Menu

Latest articles

StatCounter fingers cache-poisoning caper for Bitcoin-slurping JavaScript hijack
HSBC suffers data breach after hackers access customers’ personal data

LinuxSecurity.com: An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: The previous update of libdatetime-timezone-perl to tzdata version 2018g was incomplete due to a newly introduced rule type that this version of libdatetime-timezone-perl could not parse.

LinuxSecurity.com: Multiple security issues have been found in the Mozilla Firefox web browser, which could result in the execution of arbitrary code, privilege escalation or information disclosure.

Vulns in online shopping toolkit WooCommerce can blast a hole in your WordPress security

LinuxSecurity.com: An update that solves 5 vulnerabilities and has 86 fixes is now available.

Program Looks to Tap Military Vets for Cyber-Jobs

LinuxSecurity.com: Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.37. Please see the MariaDB 10.0 Release Notes for further details:

LinuxSecurity.com: This update includes the changes in tzdata 2018g for the Perl bindings. For the list of changes, see DLA-1363-1. For Debian 8 “Jessie”, this problem has been fixed in version

LinuxSecurity.com: An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: Several security issues were fixed in SpamAssassin.

LinuxSecurity.com: ppp could be made to crash or bypass authentication if it received specially crafted network traffic.

LinuxSecurity.com: An update for xerces-c is now available for Red Hat Enterprise Linux 7.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: Several security issues were fixed in libxkbcommon.

LinuxSecurity.com: An update for xerces-c is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: Security Advisory 2. Description: Red Hat Ansible Tower 3.3.1 is now available and contains the following bug fixes:

LinuxSecurity.com: An update for 389-ds-base is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Sim Swapping Crypto Stealing Hackers Arrested by Turkish Police
WordPress Flaw Opens Millions of WooCommerce Shops to Takeover
Rapidly Growing Router Botnet Takes Advantage of 5-Year-Old Flaw
New Chrome version aims to remove all ads from abusive sites

The move is part of Google’s continued clampdown on adverts that are intended to hoodwink users The post New Chrome version aims to remove all ads from abusive sites appeared first on WeLiveSecurity

StatCounter web analytics script poisoned to steal Bitcoins
Best Anonymization Tools and Techniques for 2019
Voting machine manual tells officials to reuse weak passwords
Serious XSS flaw discovered in Evernote for Windows, update now!
We don’ need no stinkin’ bounties: VirtualBox guest-to-host escape zero-day lands at GitHub
The Unprecedented Effort to Secure Election Day
The OPM hack explained: Bad security practices meet China’s Captain America
WhatsApp ‘martinelli’ warning is a hoax, don’t forward it
SMBs: We don’t want to spoil all of this article, but have you patched, taken away admin rights, made backups yet?
Dutch cops hope to cuff ‘hundreds’ of suspects after snatching server, snooping on 250,000+ encrypted chat texts

LinuxSecurity.com: An update is now available for Red Hat JBoss SOA Platform 5.3.1. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

Stop us if you’ve heard this one: Remote code hijacking flaw in Apache Struts, patch ASAP

LinuxSecurity.com: The package ghostscript before version 9.25-4 is vulnerable to sandbox escape.

Hackers seed StatCounter with nasty JavaScript in elaborate Bitcoin cyber-heist caper
HSBC Data Breach Hits Online Banking Customers

LinuxSecurity.com: Several vulnerabilities were discovered in cURL, an URL transfer library. CVE-2016-7141

Android November update fixes flaws galore
ThreatList: Despite Fraud Awareness, Password Reuse Persists for Half of U.S. Consumers
HSBC now stands for Hapless Security, Became Compromised: Thousands of customer files snatched by crims

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 5 for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: An update is now available for Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5.5.62, which includes additional changes. Please see the MySQL

LinuxSecurity.com: CVE-2018-18718 – CWE-415: Double Free The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

LinuxSecurity.com: NetworkManager could be made to crash or run programs if it received specially crafted network traffic.

LinuxSecurity.com: systemd-networkd could be made to crash or run programs if it received specially crafted network traffic.

LinuxSecurity.com: An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

LinuxSecurity.com: An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact

LinuxSecurity.com: An update is now available for CloudForms Management Engine 5.9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

Risk Level: Very Low. Type: Trojan.

Samsung, Crucial’s Flawed Storage Drive Encryption Leaves Data Exposed
U.S. Elections True Test for Facebook’s Disinformation Crackdown
From cybercrime to cyber defence: How VPNs went mainstream
Supply-chain attack on cryptocurrency exchange gate.io

Latest ESET research shows just how far attackers will go in order to steal bitcoin from customers of one specific virtual currency exchange The post Supply-chain attack on cryptocurrency exchange gate.io appeared first on WeLiveSecurity

Apache Struts Warns Users of Two-Year-Old Vulnerability
Facebook wants to reveal your name to the weirdo standing next to you
Is the US about to get a nationwide, privately owned, biometrics system?
ICO poised to fine Leave campaign and Arron Banks’ insurance biz £135,000
Children’s apps contain an average of 7 third-party trackers, study finds
CIA’s secret online network unravelled with a Google search
On eve of US elections, Facebook blocked 115 accounts engaged in ‘coordinated inauthentic behavior’
Android fans get fat November security patch bundle – if the networks or mobe makers are kind enough to let ’em have it

LinuxSecurity.com: Several security issues were fixed in Ruby.

Online Radio Stations at Risk from Icecast Flaw
Solid state of fear: Euro boffins bust open SSD, Bitlocker encryption (it’s really, really dumb)

security update

security update

LinuxSecurity.com: Multiple security vulnerabilities were discovered in GlusterFS, a clustered file system. Buffer overflows and path traversal issues may lead to information disclosure, denial-of-service or the execution of arbitrary code.

Newsmaker Interview: Tom Kellermann on Hacking the Midterm Elections
PortSmash Side-Channel Attack Siphons Data From Intel, Other CPUs
Passwords: Here to Stay, Despite Smart Alternatives?
Another wave of Elon Musk bitcoin scams spread by verified Twitter accounts
Malware of the 1980s: Looking back at the Brain Virus and the Morris Worm

This instalment in our series of articles to mark Antimalware Day tells the stories behind two creations that are representative of the 1980s: a virus viewed as the first-ever PC virus and a worm that caused the greatest damage ever wrought by a piece of malware up to that point The post Malware of the […]

Private Facebook data from 81,000 accounts discovered on crime forum
FIFA, hacked again, is leaking like a sieve

Reading Time: ~5 min.You’re probably familiar with some of the most common requirements for creating passwords. A mix of upper and lowercase letters is a simple example. These are known as password constraints. They’re rules for how you must construct a password. If your password must be at least eight characters long, contain lower case, […]

Should company bosses face jail for mishandling your privacy?
PortSmash attack steals secrets from Intel chips on the side
FIFA Hacked Again, Gets Ready for New Stories Based on the Stolen Data
Pentagon preps cyberattack in case Russia interferes with elections
New Intel CPU Flaw Exploits Hyper-Threading to Steal Encrypted Data

LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Heighten your organisation’s risk awareness at the SANS Security Awareness summit
Cyber-crooks think small biz is easy prey. Here’s a simple checklist to avoid becoming an easy victim

LinuxSecurity.com: Multiple vulnerabilities were discovered in MuPDF, a PDF, XPS, and e-book viewer which could result in denial of service or the execution of arbitrary code if malformed documents are opened.

LinuxSecurity.com: Nick Rolfe discovered multiple buffer overflows in the Icecast multimedia streaming server which could result in the execution of arbitrary code. For the stable distribution (stretch), this problem has been fixed in

Researchers find Stuxnet, Mirai, WannaCry lurking in industrial USB drives
Biggest data breach penalties for 2018
Hackers found selling private messages of 81k hacked Facebook accounts

security update

LinuxSecurity.com: Updated cimg and gmic packages fix security vulnerabilities: An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in load_bmp in CImg.h (CVE-2018-7587).

How to boost your VPN connection speed in 5 ways