January 16, 2019
Firms fined $1M for SingHealth data security breach
January 16, 2019
UK Banks Finally Issue New Cards After Ticketmaster Breach
January 16, 2019
LinuxSecurity.com: This update fixes CVE-2018-20685 (the first “variant”) and backports several fixes to unbreak ECDSA authentication from PKCS#11, certificate authentication and so on.
January 16, 2019
LinuxSecurity.com: **Horde_Form 2.0.19** * [mjr] SECURITY: Prevent RCE vulnerability due to potential directory traversal in Image uploads (An independent security researcher has reported this vulnerability to SecuriTeam Secure Disclosure program).
January 16, 2019
LinuxSecurity.com: **Horde_Form 2.0.19** * [mjr] SECURITY: Prevent RCE vulnerability due to potential directory traversal in Image uploads (An independent security researcher has reported this vulnerability to SecuriTeam Secure Disclosure program).
January 16, 2019
LinuxSecurity.com: Patch for CVE-2016-10091
January 16, 2019
LinuxSecurity.com: Keegan Ryan discovered that NSS incorrectly handled ECDSA key generation. A local attacker could possibly use this issue to perform a cache-timing attack and recover private ECDSA keys (CVE-2018-0495). References:
January 15, 2019
LinuxSecurity.com: A heap use-after-free vulnerability in the server code of the file transfer extension, which can result in remote code execution. This attack appears to be exploitable via network connectivity (CVE-2018-6307).
January 15, 2019
LinuxSecurity.com: It was observed that URL’s which gets downloaded via “–log=” attribute stores sensitive information. This update fixes that. References: – https://bugs.mageia.org/show_bug.cgi?id=24112
January 15, 2019
IDenticard Zero-Days Allow Corporate Building Access, Location Recon
January 15, 2019
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 15, 2019
security update
January 15, 2019
security update
January 15, 2019
LinuxSecurity.com: Several issues in wireshark, a tool that captures and analyzes packets off the wire, have been found by different people. These are basically issues with length checks or invalid memory access in
January 15, 2019
LinuxSecurity.com: libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution (CVE-2018-15127) SL7 x86_64 libvncserver-0.9.9-13.el7_6.i686.rpm libvncserver-0.9.9-13.el7_6.x86_64.rpm libvncserver-debuginfo-0.9.9-13.el7_6.i686.rpm libvncserver-debuginfo-0.9.9-13.el7_6.x86_64.rpm libvncserver-devel-0.9.9-13.el7_6.i686.rpm [More…]
January 15, 2019
ThreatList: $1.7M is the Average Cost of a Cyber-Attack
January 15, 2019
LinuxSecurity.com: Several security issues were fixed in libcaca.
January 15, 2019
Yes, you can remotely hack … building site cranes. Wait, what?
January 15, 2019
Man whose DDoS attacks took down entire country’s Internet jailed
January 15, 2019
8 million users installed 9 adware apps from Play Store
January 15, 2019
What makes a cybercriminal?
Forget balaclavas or hoodies, these cybercriminals are hiding in plain sight The post What makes a cybercriminal? appeared first on WeLiveSecurity
January 15, 2019
Reading Time: ~2 min. For many MSPs, integrating their security solution with their remote monitoring and management (RMM) and professional service automation (PSA) platforms is essential for doing business. Together, these platforms help lower the cost of keeping up with each client, ensuring profitable margins for a healthy, growing business. For true providers of IT […]
January 15, 2019
Windows 7 users get fix for latest updating woe
January 15, 2019
Blockchain burglar returns some of $1m crypto-swag
January 15, 2019
Facebook to start fact-checking fake news in the UK
January 15, 2019
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2019:0049
January 15, 2019
Is fake-news sharing driven by age, not politics?
January 15, 2019
LinuxSecurity.com: An update for libvncserver is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 15, 2019
LinuxSecurity.com: The v4.19.14 stable update contains important fixes across the tree.
January 15, 2019
A city in Texas is using paper after suffering ransomware attack
January 15, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 15, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
January 15, 2019
Risk Level: Very Low. Type: Trojan.
January 15, 2019
Risk Level: Very Low. Type: Trojan.
January 15, 2019
security update
January 14, 2019
Threatpost Poll: Can We Fix 2FA?
January 14, 2019
Hack Allows Escape of Play-with-Docker Containers
January 14, 2019
Risk Level: Very Low. Type: Trojan.
January 14, 2019
Risk Level: Very Low. Type: Trojan.
January 14, 2019
Risk Level: Very Low. Type: Trojan.
January 14, 2019
British TV viewers targeted by email fraudsters
January 14, 2019
Ryuk Hauls in $3.7M in ‘Earnings,’ Adds TrickBot to the Attack Mix
January 14, 2019
Mozilla Kills Default Support for Adobe Flash in Firefox 69
January 14, 2019
RBS reissues punters with new bank cards after Ticketmaster breach
January 14, 2019
Goddamn the Pusher man: Nominet kicks out domain name hijack bid
January 14, 2019
Shutdown hits government websites as certificates begin to expire
January 14, 2019
Poland may consider Huawei ban amid ‘spy’ arrests – reports
January 14, 2019
Data Exposed in OXO, Amazon and MongoDB Leaks
January 14, 2019
Nissan EV app password reset prompts user panic
January 14, 2019
LinuxSecurity.com: An update for systemd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 14, 2019
CES: Smart cities and the challenge of securing the neighborhood
In our final report from CES we take a look at smart city initiatives The post CES: Smart cities and the challenge of securing the neighborhood appeared first on WeLiveSecurity
January 14, 2019
Podcast: Emotet Grows With Fast-Evolving Tactics
January 14, 2019
10 years for Boston Children’s Hospital attacker
January 14, 2019
New Linux Systemd security holes uncovered
January 14, 2019
Governments need to embrace AI for the good of the people
January 14, 2019
USB-C Authentication sounds great, so why are people worried?
January 14, 2019
Facebook exec gets SWATted
January 14, 2019
Brit hacker hired by Liberian telco to nobble rival now behind bars
January 14, 2019
LinuxSecurity.com: New zsh packages are available for Slackware 14.0, 14.1, and 14.2 to fix security issues.
January 14, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 14, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 14, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 14, 2019
LinuxSecurity.com: An update that solves one vulnerability and has 6 fixes is now available.
January 14, 2019
Risk Level: Very Low. Type: Trojan.
January 14, 2019
LinuxSecurity.com: The Qualys Research Labs discovered multiple vulnerabilities in systemd-journald. Two memory corruption flaws, via attacker-controlled alloca()s (CVE-2018-16864, CVE-2018-16865) and an out-of-bounds read flaw leading to an information leak (CVE-2018-16866), could allow an attacker to
January 13, 2019
LinuxSecurity.com: The package python2-django before version 1.11.18-1 is vulnerable to content spoofing.
January 13, 2019
LinuxSecurity.com: The package python-django before version 2.1.5-1 is vulnerable to content spoofing.
January 13, 2019
security update
January 13, 2019
LinuxSecurity.com: Due to kernel issue there is a way to reuse start_time of a process. This allows to duplicate process authorized by polkit. This update mitigates polkit issue #75 (slowfork): https://gitlab.freedesktop.org/polkit/polkit/issues/75
January 13, 2019
It only takes a Skype Call to Unlock an Android Handset
January 12, 2019
Kaspersky tipped off US about the contractor who stole NSA data
January 12, 2019
9 million users installed 85 adware infected apps from Play Store
January 12, 2019
Aussie govt emergency service hacked to send fake warning alerts
January 12, 2019
WhatsApp Gold Scam is Back with Malware Payload
January 12, 2019
Hacker ‘BestBuy’ sentenced to prison for operating Mirai DDoS botnet
January 12, 2019
Facebook staff discussed cashing in on user data, reports say
January 12, 2019
LinuxSecurity.com: An integer underflow was discovered in the CAF demuxer of the VLC media player. For the stable distribution (stretch), this problem has been fixed in
January 12, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes 13 vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that fixes two vulnerabilities is now available.
January 12, 2019
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
January 12, 2019
LinuxSecurity.com: Resolves CVE-2018-16869
January 12, 2019