January 3, 2019
What is threat cumulativity and what does it mean for digital security?
A reflection on how acknowledging the cumulative nature of cyber-threats and understanding its implications can benefit our digital security The post What is threat cumulativity and what does it mean for digital security? appeared first on WeLiveSecurity
January 3, 2019
Hackers Hijack Smart TVs to Promote PewDiePie
January 3, 2019
US newspapers battle ransomware
January 3, 2019
Dark Overlord hackers release alleged 9/11 lawsuit documents
January 3, 2019
Vietnam’s New Cyber Law Threatens Free Speech
January 3, 2019
Hackers Target North Korean Defectors
January 3, 2019
Warn your friends they can’t bypass Facebook with this hoax
January 3, 2019
LinuxSecurity.com: Multiple issues were fixed in Qt. CVE-2018-15518 A double-free or corruption during parsing of a specially crafted
January 3, 2019
Risk Level: Very Low. Type: Trojan.
January 3, 2019
Risk Level: Very Low. Type: Trojan.
January 3, 2019
security update
January 2, 2019
Newsmaker Interview: Bruce Schneier on Physical Cyber Threats
January 2, 2019
LinuxSecurity.com: This update includes the changes in tzdata 2018i for the Perl bindings. For the list of changes, see DLA-1625-1. For Debian 8 “Jessie”, this problem has been fixed in version
January 2, 2019
LinuxSecurity.com: This update includes the changes in tzdata 2018i. Notable changes are: – Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21. A new
January 2, 2019
LinuxSecurity.com: Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. For Debian 8 “Jessie”, this problem has been fixed in version
January 2, 2019
LinuxSecurity.com: Fix CVEs as described in related RHBZ bug.
January 2, 2019
LinuxSecurity.com: Fix CVEs as described in related RHBZ bug.
January 2, 2019
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 2, 2019
This Netflix-themed scam prompts FTC to issue warning
The message starts off with the kind of information that is apt to send shivers down the spines of many binge-watchers The post This Netflix-themed scam prompts FTC to issue warning appeared first on WeLiveSecurity
January 2, 2019
EU Offers Bug Bounties For 14 Open Source Projects
January 2, 2019
Chrome in Android Leaks Device Fingerprinting Info
January 2, 2019
Train for the fight against cybercrime at SANS London 2019
January 2, 2019
IT Security Vulnerability Roundup – December 2018
January 2, 2019
Appearing on the ‘Random but Memorable’ podcast
January 2, 2019
Risk Level: Very Low. Type: Trojan.
January 2, 2019
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 1, 2019
LinuxSecurity.com: Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. For the stable distribution (stretch), this problem has been fixed in
January 1, 2019
Threatlist: Dark Web Markets See an Evolution in Q3
January 1, 2019
2019 Malware Trends to Watch
January 1, 2019
Hackers Threaten to Dump Insurance Files Related to 9/11 Attacks
January 1, 2019
LinuxSecurity.com: Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment. (CVE-2018-19149) References:
December 31, 2018
LinuxSecurity.com: An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by “j a v a s c r i p t:” in Internet Explorer (CVE-2018-19787).
December 31, 2018
LinuxSecurity.com: Possible denial of service vulnerability due to a missing check in Lib/wave.py to verify that at least one channel is provided (CVE-2017-18207). Python’s elementtree C accelerator failed to initialise Expat’s hash
December 31, 2018
LinuxSecurity.com: Graphicsmagick has been updated to fix several bugs and security issues. References: – https://bugs.mageia.org/show_bug.cgi?id=23157 – http://www.graphicsmagick.org/NEWS.html#november-17-2018
December 31, 2018
LinuxSecurity.com: debian-security-support, the Debian security support coverage checker, has been updated in jessie. The jessie relevant changes are: * Mark jasperreports as end-of-life in Jessie.
December 31, 2018
Malware Attack Crippled Production of Major U.S. Newspapers
December 31, 2018
Ransomware vs. printing press? US newspapers face “foreign cyberattack”
Did malware disrupt newspaper deliveries in major US cities? Here’s what’s known about the incident so far and the leading suspect: Ryuk ransomware. Plus, advice on defending your organization against such attacks. The post Ransomware vs. printing press? US newspapers face “foreign cyberattack” appeared first on WeLiveSecurity
December 31, 2018
Cryptocurrency Wallet Hacks Spark Dustup
December 31, 2018
2018: Research highlights from ESET’s leading lights
As the curtain slowly falls on yet another eventful year in cybersecurity, let’s look back on some of the finest malware analysis by ESET researchers in 2018 The post 2018: Research highlights from ESET’s leading lights appeared first on WeLiveSecurity
December 31, 2018
Hackers pocketed $878,000 from cryptocurrency bug bounties in 2018
December 31, 2018
EU offers bounties to help find security flaws in open source tools
December 31, 2018
How to secure your Instagram account using 2FA
December 31, 2018
LinuxSecurity.com: It was discovered that there was a potential denial of service vulnerability in tar, the GNU version of the tar UNIX archiving utility.
December 31, 2018
LinuxSecurity.com: Updated to 3.3.4. Security fix by upstream: Anti-Phishing protection.. Server-provided text will not appear in user-facing GUI windows anymore. Server error messages are instead parsed and mapped to predefined strings.
December 31, 2018
Risk Level: Very Low. Type: Trojan.
December 31, 2018
Risk Level: Very Low. Type: Trojan.
December 31, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Rust, the worst which may allow local attackers to execute arbitrary code.
December 30, 2018
LinuxSecurity.com: A vulnerability in GKSu might allow attackers to execute arbitrary commands.
December 30, 2018
Graham Cluley’s Desert Planet Picks
December 30, 2018
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
December 30, 2018
LinuxSecurity.com: An update that solves four vulnerabilities and has 17 fixes is now available.
December 30, 2018
LinuxSecurity.com: An update that solves one vulnerability and has two fixes is now available.
December 30, 2018
LinuxSecurity.com: An update that solves 9 vulnerabilities and has four fixes is now available.
December 30, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
December 30, 2018
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
December 30, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
December 30, 2018
How Facebook Tracks Non-Users via Android Apps
December 30, 2018
LinuxSecurity.com: **Archive_Tar version 1.4.4** * Fix Bug #21058: Long symlinks are not supported [mrook] * Fix Bug #23782: Prevent phar:// files from being extracted [mrook] — **PEAR** * drop deprecated option used when running `pear run-tests`
December 30, 2018
LinuxSecurity.com: This update fixes CVE-2018-16646, CVE-2018-19058, CVE-2018-19059, CVE-2018-19060, CVE-2018-19149.
December 30, 2018
LinuxSecurity.com: Update to leptonica-1.77.0, see http://www.leptonica.com/source/version- notes.html for details.
December 30, 2018
LinuxSecurity.com: Update to leptonica-1.77.0, see http://www.leptonica.com/source/version- notes.html for details.
December 30, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
December 29, 2018
security update
December 29, 2018
‘Snowden Refugee’ Has No Regrets for Helping Whistleblower
December 29, 2018
How to secure your Twitter account
December 29, 2018
Depressing lessons 2018’s endless data breaches taught us
December 29, 2018
Hackers steal personal info of 1,000 North Korean defectors
December 29, 2018
LinuxSecurity.com: This update fixes CVE-2017-18267, CVE-2018-13988, CVE-2018-16646, CVE-2018-19058, CVE-2018-19059, CVE-2018-19060, CVE-2018-19149
December 29, 2018
LinuxSecurity.com: This update fixes CVE-2018-18088 and CVE-2018-6616
December 29, 2018
LinuxSecurity.com: This update fixes CVE-2018-18088 and CVE-2018-6616
December 29, 2018
LinuxSecurity.com: Update to leptonica-1.77.0, see http://www.leptonica.com/source/version- notes.html for details.
December 29, 2018
LinuxSecurity.com: Update to leptonica-1.77.0, see http://www.leptonica.com/source/version- notes.html for details.
December 29, 2018
LinuxSecurity.com: Security fix for fts3/4 corrupt database exploit
December 29, 2018
LinuxSecurity.com: Security fix for CVE-2018-16869
December 29, 2018
LinuxSecurity.com: Several vulnerabilities were discovered in libextractor, a library to extract arbitrary meta-data from files, which may lead to denial of service or memory disclosure if a malformed OLE file is processed.
December 28, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
December 28, 2018
security update
December 28, 2018
security update
December 28, 2018
First-Ever UEFI Rootkit Tied to Sednit APT
December 28, 2018
LinuxSecurity.com: A XML External Entity (XXE) vulnerability was discovered in c3p0, a library for JDBC connection pooling, that may be used to resolve information outside of the intended sphere of control.
December 28, 2018
LinuxSecurity.com: Multiple security issues were found in libarchive, a multi-format archive and compression library: Processing malformed RAR archives could result in denial of service or the execution of arbitrary code and malformed WARC, LHarc, ISO, Xar or CAB archives could result in denial of service.
December 28, 2018
LinuxSecurity.com: Multiple vulnerabilities have been discovered in Wireshark, a network protocol analyzer, which could result in denial of service or the execution of arbitrary code.
December 28, 2018
LinuxSecurity.com: Some vulnerabilities were discovered in ghostscript, an interpreter for the PostScript language and for PDF.
December 28, 2018
Guardzilla Home Cameras Open to Anyone Wanting to Watch Their Footage
December 28, 2018
How to protect your Facebook account: a walkthrough
December 28, 2018
Hijacking Online Accounts Via Hacked Voicemail Systems
December 28, 2018
35C3 Day One: Security, Art and Hacking
December 28, 2018
Reading Time: ~2 min. Amazon User Receives Thousands of Alexa-Recorded Messages Upon requesting all his user data from Amazon, one user promptly received over 1,700 recorded messages from an Alexa device. Unfortunately, the individual didn’t own such a device. The messages were from a device belonging to complete stranger, and some of them could have easily […]
December 28, 2018