January 29, 2019
Facebook to tie together WhatsApp, Instagram and Facebook Messenger
January 29, 2019
Thieves’ names and descriptions made public on B&Q database
January 29, 2019
The race to lock down industrial control systems | Salted Hash Ep 44
January 29, 2019
Credential-stuffing attack prompts Dailymotion password reset
January 29, 2019
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
January 29, 2019
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
January 29, 2019
LinuxSecurity.com: Several issues in wireshark, a network traffic analyzer, have been found. Dissectors of – ISAKMP, a Internet Security Association and Key Management Protocol
January 28, 2019
Reading Time: ~4 min. This is the first of a three-part report on the state of three malware categories: miners, ransomware and information stealers. In Webroot’s 2018 mid-term threat report, we outlined how cryptomining, and particularly cryptojacking, had become popular criminal tactics over the first six months of last year. This relatively novel method of cybercrime […]
January 28, 2019
Dailymotion Fights Ongoing Credential-Stuffing Attack
January 28, 2019
Risk Level: Very Low. Type: Trojan.
January 28, 2019
WordPress Users Urged to Delete Zero-Day-Ridden Plugin
January 28, 2019
Russia hit by new wave of ransomware spam
Among the increased number of malicious JavaScript email attachments observed in January 2019, ESET researchers have spotted a large wave of ransomware-spreading spam targeting Russian users The post Russia hit by new wave of ransomware spam appeared first on WeLiveSecurity
January 28, 2019
How my Instagram account got hacked
January 28, 2019
How to protect yourself this Data Privacy Day
January 28, 2019
BGP secure routing experiment ends in online row
January 28, 2019
Twitter scammers jump in on real-time complaints to companies
January 28, 2019
Suspected GDPR violations prompt over 95,000 complaints
Eight months after the landmark rules came into effect, data released by the European Commission provides a glimpse into the law’s application The post Suspected GDPR violations prompt over 95,000 complaints appeared first on WeLiveSecurity
January 28, 2019
Even Microsoft can’t escape ‘reply all’ email storms
January 28, 2019
YouTube subscribers getting spammed by celebrity imposters
January 28, 2019
LinuxSecurity.com: Several issues were discovered in qtbase-opensource-src, a cross-platform C++ application framework, which could lead to denial-of-service via application crash. Additionally, this update fixes a problem affecting vlc, where it would start without a GUI.
January 28, 2019
LinuxSecurity.com: Multiple vulnerabilities were discovered in coTURN, a TURN and STUN server for VoIP. CVE-2018-4056
January 28, 2019
security update
January 28, 2019
security update
January 28, 2019
LinuxSecurity.com: Tavis Ormandy discovered a vulnerability in Ghostscript, the GPL PostScript/PDF interpreter, which may result in denial of service or the execution of arbitrary code if a malformed Postscript file is processed (despite the -dSAFER sandbox being enabled).
January 27, 2019
LinuxSecurity.com: The package nasm before version 2.14.02-1 is vulnerable to denial of service.
January 27, 2019
LinuxSecurity.com: The package haproxy before version 1.9.0-1 is vulnerable to denial of service.
January 27, 2019
LinuxSecurity.com: The package apache before version 2.4.38-1 is vulnerable to multiple issues including denial of service and insufficient validation.
January 27, 2019
LinuxSecurity.com: The package powerdns-recursor before version 4.1.9-1 is vulnerable to multiple issues including insufficient validation and access restriction bypass.
January 27, 2019
LinuxSecurity.com: The package matrix-synapse before version 0.34.1.1-1 is vulnerable to private key recovery.
January 27, 2019
LinuxSecurity.com: The package go before version 2:1.11.5-1 is vulnerable to private key recovery.
January 27, 2019
LinuxSecurity.com: The package go before version 2:1.11.5-1 is vulnerable to private key recovery.
January 27, 2019
LinuxSecurity.com: New version 2.6.6. Security fix for CVE-2019-5716, CVE-2019-5717, CVE-2019-5718, CVE-2019-5719
January 26, 2019
security update
January 26, 2019
LinuxSecurity.com: krb5, a MIT Kerberos implementation, had several flaws in LDAP DN checking, which could be used to circumvent a DN containership check by supplying special parameters to some calls.
January 25, 2019
LabKey Vulnerabilities Threaten Medical Research Data
January 25, 2019
Threatpost News Wrap Podcast For Jan. 25
January 25, 2019
SD-WAN admin? Your number came up in Cisco’s latest bug list
January 25, 2019
Razy Malware Attacks Browser Extensions to Steal Cryptocurrency
January 25, 2019
Reading Time: ~2 min. Anatova Ransomware Reaches Global Market A new ransomware family, dubbed Anatova by researchers, has been infecting machines across the globe. During encryption, Anatova appears to focus on small files to speed up overall encryption times, but doesn’t append the encrypted files with a new extension. Unexpectedly, this variant demands DASH crypto […]
January 25, 2019
Fighting Emotet: lessons from the front line
January 25, 2019
#DeleteFacebook? #DeleteTwitter? #FatLotOfGood that will do you
January 25, 2019
Cops catch $15m crypto-crook
January 25, 2019
Facebook debuts scam ads reporting tool
January 25, 2019
LinuxSecurity.com: The PostgreSQL project has release a new minor release of the 9.4 branch. For Debian 8 “Jessie”, this has been uploaded as version
January 25, 2019
LinuxSecurity.com: New Version
January 25, 2019
Fighting Fire with Fire: API Automation Risks
January 24, 2019
LinuxSecurity.com: Ghostscript could be made to crash, access files, or run programs if it opened a specially crafted file.
January 24, 2019
LinuxSecurity.com: Several security issues were fixed in MySQL.
January 24, 2019
LinuxSecurity.com: A vulnerability in the HTML_QuickForm package has been found which potentially allows remote code execution. References: – https://bugs.mageia.org/show_bug.cgi?id=24185
January 24, 2019
LinuxSecurity.com: It was discovered that libcaca incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service (CVE-2018-20544). It was discovered that libcaca incorrectly handled certain images. An
January 24, 2019
LinuxSecurity.com: An issue has been found in PowerDNS Recursor where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua (CVE-2019-3806).
January 24, 2019
Risk Level: Very Low. Type: Trojan.
January 24, 2019
ThreatList: Credential-Sniffing Phishing Attacks Erupted in 2018
January 24, 2019
Passwords at risk for users who fall for Eileen’s cousin’s voicemail
January 24, 2019
Colour us shocked: Google in €50m GDPR fine appeal bombshell
January 24, 2019
Bit-and-Piece DDoS Method Emerges to Torment ISPs
January 24, 2019
DarkHydrus Phishery tool spreading malware using Google Drive
January 24, 2019
Malicious apps deploy Anubis banking trojan using motion detection
January 24, 2019
World’s favourite open-source PDF interpreter needs patching (again)
January 24, 2019
Bomb threat spam may stem from GoDaddy DNS weakness
January 24, 2019
Can you spot the phish? Take Google’s test
Everybody loves quizzes. So why not take this one and hone your phish-spotting prowess? The post Can you spot the phish? Take Google’s test appeared first on WeLiveSecurity
January 24, 2019
Supreme Court won’t consider case against defamatory reviews on Yelp
January 24, 2019
How to stop a hacker home invasion! [VIDEO]
January 24, 2019
Update now! Apple releases first 2019 iOS and macOS patches
January 24, 2019
Nasty security bug found and fixed in Linux apt
January 24, 2019
New ransomware strain is locking up Bitcoin mining rigs in China
January 24, 2019
Hadoop coop thrown for loop by malware snoop n’ scoop troop? Oh poop
January 24, 2019
LinuxSecurity.com: Security fix for CVE-2018-20551, CVE-2018-20481, CVE-2018-20650 and CVE-2018-18897.
January 24, 2019
LinuxSecurity.com: – xattr: strip credentials from any URL that is stored (CVE-2018-20483)
January 24, 2019
LinuxSecurity.com: Security fix for CVE-2019-5010 in Python. Anaconda is joined because an unrelated fix was done there that allowed to remove a workaround in Python.
January 24, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 24, 2019