Menu

Latest articles

Judge: Georgia’s e-vote machines are awful – but go ahead and use them
US State Department confirms: Unclassified staff email boxes hacked
‘I am admin’ bug turns WD’s My Cloud boxes into Everyone’s Cloud
ThreatList: Malware Samples Targeting IoT More Than Double in 2018
Dark Web: US court seizes assets and properties of deceased AlphaBay operator
Intel releases firmware update for ME flaw

LinuxSecurity.com: An update for openstack-neutron is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Risk Level: Very Low.

State Government Online Payment Service Exposes 14M Customers
Linux & Windows hit with disk wiper, ransomware & cryptomining Xbash malware
Biz! Formerly! Known! As! Yahoo! Settles! Data! Breach! Cases! To! The! Tune! Of! $47m!
Dangerous Pegasus Spyware Has Spread to 45 Countries
Medical records & patient-doctor recordings of thousands of people exposed
Apache Struts & SonicWall’s GMS exploits key targets of Mirai & Gafgyt IoT malware
Hackers selling research phished from universities on WhatsApp
Insiders Continue to be Data Theft’s Best Friend
91 “child friendly” Android apps accused of exploitation
Linus Torvalds takes a break from Linux
Oh Smeg! Hacked white goods maker resurfaces after system shutdown

LinuxSecurity.com: An update is now available for Red Hat OpenStack Platform 13.0 (Queens). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

The Occasional Orator Part 1

Speaking at conferences can be daunting for presenters but often it is about striking the right balance between content and delivery The post The Occasional Orator Part 1 appeared first on WeLiveSecurity

This new phishing attack uses an old trick to steal passwords and credit card details
Bristol Airport Hit by Ransomware Blackout
C’mon, biz: Give white hats a chance to tell you how screwed you are

LinuxSecurity.com: USN-3722-1 introduced a regression in ClamAV.

LinuxSecurity.com: Several security issues were fixed in PHP.

LinuxSecurity.com: USN-3722-1 introduced a regression in ClamAV.

State Department scores an F on 2FA security
TV Licensing admits: We directed 25,000 people to send their bank details in the clear

LinuxSecurity.com: Security fix for CVE-2018-1000801

LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes

LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes

LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes

LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes

Just 13 – no, er, make that 3,200 punters hit in Oz’s Perth Mint hack

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Zero-Day Bug Allows Hackers to Access CCTV Surveillance Cameras

security update

security update

security update

LinuxSecurity.com: Security update for `CVE-2018-16543` and `CVE-2018-16510`, which were recently discovered.

LinuxSecurity.com: Security fix for CVE-2017-15422

Facebook Now Offers Bounties For Access Token Exposure
Check out this link! It’s not like it’ll crash your iPhone or anything (Hint: Of course it will)
Old WordPress Plugin Being Exploited in RCE Attacks
CSS-Based Attack Causes iOS, macOS Devices to Crash
Safari & Firefox browser to block user data tracking with new security add-ons
Another wave of sextortion emails
Bristol Airport says it did not pay any ransom to recover from cyber attack
Vote now! Which web browser do you trust the most?

LinuxSecurity.com: USN-3761-1 caused several regressions in Firefox.

8 Industry Best Practices for a Successful Mobile First Strategy (eBook by OneSpan)
Brit airport pulls flight info system offline after attack by ‘online crims’
Bristol airport takes flight screens offline after apparent ransomware attack

The screens in “key locations” are back up and running again, while the airport paid no ransom to return its systems to working order The post Bristol airport takes flight screens offline after apparent ransomware attack appeared first on WeLiveSecurity

LinuxSecurity.com: An update that fixes two vulnerabilities is now available.

LinuxSecurity.com: An update that solves four vulnerabilities and has two fixes is now available.

Deepfake pics and videos set off Facebook’s fake news detector

LinuxSecurity.com: An update that solves two vulnerabilities and has 26 fixes is now available.

On the hook! Phishing trip nets “Barbara” 5 years and whopping fine
Cybersecurity Is Only 1 Part of Election Security
The Linux Kernel Has Grown By 225k Lines of Code So Far This Year From 3.3k Developers
Facebook’s robot coders step into the future of programming
Who’s hacking into UK unis? Spies, research-nickers… or rival gamers living in res hall?
One in three UK orgs hit by cryptojacking in previous month, survey finds

Conversely, only a little over one-third of IT executives believe that their systems have never been hijacked to surreptitiously mine digital currencies The post One in three UK orgs hit by cryptojacking in previous month, survey finds appeared first on WeLiveSecurity

LinuxSecurity.com: curl could be made to run arbitrary code if it received a specially crafted input.

Tick-tock, tick-tock. Oh, that’s just the sound of compromised logins waiting to ruin your day

LinuxSecurity.com: curl could be made to run arbitrary code if it received a speciallycrafted input.

How to crash and restart an iPhone with a CSS-based web attack
Equifax IT staff had to rerun hackers’ database queries to work out what was nicked – audit
Amazon staff said to be taking bribes to leak data

LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.

LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.

LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.

LinuxSecurity.com: An update that contains security fixes can now be installed.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that contains security fixes can now be installed.

LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.

Canadian town forced to pay Bitcoin after nasty ransomware attack
Cloud data management firm exposes database with over 440M emails & IP addresses
Russian Cybercriminal Pleads Guilty to Operating Kelihos Botnet
Apple removes top anti-malware apps from its store for “stealing data”
Pakistani hacker reports address bar spoofing flaws in Edge & Safari browser
Air-conditioned apocalypse: A blackout scenario involving smart climate control devices
Potential Hurricane Florence Phishing Scams
New GandCrab variant attacks Florida School District

LinuxSecurity.com: zutils version prior to version 1.8-pre2 contains a buffer overflow vulnerability in zcat which happened with some input files when the ‘-v, –show-nonprinting’ option was

security update

Official mobile version of Tor Browser released for Android – Download now
ICO Swamped with GDPR Breach Over-Reporting
DDoS attacks: Students blamed for many university cyber attacks
Kronos crims go retro, Apple builds cop portal, Swiss cheesed over Russian hack bid, etc

LinuxSecurity.com: New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.

Docker fave Alpine Linux suffers bug miscreants can exploit to poison containers
Researchers Heat Up Cold-Boot Attack That Works on All Laptops