LinuxSecurity.com: systemd was found to suffer from multiple security vulnerabilities ranging from denial of service attacks to possible root privilege escalation.
November 19, 2018
Olympic Destroyer Wiper Changes Up Infection Routine
November 19, 2018
LinuxSecurity.com: systemd-tmpfiles could be made to change ownership of arbitrary files.
November 19, 2018
LinuxSecurity.com: Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.1.37. Please see the MariaDB 10.1 Release Notes for further details:
November 19, 2018
VisionDirect Blindsided by Magecart in Data Breach
November 19, 2018
Ford Eyes Use of Customers’ Personal Data to Boost Profits
November 19, 2018
Multi-factor failure locks out Microsoft Office 365 and Azure users
November 19, 2018
Vision Direct hack reveals customer credit card details
November 19, 2018
Stopping the Infiltration of Things
November 19, 2018
Cryptojacking Attack Targets Make-A-Wish Foundation Website
November 19, 2018
Britain may not be able to fend off a determined cyber-attack, MPs warn
November 19, 2018
Cybersecurity a big concern in Canada as cybercrime’s impact grows
90% of Canadians surveyed agreed that cybercrime was an important “challenge to the internal security of Canada” The post Cybersecurity a big concern in Canada as cybercrime’s impact grows appeared first on WeLiveSecurity
November 19, 2018
Mozilla’s IoT gift guide ranks gadgets from secure to shoddy
November 19, 2018
Scumbags cram Make-A-Wish website with coin-mining malware
November 19, 2018
Has that website been pwned? Firefox Monitor will tell you
November 19, 2018
Did a copy-paste error reveal the US’s secret case against Assange?
November 19, 2018
Using Airport and Hotel Wi-Fi Is Much Safer Than It Used to Be
November 19, 2018
Prepare for the battle against cybercrime at SANS London 2019
November 19, 2018
Washington Post offers invalid cookie consent under EU rules – ICO
November 19, 2018
A little phishing knowledge may be a dangerous thing
November 19, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
November 19, 2018
Congress Passes Bill to Create New Federal Cybersecurity Agency
November 18, 2018
New HealthEquity Data Breach Exposes PII/PHI of Almost 21,000 Customers
November 18, 2018
Instagram bug inadvertently exposed some user’s passwords
November 18, 2018
LinuxSecurity.com: An out-of-bounds bounds memory access issue was discovered in chromium’s v8 javascript library by cloudfuzzer. This update also fixes two problems introduced by the previous security
November 18, 2018
security update
November 18, 2018
LinuxSecurity.com: nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption (CVE-2018-16843). nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the
November 17, 2018
LinuxSecurity.com: Due to incorrect input handling, Squid is vulnerable to a Cross-Site Scripting vulnerability when generating HTTPS response messages about TLS errors (CVE-2018-19131). Due to a memory leak in SNMP query rejection code, Squid is vulnerable
November 17, 2018
LinuxSecurity.com: Luis Merino, Markus Vervier and Eric Sesterhenn discovered that missing input sanitising in the Hylafax fax software could potentially result in the execution of arbitrary code via a malformed fax message (CVE-2018-17141).
November 17, 2018
LinuxSecurity.com: Hanno B?ck discovered that libmspack incorrectly handled certain CHM files. An attacker could possibly use this issue to cause a denial of service (CVE-2018-14679, CVE-2018-14680). Jakub Wilk discovered that libmspack incorrectly handled certain KWAJ
November 17, 2018
LinuxSecurity.com: This update fixes various security vulnerabilities affecting the SDL2_image library, listed below. The fixes are provided in SDL2_image 2.0.4, which depends on SDL2 2.0.8 or later. As such, the SDL2 and SDL2_mixer libraries are also updated to their current stable releases, providing various bug fixes and features.
November 17, 2018
LinuxSecurity.com: The ProcessGpsInfo function may have allowed a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAG_GPS_ALT handling (CVE-2018-16554).
November 17, 2018
LinuxSecurity.com: The package patch before version 2.7.6-7 is vulnerable to multiple issues including arbitrary command execution and denial of service.
November 17, 2018
Type: Vulnerability. Microsoft Internet Explorer is prone to a memory corruption vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Team Foundation Server is prone to a cross-site scripting vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Azure App Service is prone to a cross-site scripting vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Project is prone to a remote code-execution vulnerability; fixes are available.
November 17, 2018
Type: Vulnerability. Microsoft Windows is prone to a local security-bypass vulnerability; fixes are available.
November 17, 2018
Under attack! Should your company ever ‘hack back’?
November 17, 2018
Mylobot Botnet Now Exfiltrates Data Using Second Stage Khalesi Trojan
November 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
November 17, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has 7 fixes is now available.
November 17, 2018
LinuxSecurity.com: An update that fixes 11 vulnerabilities is now available.
November 17, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has three fixes is now available.
November 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
November 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
November 17, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.
November 17, 2018
LinuxSecurity.com: An update that solves one vulnerability and has 8 fixes is now available.
November 17, 2018
Emoji Attack Can Kill Skype for Business Chat
November 16, 2018
Gmail Glitch Offers Stealthy Trick for Phishing Attacks
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to local security-bypass vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Outlook is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Active Directory Federation Services is prone to a cross-site scripting vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to an information-disclosure vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local security-bypass vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Powershell is prone to a security bypass vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows PowerShell is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Word is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Excel is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows DirectX is prone to a information-disclosure vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Edge is prone to an information disclosure vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Edge is prone to a security vulnerability that may allow attackers to conduct spoofing attacks; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Outlook is prone to an information-disclosure vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Edge is prone to a remote privilege-escalation vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Outlook is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Outlook is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Outlook is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft Team Foundation Server is prone to a remote code-execution vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
November 16, 2018