LinuxSecurity.com: The package libcurl-compat before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: The package lib32-libcurl-gnutls before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: The package lib32-libcurl-compat before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: The package lib32-curl before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: Several security issues were fixed in PolicyKit.
July 18, 2018
Smaller Nation State Attacks: A Growing Cyber Menace
July 18, 2018
Could semantic icons replace passwords and PINs?
July 18, 2018
SPECTRE Variant 1 scanning tool
July 18, 2018
21-year-old spy tool developer faces prison
July 18, 2018
Time to Yank Cybercrime into the Light
July 18, 2018
LinuxSecurity.com: A vulnerability was discovered in WordPress, a web blogging tool. It allowed remote attackers with specific roles to execute arbitrary code.
July 18, 2018
LinuxSecurity.com: A vulnerability in tqdm could allow remote attackers to execute arbitrary code.
July 18, 2018
security update
July 18, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.
July 17, 2018
LinuxSecurity.com: Multiple vulnerabilities have been discovered in various parsers of Blender, a 3D modeller/ renderer. Malformed .blend model files and malformed multimedia files (AVI, BMP, HDR, CIN, IRIS, PNG, TIFF) may result in the execution of arbitrary code.
July 17, 2018
LinuxSecurity.com: New mutt packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
July 17, 2018
800K Patient Records At Issue in ProCare Health Snafu
July 17, 2018
security update
July 17, 2018
LinuxSecurity.com: gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification (CVE-2018-12020) SL7 x86_64 gnupg2-2.0.22-5.el7_5.x86_64.rpm gnupg2-debuginfo-2.0.22-5.el7_5.x86_64.rpm gnupg2-smime-2.0.22-5.el7_5.x86_64.rpm gnupg2-2.0.22-5.el7_5.src.rpm – Scientific Linux Development Team
July 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
July 17, 2018
DDoS Attacks Get Bigger, Smarter and More Diverse
July 17, 2018
How to Teach Your Employees About Cybersecurity
July 17, 2018
A deep dive down the Vermin RAThole
ESET researchers have analyzed remote access tools cybercriminals have been using in an ongoing espionage campaign to systematically spy on Ukrainian government institutions and exfiltrate data from their systems The post A deep dive down the Vermin RAThole appeared first on WeLiveSecurity
July 17, 2018
Guy jailed for refusing to unlock phones
July 17, 2018
Reading Time: ~3 min.While one-click shopping on Amazon (or Webroot.com, for that matter) seems super easy when you’re the consumer, there are a lot of complex strategies and processes going on behind the scenes. We chat with Cathy Ondrak, product owner for Webroot.com, to get a glimpse behind the curtain. In her role, Cathy works […]
July 17, 2018
Twitter shutters accounts linked to US election hacking
July 17, 2018
LinuxSecurity.com: The package thunderbird before version 52.9.1-1 is vulnerable to multiple issues including arbitrary code execution, cross-site request forgery and information disclosure.
July 17, 2018
‘007’ code helps stop Spectre exploits before they exist
July 17, 2018
21-year-old woman charged with hacking Selena Gomez
July 16, 2018
LinuxSecurity.com: A timing attack was discovered in the function for CSRF token validation of the “Ruby rack protection” framework. For the stable distribution (stretch), this problem has been fixed in
July 16, 2018
No Evidence of GandCrab Leveraging SMB Exploit – Yet
July 16, 2018
security update
July 16, 2018
security update
July 16, 2018
LinuxSecurity.com: The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo
July 16, 2018
LinuxSecurity.com: – Security fix for CVE-2017-9258, CVE-2017-9259, CVE-2017-9260
July 16, 2018
DanaBot Trojan Targets Bank Customers In Phishing Scam
July 16, 2018
Who is the weakest link in software security?
July 16, 2018
Facebook refuses to remove fake news, but will demote it
July 16, 2018
Twitter pops a lot of famous people’s follower bubbles
July 16, 2018
Irishman extradited to the US to face charges relating to Silk Road
Gary Davis accused of working as an administrator for the notorious dark web marketplace appears in a federal court in New York The post Irishman extradited to the US to face charges relating to Silk Road appeared first on WeLiveSecurity
July 16, 2018
Western E-Tailers Set to Lose Nearly $19bn to Fraud
July 16, 2018
LinuxSecurity.com: CVE-2015-1854 A flaw was found while doing authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to
July 15, 2018
LinuxSecurity.com: It was discovered that there were two issues in znc, a modular IRC bouncer: * There was insufficient validation of lines coming from the network
July 15, 2018
Australia’s Airport Security Threatened by Hack
July 15, 2018
FBI: Email Account Compromise Losses Reach $12B
July 15, 2018
Russian intelligence officers indicted in DNC hacking
July 15, 2018
LinuxSecurity.com: Security fix for CVE-2018-8009 —- Version update to 2.7.6. Fixes many open CVEs and bugs.
July 15, 2018
LinuxSecurity.com: Update to 4.9.7 security release. https://wordpress.org/news/2018/07/wordpress-4-9-7-security-and-maintenance- release/
July 15, 2018
LinuxSecurity.com: Update to Sprockets 3.7.2. Fixes CVE-2018-3760: https://access.redhat.com/security/cve/cve-2018-3760
July 15, 2018
security update
July 14, 2018
LinuxSecurity.com: Several vulnerabilities were discovered in CUPS, the Common UNIX Printing System. These issues have been identified with the following CVE ids: CVE-2018-4180
July 14, 2018
LinuxSecurity.com: Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or attacks on encrypted emails.
July 14, 2018
Timehop Reveals More Personal Data Was Breached
July 14, 2018
WordPress Sites Targeted in World Cup-Themed Spam Scam
July 14, 2018
LinuxSecurity.com: Multiple vulnerabilities were found in the interpreter for the Ruby language. The Common Vulnerabilities and Exposures project identifies the following issues:
July 14, 2018
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
July 14, 2018