December 11, 2018
Facebook fined $11m for misleading users about how data will be used
Texas Instruments flicks Armis’ Bluetooth chip vuln off its shoulder
December 11, 2018
Latest Google+ flaw leads Chocolate Factory to shut down site early
December 11, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2018
Women in Cyber Take the Spotlight
December 10, 2018
LinuxSecurity.com: Multiple security issues were found in PHP, a widely-used open source general purpose scripting language: The EXIF module was susceptible to denial of service/information disclosure when parsing malformed images, the Apache module allowed cross-site-scripting via the body of a
December 10, 2018
Google Accelerates Google+ Shutdown After New Bug Discovered
December 10, 2018
Sextortion Emails Force Payment via GandCrab Ransomware
December 10, 2018
LinuxSecurity.com: An update that solves four vulnerabilities and has one errata is now available.
December 10, 2018
Risk Level: Very Low. Type: Trojan.
December 10, 2018
Old-School Bagle Worm Spotted in Modern Spam Campaigns
December 10, 2018
Volkswagen Giveaway Scam Peddles Ad Networks
December 10, 2018
Next Generation Dark Markets? Think Amazon or eBay for criminals
The “evolution” of these markets is making cybercrime easier than ever before The post Next Generation Dark Markets? Think Amazon or eBay for criminals appeared first on WeLiveSecurity
December 10, 2018
Massive botnet chews through 20,000 WordPress sites
December 10, 2018
Android click fraud apps mimic Apple iPhones to boost revenue
December 10, 2018
Microsoft’s gutting Edge and stuffing it with Chromium
December 10, 2018
235 members of dark web money counterfeiting gang busted
December 10, 2018
Security News This Week: Did Quora Get Hacked? Top Answer: Yes
December 10, 2018
Malicious sites abuse 11-year-old Firefox bug that Mozilla failed to fix
December 10, 2018
Microsoft calls for laws on facial recognition, issues principles
December 10, 2018
LinuxSecurity.com: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 10, 2018
LinuxSecurity.com: It was discovered that there was a XSS injection vulnerability in the LXML HTML/XSS manipulation library for Python. LXML did not remove “javascript:” URLs that used escaping such as
December 10, 2018
LinuxSecurity.com: An update for rh-git218-git is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 10, 2018
LinuxSecurity.com: An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service (CVE-2018-1336). The defaults settings for the CORS filter are insecure and enable
December 9, 2018
LinuxSecurity.com: An update that fixes 27 vulnerabilities is now available.
December 9, 2018
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
December 9, 2018
LinuxSecurity.com: An update that solves one vulnerability and has two fixes is now available.
December 9, 2018
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
December 9, 2018
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
December 9, 2018
DuckDuckGo study claims Google Incognito searches are not private
December 9, 2018
Hackers conducting botnet attacks through 20k hacked WordPress sites
December 9, 2018
Another MongoDB database exposes personal data of 66M users
December 9, 2018
Days After Massive Breach, Marriott Customers Await Details
December 9, 2018
security update
December 8, 2018
LinuxSecurity.com: Use after free flaw enabling arbitrary code execution. (CVE-2018-15982) Insecure Library Loading (DLL hijacking) flaw enabling privilege escalation. (CVE-2018-15983)
December 8, 2018
LinuxSecurity.com: The HTML thumbnailer was incorrectly accessing some content of remote URLs listed in HTML files. This meant that the owners of the servers referred in HTML files in your system could have seen in their access logs your IP address every time the thumbnailer tried to create the thumbnail (CVE-2018-19120).
December 8, 2018
GDPR Implementation Slow but Improving
December 8, 2018
6 Critical Website Elements You Need to Review
December 8, 2018
New AI tool aims to make CAPTCHA a thing of the past
December 8, 2018
Bethesda blunders, IRS sounds the alarm, China ransomware, and more
December 8, 2018
ThreatList: Gift Card-Themed BEC Holiday Scams Spike
December 7, 2018
security update
December 7, 2018
Type: Vulnerability. Adobe Flash Player is prone to an unspecified remote code-execution vulnerability; fixes are available.
December 7, 2018
Australia Anti-Encryption Law Triggers Sweeping Backlash
December 7, 2018
Risk Level: Very Low. Type: Trojan.
December 7, 2018
Risk Level: Very Low. Type: Trojan.
December 7, 2018
Risk Level: Very Low. Type: Trojan.
December 7, 2018
Risk Level: Very Low. Type: Trojan.
December 7, 2018
Risk Level: Very Low. Type: Trojan.
December 7, 2018
Risk Level: Very Low. Type: Trojan.
December 7, 2018
Reading Time: ~2 min. Touch ID Used to Scam Apple Users Two apps were recently removed from the Apple App Store after several users reported being charged large sums of money after installing the app and scanning their fingerprint. Both apps were fitness-related and had users scan their fingerprint immediately so they could monitor calories or […]
December 7, 2018
Using Fuzzing to Mine for Zero-Days
December 7, 2018
Three years in jail for teenager who spammed out school bomb threats
December 7, 2018
Microsoft Calls For Facial Recognition Tech Regulation
December 7, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
December 7, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.
December 7, 2018
LinuxSecurity.com: An update that solves 7 vulnerabilities and has two fixes is now available.
December 7, 2018
LinuxSecurity.com: An update that solves one vulnerability and has three fixes is now available.
December 7, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
December 7, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
December 7, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
December 7, 2018
Flash zero-day exploit spotted – patch now!
December 7, 2018
Kids’ VTech tablets vulnerable to eavesdropping hackers
December 7, 2018
Unencrypted medical data leads to 12-state litigation
December 7, 2018
Hacker-besieged DNA data tucked away under military care
December 7, 2018
Australia now has encryption-busting laws as Labor capitulates
December 7, 2018
The path to cloud security goes through integration
December 7, 2018
security update
December 7, 2018
LinuxSecurity.com: A vulnerability in EDE could result in privilege escalation.
December 6, 2018
LinuxSecurity.com: The package jupyter-notebook before version 5.7.2-1 is vulnerable to cross-site scripting.
December 6, 2018
LinuxSecurity.com: It was discovered that incorrect processing of very high UIDs in Policykit, a framework for managing administrative policies and privileges, could result in authentication bypass.
December 6, 2018
LinuxSecurity.com: Several security issues were fixed in OpenSSL.
December 6, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:3760
December 6, 2018
Infected WordPress Sites Are Attacking Other WordPress Sites
December 6, 2018
LinuxSecurity.com: Several security issues were fixed in SpamAssassin.
December 6, 2018
LinuxSecurity.com: An update for java-1.7.1-ibm is now available for Red Hat Satellite 5.6 and Red Hat Satellite 5.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 6, 2018
DanaBot evolves beyond banking Trojan with new spam-sending capability
ESET research shows that DanaBot operators have been expanding the malware’s scope and possibly cooperating with another criminal group The post DanaBot evolves beyond banking Trojan with new spam-sending capability appeared first on WeLiveSecurity
December 6, 2018
Facebook staff’s private emails published by fake news inquiry
December 6, 2018