October 30, 2018
LinuxSecurity.com: An update for qemu-kvm is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 30, 2018
LinuxSecurity.com: An update for libvirt is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 30, 2018
China hijacking internet traffic using BGP, claim researchers
October 30, 2018
LinuxSecurity.com: An update for python-paramiko is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
October 30, 2018
LinuxSecurity.com: An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 30, 2018
LinuxSecurity.com: An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 30, 2018
LinuxSecurity.com: An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 30, 2018
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 30, 2018
LinuxSecurity.com: An update for libvirt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 30, 2018
LinuxSecurity.com: An update for jasper is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 30, 2018
LinuxSecurity.com: An update for xerces-c is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 30, 2018
LinuxSecurity.com: An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 30, 2018
LinuxSecurity.com: An update for fuse is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 30, 2018
Videos and MS Office documents – ingredients for a malware attack
October 29, 2018
IoT Flaw Allows Hijacking of Connected Construction Cranes
October 29, 2018
security update
October 29, 2018
Pain in the brain! Kaspersky warns of hackable brain implants
October 29, 2018
IBM acquiring Red Hat for a whopping $34 billion
October 29, 2018
Girl Scouts Issues Data Breach Warning to 2,800 Members
October 29, 2018
LinuxSecurity.com: CVE-2018-17100 An int32 overflow can cause a denial of service (application crash) or possibly have unspecified other impact via a crafted
October 29, 2018
Nation-State Phishing: A Country-Sized Catch
October 29, 2018
X.Org Flaw Allows Privilege Escalation in Linux Systems
October 29, 2018
Search for Chrome on Bing, and you might get a nasty surprise
October 29, 2018
Self-driving cars learn (from us) about who to sacrifice in a crash
October 29, 2018
“Right to repair” gets a boost from new DMCA software rules
October 29, 2018
Call of Duty players caught up in cryptocurrency theft racket
October 29, 2018
Researchers exploit Microsoft Word through embedded video
October 29, 2018
Ransomware and the enterprise: A new white paper
Ransomware remains a serious threat and this new white paper explains what enterprises need to know, and do, to reduce risk The post Ransomware and the enterprise: A new white paper appeared first on WeLiveSecurity
October 29, 2018
LinuxSecurity.com: Several security issues were fixed in MySQL.
October 29, 2018
Nothing exceeds like excess; or, a lack of privacy in the digital age
What has the internet brought us? And how does privacy stay anchored in the data deluge of the digital age? Here’s a brief reflection to celebrate today’s Internet Day The post Nothing exceeds like excess; or, a lack of privacy in the digital age appeared first on WeLiveSecurity
October 29, 2018
LinuxSecurity.com: CVE-2018-16395 Fix for OpenSSL::X509::Name equality check.
October 28, 2018
LinuxSecurity.com: It was discovered that incorrect connection setup in the server for Teeworlds, an online multi-player platform 2D shooter, could result in denial of service via forged connection packets (rendering all game server slots occupied).
October 28, 2018
LinuxSecurity.com: The update of Graphicsmagick in DSA-4321-1 introduced a change in the handling of case-sensitivity in an internal API function which could affect some code built against the GraphicsMagick libraries. This update restores the previous behaviour.
October 28, 2018
LinuxSecurity.com: CVE-2018-1000805 Fix to prevent malicious clients to trick the Paramiko server into thinking an unauthenticated client is authenticated.
October 28, 2018
Now use Internet anonymously through Tor-enabled SIM card Onion3G
October 27, 2018
Site security & user friendliness: Top E-commerce qualities for 2018
October 27, 2018
LinuxSecurity.com: An update that solves one vulnerability and has 5 fixes is now available.
October 27, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 27, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 27, 2018
LinuxSecurity.com: A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges (CVE-2018-14665).
October 27, 2018
LinuxSecurity.com: This kernel update is based on the upstream 4.14.78 and fixes atleast the following security issues: An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy
October 27, 2018
LinuxSecurity.com: Updated firefox packages fix security vulnerabilities: Mozilla: Memory safety bugs fixed in Firefox ESR 60.3 (CVE-2018-12389). Mozilla: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
October 27, 2018
LinuxSecurity.com: This kernel-tmb update is based on the upstream 4.14.78 and adds additional fixes for the L1TF security issues. It also fixes atleast the following security issues: Linux kernel from versions 3.9 and up, is vulnerable to a denial of
October 27, 2018
LinuxSecurity.com: This kernel-linus update is based on the upstream 4.14.78 and adds additional fixes for the L1TF security issues. It also fixes atleast the following security issues: Linux kernel from versions 3.9 and up, is vulnerable to a denial of
October 27, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 27, 2018
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
October 27, 2018
LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.
October 27, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
October 27, 2018
ThreatList: 1 Out of 5 Would Ditch a Business After a Data Breach
October 26, 2018
security update
October 26, 2018
security update
October 26, 2018
security update
October 26, 2018
PoC Attack Leverages Microsoft Office and YouTube to Deliver Malware
October 26, 2018
Reading Time: ~2 min.Data Breach Affects Centers for Medicare & Medicaid Services The Centers for Medicare & Medicaid Services (CMS) announced last week they had discovered malicious activity within their direct enrollment pathway, which connects patients and healthcare brokers. At least 75,000 individuals were affected. The pathway has since been disabled to prevent further exposure. […]
October 26, 2018
British Airways hack is worse than originally thought
October 26, 2018
British Airways Data Breach Takes Off Again with 185K More Victims
October 26, 2018
DemonBot Fans DDoS Flames with Hadoop Enslavement
October 26, 2018
Apple and Samsung punished for slowing down old smartphones
October 26, 2018
Facebook fined £500K for Cambridge Analytica saga
October 26, 2018
Former Facebook security chief calls out Apple for privacy hypocrisy
October 26, 2018
IoT: A roomful of conundrums
How can you stay safe in a world where “smart” is the new default? The post IoT: A roomful of conundrums appeared first on WeLiveSecurity
October 26, 2018
Facebook stopped 8.7m nude images of children in 3 months
October 26, 2018
How the cloud has made you more secure
October 26, 2018
Cathay Pacific breach exposes data of 9.4 million passengers
The data breach at the Hong Kong flag carrier is the third such incident to hit the aviation industry in two months The post Cathay Pacific breach exposes data of 9.4 million passengers appeared first on WeLiveSecurity
October 26, 2018
LinuxSecurity.com: The package firefox before version 63.0-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, privilege escalation, content spoofing, denial of service and information disclosure.
October 26, 2018
LinuxSecurity.com: An update that fixes 10 vulnerabilities is now available.
October 26, 2018
LinuxSecurity.com: An update that fixes 40 vulnerabilities is now available.
October 26, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:3005
October 25, 2018
LinuxSecurity.com: Narendra Shinde discovered that incorrect command-line parameter validation in the Xorg X server may result in arbitary file overwrite, which can result in privilege escalation.
October 25, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:3006
October 25, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service, sandbox bypass, incomplete TLS identity verification, information disclosure or the execution of arbitrary code.
October 25, 2018
LinuxSecurity.com: A regression was found in the recent security update for 389-ds-base (the 389 Directory Server), announced as DLA-1554-2, caused by an incomplete fix for CVE-2018-14648. The regression caused the server to crash when processing requests with empty attributes.
October 25, 2018
security update
October 25, 2018
Reading Time: ~3 min.By now, you likely know that a Virtual Private Network (VPN) is essential to remaining safe when working remotely. But, once set up, how can you optimize your VPN to work well with your devices and meet your security needs? Here are our top five tips for maximizing your VPN experience. Pair […]
October 25, 2018
TimpDoor Android malware turning devices into hidden proxies
October 25, 2018
UK Slaps Facebook with $645K Fine Over Cambridge Analytica Scandal
October 25, 2018
Pentagon Expands Bug-Bounty Program to Include Physical Systems
October 25, 2018
Debunking AI’s Impact on the Cybersecurity Skills Gap
October 25, 2018
Third-Party Apps May Read Your Email: Learn How to Protect
October 25, 2018
LinuxSecurity.com: It was discovered that 389-ds-base (the 389 Directory Server) is vulnerable to search queries with malformed values in the do_search() function (servers/slapd/search.c). Attackers could leverage this vulnerability by sending crafted queries in a loop to cause DoS.
October 25, 2018
Firefox 63 gets tough with trackers
October 25, 2018