Menu

Latest articles

LinuxSecurity.com: A vulnerability in Icecast might allow remote attackers to execute arbitrary code.

LinuxSecurity.com: Okular is vulnerable to a directory traversal attack.

LinuxSecurity.com: A vulnerability in Pango could result in a Denial of Service condition.

LinuxSecurity.com: Multiple vulnerabilities have been found in libde265, the worst of which allows remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in PHProjekt due to embedded Zend Framework, the worst of which could allow attackers to remotely execute arbitrary commands. [More…]

LinuxSecurity.com: An update that fixes 7 vulnerabilities is now available.

LinuxSecurity.com: An update that solves 13 vulnerabilities and has one errata is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that contains security fixes can now be installed.

LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.

LinuxSecurity.com: An update that fixes three vulnerabilities is now available.

LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.

security update

Lawsuits Aim Billions in Fines at Equifax and Ad-Targeting Companies
I found a security hole in Steam that gave me every game’s license keys and all I got was this… oh nice: $20,000
Recently-Patched Adobe ColdFusion Flaw Exploited By APT

security update

Google’s secret to a healthy phone? Remote-controlling your apps
Oops: Cisco accidentally leaked in-house Dirty COW exploit code with biz conf call software

LinuxSecurity.com: It was discovered that there was a denial of service (DoS) vulnerability in the nginx web/proxy server. As there was no validation for the size of a 64-bit atom in an MP4 file,

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

ThreatList: Google Play Nine Times Safer Than Third-Party App Stores
Threatpost News Wrap Podcast for Nov. 9
Embracing the Cybersecurity ‘Grey Space’

Reading Time: ~2 min.Data Breach Nabs HSBC Account Info HSBC has been monitoring some unauthorized access occurring over a ten-day period on their customer’s online accounts. During this time, attackers used credentials that were likely part of prior breaches to access numerous accounts. HSBC worked quickly to disable online access to any accounts that showed […]

Tasty news bytes from networking land: Route security, Cisco cert death, ETSI and more
Chinese headmaster fired after setting up his own secret cryptomining rig at school
Emotet launches major new spam campaign

The recent spike in Emotet activity shows that it remains an active threat The post Emotet launches major new spam campaign appeared first on WeLiveSecurity

Learn the tricks of the cyber criminals’ trade at SANS Dublin training event

LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

Sent a photo to the wrong person? Facebook Messenger to let you unsend it
Canada Post leaked personal data, orders of thousands of cannabis smokers
HSBC Bank in U.S. suffers data breach
Privacy International Files GDPR Complaints
Update now! WordPress sites vulnerable to WooCommerce plugin flaw
Bruce Schneier: You want real IoT security? Have Uncle Sam start putting boots to asses
DerpTrolling game server DDoS attacker pleads guilty
Guess who’s back, back again? China’s back, hacking your friends: Beijing targets American biz amid tech tariff tiff

LinuxSecurity.com: Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code.

LinuxSecurity.com: A vulnerability in OpenSSL might allow remote attackers to cause a Denial of Service condition.

LinuxSecurity.com: A buffer overflow in Python might allow remote attackers to cause a Denial of Service condition.

LinuxSecurity.com: Multiple vulnerabilities have been found in X.Org X11 library, the worst of which could allow for remote code execution.

GDPR USA? ‘A year ago, hell no … More people are open to it now’ – House Rep says EU-like law may be mulled
Pentagon Draws Back the Veil on APT Malware with Sudden Embrace of VirusTotal

LinuxSecurity.com: Three vulnerabilities were discovered in Nginx, a high-performance web and reverse proxy server, which could in denial of service in processing HTTP/2 (via excessive memory/CPU usage) or server memory disclosure in the ngx_http_mp4_module module (used for server-side MP4 streaming).

LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:3403

LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:3406

LinuxSecurity.com: Several security issues were fixed in nginx.

LinuxSecurity.com: An update that fixes 5 vulnerabilities is now available.

Cisco Accidentally Released Dirty Cow Exploit Code in Software
When your Instagram account has been hacked, how do you get it back?
‘DerpTroll’ Faces 10 Years in Prison for DDoSing Gaming Sites as a Teen
DJI Patches Forum Bug That Allowed Drone Account Takeovers
Spam-spewing IoT botnet infects 100,000 routers using five-year-old flaw
Podcast: Troy Hunt Talks Bad Passwords – and Who’s to Blame for Them
Police crack encrypted chat service IronChat and read 258,000 messages from suspected criminals
Data from “almost every Pakistani Bank” stolen & sold on the dark web
Ranting researcher publishes VM-busting zero-day without warning
Apple Modernizes Its Hardware Security with T2
Oops: Cisco accidentally released in-house Dirty COW exploit attack code with software installer

Reading Time: ~3 min.Threat researchers and other cybersecurity industry analysts spend much of their time trying to anticipate the next major malware strain or exploit with the potential to cause millions of dollars in damage, disrupt global commerce, or put individuals at physical risk by targeting critical infrastructure. However, a new Webroot survey of principals […]

Closed doors are no match for a Wi‑Fi peeping tom and a smartphone
The cyber insurance question

Prevention is the best option but people continue to search for the easiest way out The post The cyber insurance question appeared first on WeLiveSecurity

Google warning: Fix your dodgy ads within 30 days or get banned
Phone companies slammed for lousy robocall efforts
Smashing Security #103: An Instagram nightmare, crazy iPhone deaths, and election hack claims
This MIT PhD Wants to Replace America’s Broken Voting Machines with Open Source Software, Chromebook
Apache Struts vulnerability would allow system take over
‘DerpTroll’ derps into plea deal, admits DDoS attacks on EA, Steam, Sony game servers
If Shadow Home Sec Diane Abbott can be reeled in by phishers, truly no one is safe
Civil rights group says Oracles, Tapads and Experians get let off for wanton info-sucking
Spammer scum hack 100,000 home routers via UPnP vulns to craft email-flinging botnet
StatCounter fingers cache-poisoning caper for Bitcoin-slurping JavaScript hijack
HSBC suffers data breach after hackers access customers’ personal data

LinuxSecurity.com: An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: The previous update of libdatetime-timezone-perl to tzdata version 2018g was incomplete due to a newly introduced rule type that this version of libdatetime-timezone-perl could not parse.

LinuxSecurity.com: Multiple security issues have been found in the Mozilla Firefox web browser, which could result in the execution of arbitrary code, privilege escalation or information disclosure.

Vulns in online shopping toolkit WooCommerce can blast a hole in your WordPress security

LinuxSecurity.com: An update that solves 5 vulnerabilities and has 86 fixes is now available.

Program Looks to Tap Military Vets for Cyber-Jobs

LinuxSecurity.com: Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.37. Please see the MariaDB 10.0 Release Notes for further details:

LinuxSecurity.com: This update includes the changes in tzdata 2018g for the Perl bindings. For the list of changes, see DLA-1363-1. For Debian 8 “Jessie”, this problem has been fixed in version

LinuxSecurity.com: An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: Several security issues were fixed in SpamAssassin.

LinuxSecurity.com: ppp could be made to crash or bypass authentication if it received specially crafted network traffic.

LinuxSecurity.com: An update for xerces-c is now available for Red Hat Enterprise Linux 7.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: Several security issues were fixed in libxkbcommon.

LinuxSecurity.com: An update for xerces-c is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: Security Advisory 2. Description: Red Hat Ansible Tower 3.3.1 is now available and contains the following bug fixes:

LinuxSecurity.com: An update for 389-ds-base is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Sim Swapping Crypto Stealing Hackers Arrested by Turkish Police
WordPress Flaw Opens Millions of WooCommerce Shops to Takeover
Rapidly Growing Router Botnet Takes Advantage of 5-Year-Old Flaw