LinuxSecurity.com: Several vulnerabilities have been discovered in mutt, a sophisticated text-based Mail User Agent, resulting in denial of service, stack-based buffer overflow, arbitrary command execution, and directory traversal
August 2, 2018
UK.gov ploughs cash into creaky police technology
August 2, 2018
LinuxSecurity.com: The security update of busybox announced as DLA-1445-1 introduced a regression due to an incomplete fix for CVE-2015-9261. It was no longer possible to decompress gzip archives which exceeded a certain file size.
August 2, 2018
Do you work in a regulated industry?
August 2, 2018
New Zealand school on naughty step after ransomware failure
August 2, 2018
LinuxSecurity.com: New blueman packages are available for Slackware 14.2 and -current to fix a security issue.
August 2, 2018
DOJ Nabs Three FIN7 Cybercrime Suspects in Europe
August 1, 2018
security update
August 1, 2018
LinuxSecurity.com: Several security issues were fixed in libmspack.
August 1, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
August 1, 2018
LinuxSecurity.com: An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
August 1, 2018
LinuxSecurity.com: Security critical patch update for OpenJDK (July CPU). See http://www.oracle.com/technetwork/security- advisory/cpujul2018-4258247.html#AppendixJAVA
August 1, 2018
LinuxSecurity.com: Security critical patch update for OpenJDK (July CPU). See http://www.oracle.com/technetwork/security- advisory/cpujul2018-4258247.html#AppendixJAVA
August 1, 2018
LinuxSecurity.com: # New upstream release 2.3 Fixes possible tag truncation security bug in AEAD API, see RHBZ#1602752 ## 2.3 – 2018-07-18 * SECURITY ISSUE: finalize_with_tag() allowed tag truncation by default which can allow tag forgery in some cases. The method now enforces the min_tag_length provided to the GCM constructor. * Added support for Python 3.7. […]
August 1, 2018
Risk Level: Very Low.
August 1, 2018
Amnesty International Targeted by Nation-State Spyware
August 1, 2018
Android apps infected with umm… *Windows* malware
August 1, 2018
Alleged SIM-swap scammer nabbed for stealing $5m in Bitcoin
August 1, 2018
Staff dust off their typewriters after malware attack
August 1, 2018
Phone scam exploits Russian hacking fears
August 1, 2018
HP offers rewards for hacking its printers
But don’t get too excited just yet: the first-of-its-kind bug bounty program for printers is invite-only for now The post HP offers rewards for hacking its printers appeared first on WeLiveSecurity
August 1, 2018
New Spectre Variant Hits the Network
August 1, 2018
Clarksons says single user account to blame for data breach
August 1, 2018
Conversation hijacking attacks | Salted Hash Ep 38
August 1, 2018
Oooooh! Fashion! Yes, breach did contain 1 million+ records
August 1, 2018
UK cyber security boffins dispense Ubuntu 18.04 wisdom
August 1, 2018
Porn-warning security scam hooks you up to “Apple Care”
August 1, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may result in incorrect processing of HTTP/FTP, directory traversal, command injection, unintended socket creation or information disclosure.
July 31, 2018
ThreatList: Business Email Compromises Way Up for Q2
July 31, 2018
LinuxSecurity.com: Security fix for CVE-2018-13988.
July 31, 2018
LinuxSecurity.com: Update zziplib to 0.13.69 version, fixes all known CVEs for the package.
July 31, 2018
HP Offers Up to $10,000 Rewards for Printer Bugs
July 31, 2018
LinuxSecurity.com: Denis Andzakovic discovered that network-manager-vpnc, a plugin to provide VPNC support for NetworkManager, is prone to a privilege escalation vulnerability. A newline character can be used to inject a
July 31, 2018
SamSam: The (almost) $6 million ransomware
July 31, 2018
Spectre chip weakness can be used to steal data remotely
July 31, 2018
OneDrive app for Android updated with fingerprint authentication
With this update, Microsoft is bringing a feature for Android users that has been available on iOS devices for quite a while now The post OneDrive app for Android updated with fingerprint authentication appeared first on WeLiveSecurity
July 31, 2018
UK CNP Fraud Drops as Banks Fight Back
July 31, 2018
Idaho Inmates Hack Tablets for Extra Credits
July 31, 2018
Cryptojacking for beginners – what you need to know
July 31, 2018
Inmates hack tablets for free credits prison
The nature of the vulnerability hasn’t been disclosed, but is said to have already been identified and fixed The post Inmates hack tablets for free credits prison appeared first on WeLiveSecurity
July 31, 2018
LinuxSecurity.com: New file packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
July 31, 2018
LinuxSecurity.com: New seamonkey packages are available for Slackware 14.2 and -current to fix security issues.
July 31, 2018
security update
July 30, 2018
LinuxSecurity.com: Several security issues were fixed in MySQL.
July 30, 2018
LinuxSecurity.com: yum-utils: reposync: improper path validation may lead to directory traversal (CVE-2018-10897) SL6 noarch yum-plugin-aliases-1.1.30-42.el6_10.noarch.rpm yum-plugin-changelog-1.1.30-42.el6_10.noarch.rpm yum-plugin-ovl-1.1.30-42.el6_10.noarch.rpm yum-plugin-security-1.1.30-42.el6_10.noarch.rpm yum-plugin-tmprepo-1.1.30-42.el6_10.noarch.rpm yum-plugin-verify-1.1.30-42.e [More…]
July 30, 2018
LinuxSecurity.com: OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952) SL6 x86_64 java-1.7.0-openjdk-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm java-1.7.0-openjdk-debuginfo-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm java-1.7.0-openjdk-devel-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm java-1.7.0-openjdk-demo-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm [More…]
July 30, 2018
Connected Car Apps Open Privacy Hole For Used Car Owners
July 30, 2018
LinuxSecurity.com: yum-utils: reposync: improper path validation may lead to directory traversal (CVE-2018-10897) SL7 noarch yum-plugin-aliases-1.1.31-46.el7_5.noarch.rpm yum-plugin-changelog-1.1.31-46.el7_5.noarch.rpm yum-plugin-ovl-1.1.31-46.el7_5.noarch.rpm yum-plugin-tmprepo-1.1.31-46.el7_5.noarch.rpm yum-plugin-verify-1.1.31-46.el7_5.noarch.rpm yum-plugin-versionlock-1.1.31-46.el7 [More…]
July 30, 2018
LinuxSecurity.com: OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952) SL7 x86_64 java-1.7.0-openjdk-1.7.0.191-2.6.15.4.el7_5.x86_64.rpm java-1.7.0-openjdk-debuginfo-1.7.0.191-2.6.15.4.el7_5.x86_64.rpm java-1.7.0-openjdk-headless-1.7.0.191-2.6.15.4.el7_5.x86_64.rpm java-1.7.0-openjdk-accessibility-1.7.0.191-2.6.15.4.el7_5.x86_64. [More…]
July 30, 2018
LinuxSecurity.com: CVE-2018-14339 CVE-2018-14340 CVE-2018-14341
July 30, 2018
DMARC Compliance Lacking in 28 Percent of .Gov Agencies
July 30, 2018
New York Times profiles one of its own security experts
July 30, 2018
Social media rumors lead to PepsiCo lawsuit
July 30, 2018
Google bans Android miners from Play Store
July 30, 2018
Russian Hacking Campaign Targeted US Utilities
July 30, 2018
‘Fancy Bear’ Targets Democratic Sen. Claire McCaskill
July 30, 2018
LinuxSecurity.com: The host name verification in Tomcat when using TLS with the WebSocket client was missing. It is now enabled by default. For Debian 8 “Jessie”, this problem has been fixed in version
July 30, 2018
LinuxSecurity.com: Two vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following issues.
July 30, 2018
Risk Level: Very Low. Type: Trojan.
July 30, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.
July 29, 2018
LinuxSecurity.com: A heap-based buffer overflow in cURL might allow remote attackers to execute arbitrary code.
July 29, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in ZNC, the worst of which could result in privilege escalation.
July 29, 2018
LinuxSecurity.com: Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine.
July 29, 2018