September 21, 2018
Hackers steal $60 million from Japan’s Zaif cryptocurrency exchange
Critical Vulnerability Found in Cisco Video Surveillance Manager
September 21, 2018
Twitter: Don’t panic, but we may have leaked your DMs to rando devs
September 21, 2018
security update
September 21, 2018
Twitter Flaw Exposed Direct Messages To External Developers
September 21, 2018
Delphi Packer Looks for Human Behavior Before Deploying Payload
September 21, 2018
Unpatched Microsoft Zero-Day in JET Allows Remote Code-Execution
September 21, 2018
Enigma message crack honours pioneering Polish codebreakers
September 21, 2018
Hackers target Newegg with “sophisticated malware”; steal credit card data
September 21, 2018
California man may get 6 months in prison for uploading Deadpool on Facebook
September 21, 2018
Scottish brewery recovers from ransomware attack
September 21, 2018
Bitcoin flaw could have allowed dreaded 51% takeover
September 21, 2018
Top 3 benefits of company open source programs
September 21, 2018
Attackers crack Newegg’s defenses, slurp customers’ credit card data
The skimmer, injected into the store’s payment page, harvested credit-card details from the store’s online customers for more than a month The post Attackers crack Newegg’s defenses, slurp customers’ credit card data appeared first on WeLiveSecurity
September 21, 2018
Security Vulnerability in ESS ExpressVote Touchscreen Voting Computer
September 21, 2018
Equifax faces ?500,000 fine in the UK over massive data breach
September 21, 2018
Warning issued as Netflix subscribers hit by phishing attack
September 21, 2018
Never mind Brexit. UK must fling more £billions at nuke subs, say MPs
September 21, 2018
LinuxSecurity.com: 3.6.9
September 21, 2018
Reading Time: ~2 min.Newegg Breach Lasts Nearly a Month Newegg finally addressed a recent breach after unknowingly hosting malicious code within a payment page for the last month. While the company is still unclear about how many customers were affected, the injected code does appear to have targeted both desktop and mobile visitors to the […]
September 21, 2018
LinuxSecurity.com: This is a security update for `CVE-2018-16802`. It also fixes a printing problem discovered in one of the previous CVE fixes. NOTE: *Please, be advised that there’s a separate issue related to printing problems, which is connected to CUPS itself, meaning this update might not completely resolve your printing issues.* —- This is a […]
September 21, 2018
LinuxSecurity.com: 3.6.9
September 21, 2018
LinuxSecurity.com: Security fix for CVE-2018-1000801
September 21, 2018
LinuxSecurity.com: Fixes CVE-2018-16515
September 21, 2018
LinuxSecurity.com: 8u181 update
September 21, 2018
LinuxSecurity.com: – New upstream Firefox version (62.0) – More info at https://www.mozilla.org/en- US/firefox/62.0/releasenotes/
September 21, 2018
LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes
September 21, 2018
LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes
September 21, 2018
LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes
September 21, 2018
LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes
September 21, 2018
LinuxSecurity.com: Update to devscripts-2.18.4, see http://metadata.ftp- master.debian.org/changelogs//main/d/devscripts/devscripts_2.18.4_changelog for details.
September 21, 2018
Risk Level: Very Low.
September 21, 2018
Risk Level: Very Low. Type: Trojan.
September 21, 2018
Microsoft’s Jet crash: Zero-day flaw drops after deadline passes
September 20, 2018
Developer goes rogue, shoots four colleagues at ERP code maker
September 20, 2018
Lucy Gang Debuts with Unusual Android MaaS Package
September 20, 2018
NSS Labs fires off anti-malware-testing lawsuit at infosec toolmakers
September 20, 2018
Cisco Issues New Warning for 6-Month-Old Critical Bug in IOS XE
September 20, 2018
No, Sunspot Solar Observatory didn’t see aliens
September 20, 2018
Hackers behind Mirai botnet to avoid jail for working with the FBI
September 20, 2018
Magecart Strikes Again, Siphoning Payment Info from Newegg
September 20, 2018
Mirai’s architects avoid prison thanks to work for FBI
Instead, the three men will cooperate with law enforcement and the broader research community – an area in which, it turns out, they already have quite some experience The post Mirai’s architects avoid prison thanks to work for FBI appeared first on WeLiveSecurity
September 20, 2018
Sealed with an XSS: Lloyds Group should avoid cross talk, say IT pros
September 20, 2018
Man who shared Deadpool movie on Facebook faces 6 months in jail
September 20, 2018
Thousands of Breached Websites Turn Up On MagBo Black Market
September 20, 2018
LinuxSecurity.com: Several security issues were fixed in Little CMS.
September 20, 2018
LinuxSecurity.com: Multiple security vulnerabilities were discovered in GlusterFS, a clustered file system. Buffer overflows and path traversal issues may lead to information disclosure, denial-of-service or the execution of arbitrary code.
September 20, 2018
LinuxSecurity.com: An update that fixes three vulnerabilities is now available.
September 20, 2018
US military given the power to hack back/defend forward
September 20, 2018
LinuxSecurity.com: An update is now available for Red Hat OpenStack Platform 12.0 (Pike). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
September 20, 2018
LinuxSecurity.com: Bind could be made to crash if it received specially crafted network traffic.
September 20, 2018
LinuxSecurity.com: Several security issues were fixed in Little CMS.
September 20, 2018
FBI wants to keep “helpful” Mirai botnet authors around
September 20, 2018
Western Digital goes quiet on unpatched MyCloud flaw
September 20, 2018
What’s that smell? Oh, it’s Newegg cracked open by card slurpers
September 20, 2018
LinuxSecurity.com: A vulnerability has been discovered in php5, a server-side, HTML-embedded scripting language. The Apache2 component allows XSS via the body of a “Transfer-Encoding: chunked” request because of a defect
September 20, 2018
LinuxSecurity.com: An update that contains security fixes can now be installed.
September 20, 2018
LinuxSecurity.com: An update that contains security fixes can now be installed.
September 20, 2018
Smashing Security #096: Bribing Amazon staff, and blinking deepfakes
September 19, 2018
LinuxSecurity.com: CVE-2016-10728 If an ICMPv4 error packet is received as the first packet on a flow in the to_client direction, it can lead to missed TCP/UDP detection
September 19, 2018
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
September 19, 2018
Patch for EE’s 4G Wi-Fi mini modem nails local privilege escalation flaw
September 19, 2018
Mirai Masterminds Helping FBI Snuff Out Cybercrime
September 19, 2018
Critical Out-of-Band Patch Issued for Adobe Acrobat Reader
September 19, 2018
Security Embargos at Red Hat
September 19, 2018
URL spoofing – what it is and what to do about it [VIDEO]
September 19, 2018
A Hybrid Solution to Taming SOC Alert Overload
September 19, 2018
XBash Malware Packs Double Punch: Destroys Data and Mines for Crypto Coins
September 19, 2018
Fake finance apps on Google Play target users from around the world
Cybercrooks use bogus apps to phish six online banks and cryptocurrency exchange The post Fake finance apps on Google Play target users from around the world appeared first on WeLiveSecurity
September 19, 2018
‘Peekaboo’ zero-day lets hackers view and alter surveillance camera footage
September 19, 2018
The makers of the Mirai IoT-hijacking botnet are sentenced
September 19, 2018
iOS 12 is here: these are the security features you need to know about
September 19, 2018
Here we Mongo again! Millions of records exposed by insecure database
September 19, 2018
Years on, third party apps still exposing Grindr users’ locations
September 19, 2018
Employee Personal Info Exposed in State Department Hack
September 19, 2018
FBI Warns Parents of Edtech Security Risk
September 19, 2018
How Facebook wants to protect political campaigners from hacking
September 19, 2018
LinuxSecurity.com: Several security issues were fixed in PHP.
September 19, 2018
LinuxSecurity.com: Several security issues were fixed in Ghostscript.
September 19, 2018
How to secure your PostgreSQL database
September 19, 2018
Who ate all the PII? Not the blockchain, thankfully
September 19, 2018
LinuxSecurity.com: Several security issues were fixed in GLib.
September 19, 2018
LinuxSecurity.com: Several security issues were fixed in GLib.
September 19, 2018
Your business should be more afraid of phishing than malware
September 19, 2018
LinuxSecurity.com: Two vulnerabilities have been discovered in the chromium web browser. Kevin Cheung discovered an error in the WebAssembly implementation and evil1m0 discovered a URL spoofing issue.
September 19, 2018
security update
September 19, 2018