to change their passwords on WPML’s website following havoc reportedly wrought by a disgruntled ex-employee The post Former employee blamed for hack of WordPress plugin maker appeared first on WeLiveSecurity
January 23, 2019
Microsoft Windows RCE Flaw Gets Temporary Micropatch
January 23, 2019
RogueRobin Malware Uses Google Drive as C2 Channel
January 23, 2019
Google fined $57m for data protection violations
January 23, 2019
Hijacked Nest cam broadcasts bogus warning about incoming missiles
January 23, 2019
LinuxSecurity.com: New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
January 23, 2019
LinuxSecurity.com: Multiple vulnerabilities were found in the journald component of systemd which can lead to a crash or code execution. CVE-2018-16864
January 23, 2019
LinuxSecurity.com: Fix for CVE-2019-5885 Upgrade notes available at https://github.com/matrix- org/synapse/blob/v0.34.0/UPGRADE.rst#upgrading-to-v0340 – Note this continues to use Python 2.
January 23, 2019
LinuxSecurity.com: Several vulnerabilities have been resolved in libjpeg-turbo, Debian’s default JPEG implemenation. CVE-2016-3616
January 22, 2019
How Web Apps Can Turn Browser Extensions Into Backdoors
January 22, 2019
Google Fined $57M in Largest GDPR Slap Yet
January 22, 2019
Adobe Issues Unscheduled Updates for Experience Manager Platform
January 22, 2019
Google fined €50 million for violating EU data privacy rules
France’s data protection watchdog issues the first major penalty under the EU’s new privacy regime The post Google fined €50 million for violating EU data privacy rules appeared first on WeLiveSecurity
January 22, 2019
Email security does not end with your password
A strong password is a great start, but there are more ways to make sure that your email is as secure as possible The post Email security does not end with your password appeared first on WeLiveSecurity
January 22, 2019
Bicycle-riding hitman convicted with Garmin GPS watch location data
January 22, 2019
WhatsApp fights the spread of deadly fake news with recipient limit
January 22, 2019
LinuxSecurity.com: It was discovered that aria2 (the lightweight command-line download utility) can store passed user credentials in a log file when using the –log option. This might allow local users to obtain sensitive information by reading this file.
January 22, 2019
DNC targeted by Russian hackers beyond 2018 midterms, it claims
January 22, 2019
security update
January 22, 2019
Twitter bug may have exposed private tweets of Android users for years
If you use Twitter for Android and want your tweets to be private, you may want to play safe and review your settings The post Twitter bug may have exposed private tweets of Android users for years appeared first on WeLiveSecurity
January 21, 2019
Is the Ten Year Challenge a Facebook scam???
January 21, 2019
Twitter bug exposed some Android private tweets to public view
January 21, 2019
Websites can steal browser data via extensions APIs
January 21, 2019
Tim Cook demands a way for users to delete their personal data
January 21, 2019
LinuxSecurity.com: admin: Prevent access if any authentication agent isn’t available
January 21, 2019
New ransomware steals PayPal data with phishing link in ransom note
January 20, 2019
LinuxSecurity.com: Fix for use after free in affile_dw_reap
January 20, 2019
LinuxSecurity.com: libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2_MSG_USERAUTH_SUCCESS message in place of the SSH2_MSG_USERAUTH_REQUEST message which the server would expect to initiate authentication, the attacker could successfully authentciate
January 20, 2019
Serious Security: What 2000 years of cryptography can teach us
January 20, 2019