August 6, 2018
Top iPhone Supplier Battles WannaCry Infection
Making millions out of prisoners’ email
August 6, 2018
Interviewing ESET’s experts about the Web’s journey so far – part 1
What has the journey of the World Wide Web been like so far, as seen and experienced by ESET’s security folk? ESET Senior Research Fellow David Harley provides his take in the first installment of our series of interviews marking the Web’s 27th birthday. The post Interviewing ESET’s experts about the Web’s journey so far […]
August 6, 2018
Windows 10 updates under fire from unhappy security admins
August 6, 2018
Man arrested for blackmailing women with porn fakes
August 6, 2018
‘Unhackable’ Bitfi hardware rooted within a week
August 6, 2018
LinuxSecurity.com: It was discovered that there were several vulnerabilities in libsmpack, a library used to handle Microsoft compression formats. A remote attacker could craft malicious .CAB, .CHM or .KWAJ files
August 6, 2018
LinuxSecurity.com: It was discovered that the Apache XML Security for C++ library performed insufficient validation of KeyInfo hints, which could result in denial of service via NULL pointer dereferences when processing malformed XML data.
August 6, 2018
LinuxSecurity.com: It was discovered that there was a directory traversal vulnerability in cgit, a web frontend for Git repositories. For Debian 8 “Jessie”, this issue has been fixed in cgit version
August 6, 2018
LinuxSecurity.com: An update for openslp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
August 5, 2018
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support and Red Hat Enterprise Linux 6.6 Telco Extended Update Support. Red Hat Product Security has rated this update as having a security impact
August 5, 2018
LinuxSecurity.com: An update for rhvm-setup-plugins is now available for Red Hat Virtualization Engine 4.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 5, 2018
LinuxSecurity.com: An update for xmlrpc is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
August 5, 2018
LinuxSecurity.com: The fix for CVE-2018-10886 was incomplete in the previous upload. New changes was implemented upstream which check and resolve symlinks before expanding the archives.
August 5, 2018
LinuxSecurity.com: It was discovered that the Apache XML Security for C++ library performed insufficient validation of KeyInfo hints, which could result in denial of service via NULL pointer dereferences when processing malformed XML data.
August 5, 2018
LinuxSecurity.com: Andreas Hug discovered an open redirect in Django, a Python web development framework, which is exploitable if django.middleware.common.CommonMiddleware is used and the APPEND_SLASH setting is enabled.
August 5, 2018
security update
August 5, 2018
security update
August 5, 2018
LinuxSecurity.com: Backport fix for CVE 2017-11548
August 4, 2018
LinuxSecurity.com: Update to 3.2.1 (CVE-2017-12627)
August 4, 2018
LinuxSecurity.com: Update to 3.2.1 (CVE-2017-12627)
August 4, 2018
security update
August 4, 2018
LinuxSecurity.com: The package python2-django before version 1.11.15-1 is vulnerable to open redirect.
August 4, 2018
LinuxSecurity.com: The package cgit before version 1.2.1-1 is vulnerable to directory traversal.
August 4, 2018
GDPR: What’s really changed so far?
August 4, 2018
LinuxSecurity.com: Jann Horn discovered a directory traversal vulnerability in cgit, a fast web frontend for git repositories written in C. A remote attacker can take advantage of this flaw to retrieve arbitrary files via a specially crafted request, when ‘enable-http-clone=1’ (default) is not turned off.
August 4, 2018
security update
August 4, 2018
LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available.
August 3, 2018
LinuxSecurity.com: An update that fixes 10 vulnerabilities is now available.
August 3, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
August 3, 2018
LinuxSecurity.com: An update that solves one vulnerability and has two fixes is now available.
August 3, 2018
LinuxSecurity.com: Sync with git (CVE-2017-14160, CVE-2018-10392, CVE-2018-10393, bz#1516379)
August 3, 2018
LinuxSecurity.com: The 4.17.11 stable update contains a number of important fixes across the tree. Also of note, starting with this release, kernel-headers is built from a different srpm. The contents should be the same, but there were some benefits to breaking it from the kernel build. —- The 4.17.10 stable kernel update contains a number […]
August 3, 2018
LinuxSecurity.com: Update Python 2 dependency declarations to new packaging standards
August 3, 2018
security update
August 3, 2018
LinuxSecurity.com: The 4.17.11 stable update contains a number of important fixes across the tree. Also of note, starting with this release, kernel-headers is built from a different srpm. The contents should be the same, but there were some benefits to breaking it from the kernel build. —- The 4.17.10 stable kernel update contains a number […]
August 3, 2018
LinuxSecurity.com: Update Python 2 dependency declarations to new packaging standards
August 3, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to open redirects, cross-site request forgery, information disclosure, session fixation or denial of service.
August 3, 2018
LinuxSecurity.com: Enrico Zini discovered a vulnerability in Syntastic, an addon module for the Vim editor that runs a file through external checkers and displays any resulting errors. Config files were looked up in the current working directory which could result in arbitrary
August 3, 2018
LinuxSecurity.com: Update to 2.26, fixes CVE-2018-9275
August 3, 2018
LinuxSecurity.com: Update to 2.26, fixes CVE-2018-9275
August 3, 2018
LinuxSecurity.com: Several security issues were fixed in ClamAV.
August 3, 2018
Threatlist: SMB Security Challenges Grow with the Cloud
August 3, 2018
LinuxSecurity.com: It was found that the security update of busybox announced as DLA-1445-1 to prevent the exploitation of CVE-2011-5325, a symlinking attack, was too strict in case of cpio archives. This update restores the old behavior.
August 3, 2018
DHS Launches Cyber-Risk Management Center
August 3, 2018
Reddit Breached After SMS 2FA Fail
August 3, 2018
How safe is your DNA data?
August 3, 2018
Amnesty International spearphished with government spyware
August 3, 2018
Reading Time: ~2 min.Cryptojacking “Game” Found on Steam Store Valve has taken recent action against an indie-developed game available on Steam, the company’s game/app store, and removed their listing after many customers had complained about cryptomining slowing their systems, once launched. Additionally, the developers have been caught selling in-game items on third-party sites, that were […]
August 3, 2018
LinuxSecurity.com: Various vulnerabilities were discovered in graphicsmagick, a collection of image processing tools and associated libraries, resulting in denial of service, information disclosure, and a variety of buffer overflows and overreads.
August 3, 2018
security update
August 3, 2018
LinuxSecurity.com: New lftp packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
August 2, 2018
LinuxSecurity.com: Several vulnerabilities were discovered in libsmpack, a library used to handle Microsoft compression formats. A remote attacker could craft malicious CAB, CHM or KWAJ files and use these flaws to cause a denial of service via application crash, or potentially execute arbitrary code.
August 2, 2018
LinuxSecurity.com: openslp: Heap memory corruption in slpd/slpd_process.c allows denial of service or potentially code execution (CVE-2017-17833) SL6 x86_64 openslp-2.0.0-3.el6.i686.rpm openslp-2.0.0-3.el6.x86_64.rpm openslp-debuginfo-2.0.0-3.el6.i686.rpm openslp-debuginfo-2.0.0-3.el6.x86_64.rpm openslp-devel-2.0.0-3.el6.i686.rpm openslp-devel-2.0.0-3.el6.x86_64.rpm openslp-server- [More…]
August 2, 2018
ThreatList: Spam’s Revival is Tied to Adobe Flash’s Demise
August 2, 2018
LinuxSecurity.com: New version 2.6.2. Security fix for CVE-2018-14339, CVE-2018-14340, CVE-2018-14341, CVE-2018-14342, CVE-2018-14343, CVE-2018-14344, CVE-2018-14367, CVE-2018-14368, CVE-2018-14369, CVE-2018-14370.
August 2, 2018
LinuxSecurity.com: Update to 6.6. —- Version 6.5 – address CVE-2018-10773, CVE-2018-10774, CVE-2018-10775 – fix injection of Fedora LDFLAGS
August 2, 2018
LinuxSecurity.com: Update to 6.6. —- Version 6.5 – address CVE-2018-10773, CVE-2018-10774, CVE-2018-10775 – fix injection of Fedora LDFLAGS
August 2, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has two fixes is now available.
August 2, 2018
Phishing Campaign Steals Money From Industrial Companies
August 2, 2018
Cisco drops a cool $2.3 billion on SaaSy outfit Duo Security
August 2, 2018
Podcast: Breaking Down the COSCO Ransomware Attack
August 2, 2018
Reddit’s serious “security incident” – what you need to know
August 2, 2018
Reading Time: ~6 min.Cybercriminals are constantly experimenting with new ways to take money from their victims. Their tactics evolve quickly to maximize returns and minimize risk. The emergence of cryptocurrency has opened up new opportunities to do just that. To better understand today’s threat landscape, it’s worth exploring the origins of cryptocurrencies and the progress […]
August 2, 2018
Reddit hacked – but don’t give up on 2FA just yet
August 2, 2018
How to defend yourself against SamSam ransomware
August 2, 2018
Facebook bans midterm-meddling accounts and pages
August 2, 2018
LinuxSecurity.com: Several security issues were fixed in ClamAV.
August 2, 2018
Reddit reveals breach as attacker circumvents staff’s 2FA
The company has learned the hard way that there are better ways to deliver two-factor authentication than via text messages The post Reddit reveals breach as attacker circumvents staff’s 2FA appeared first on WeLiveSecurity
August 2, 2018
Microsoft Edge adds WebAuthn as passwords near the end
August 2, 2018
A single ransomware creator made almost $6 million
August 2, 2018
Yale University discloses old school data breach
August 2, 2018
Spam is getting smarter and we’re still falling for it
August 2, 2018