Menu

Latest articles

Cybercriminals Target Kodi Media Player for Malware Distribution

security update

security update

security update

security update

LinuxSecurity.com: mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess (CVE-2011-2767) SL6 x86_64 mod_perl-2.0.4-12.el6_10.x86_64.rpm mod_perl-debuginfo-2.0.4-12.el6_10.x86_64.rpm mod_perl-debuginfo-2.0.4-12.el6_10.i686.rpm mod_perl-devel-2.0.4-12.el6_10.i686.rpm mod_perl-devel-2.0.4-12.el6_10.x86_64.rpm i386 mod_perl-2.0.4-12.el6_10. [More…]

LinuxSecurity.com: An update that fixes two vulnerabilities is now available.

LinuxSecurity.com: Several vulnerabilities were discovered in openafs, an implementation of the distributed filesystem AFS. The Common Vulnerabilities and Exposures project identifies the following problems:

Adwind RAT Scurries By AV Software With New DDE Variant
Google’s Forced Sign-in to Chrome Raises Privacy Red Flags
Malware hits Freelancers at Fiverr and Freelancer.com
Baddies just need one email account with clout to unleash phishing hell
Assessing the Human Element in Cyber Risk Analysis
Thousands of stolen frequent flyer miles of top airlines sold on Dark Web
Tricky DoS Attack Crashes Mozilla Firefox

LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.

LinuxSecurity.com: An update that solves one vulnerability and has two fixes is now available.

LinuxSecurity.com: An update that fixes two vulnerabilities is now available.

LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that solves 6 vulnerabilities and has one errata is now available.

The Occasional Orator Part 2

Public speaking and presenting at conferences can be daunting for the majority of people but by including some subtle tricks, the speaker can deliver a stronger message The post The Occasional Orator Part 2 appeared first on WeLiveSecurity

White House Issues National Cyber Strategy
Independence Blue Cross Breach Exposed 17K Records
Data Manipulation: How Security Pros Can Respond to an Emerging Threat
Bankrupt NCIX customer data resold on Craigslist
Facebook faces sanctions if it drags its feet on data transparency
App developers are STILL allowed to read your Gmails
Police accidentally tweet bookmarks that reveal surveilled groups
Some credential-stuffing botnets don’t care about being noticed any more
iTunes is assigning you a ‘trust score’ based on emails and phone calls
Take this short survey to assess your organization’s threat intelligence maturity
Best Free Online Movie Streaming Sites for 2018

LinuxSecurity.com: Joran Herve discovered that the Okular document viewer was susceptible to directory traversal via malformed .okular files (annotated document archives), which could result in the creation of arbitrary files.

Podcast: Two Billion IoT Devices Still Vulnerable to BlueBorne Bug

LinuxSecurity.com: Two security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code and local information disclosure.

LinuxSecurity.com: Joran Herve discovered that the Okular document viewer was susceptible to directory traversal via malformed .okular files (annotated document archives), which could result in the creation of arbitrary files.

Cyber-Attack Inevitable, Businesses Not Prepared
Operator of VirusTotal Like Malware-Scanning Service Jailed for 14 Years

LinuxSecurity.com: New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues.

LinuxSecurity.com: Luis Merino, Markus Vervier and Eric Sesterhenn discovered that missing input sanitising in the Hylafax fax software could potentially result in the execution of arbitrary code via a malformed fax message.

Hacker gets 14 years jail time for operating Scan4You malware scanning service
The curious sudden rise of free US election ‘net security guardians
Woman Pleads Guilty to DC CCTV Ransomware Blitz
SingHealth data breach reveals several ‘inadequate’ security measures
Virus screener goes down, Intel patches more chips, Pegasus government spying code spreads across globe

LinuxSecurity.com: An update that contains security fixes can now be installed.

LinuxSecurity.com: An update that fixes two vulnerabilities is now available.

LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that fixes 24 vulnerabilities is now available.

LinuxSecurity.com: An update that contains security fixes can now be installed.

LinuxSecurity.com: An update that fixes two vulnerabilities is now available.

LinuxSecurity.com: An update that contains security fixes can now be installed.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

security update

Hackers steal $60 million from Japan’s Zaif cryptocurrency exchange
Critical Vulnerability Found in Cisco Video Surveillance Manager
Twitter: Don’t panic, but we may have leaked your DMs to rando devs
Couldn’t give a fsck about patching? Well, that’s your WordPress website pwned, then

security update

Twitter Flaw Exposed Direct Messages To External Developers
Delphi Packer Looks for Human Behavior Before Deploying Payload
Apple’s dropping Back To My Mac Remote Access. Here’s an Alternative, Currently Discounted.
Unpatched Microsoft Zero-Day in JET Allows Remote Code-Execution
Enigma message crack honours pioneering Polish codebreakers
Hackers target Newegg with “sophisticated malware”; steal credit card data
California man may get 6 months in prison for uploading Deadpool on Facebook
Scottish brewery recovers from ransomware attack
Bitcoin flaw could have allowed dreaded 51% takeover
Top 3 benefits of company open source programs
Attackers crack Newegg’s defenses, slurp customers’ credit card data

The skimmer, injected into the store’s payment page, harvested credit-card details from the store’s online customers for more than a month The post Attackers crack Newegg’s defenses, slurp customers’ credit card data appeared first on WeLiveSecurity

Australian encryption Bill raises bar for outrageous legislation: Comms Alliance
Security Vulnerability in ESS ExpressVote Touchscreen Voting Computer
Equifax faces ?500,000 fine in the UK over massive data breach
Warning issued as Netflix subscribers hit by phishing attack
Never mind Brexit. UK must fling more £billions at nuke subs, say MPs

LinuxSecurity.com: 3.6.9

Reading Time: ~2 min.Newegg Breach Lasts Nearly a Month Newegg finally addressed a recent breach after unknowingly hosting malicious code within a payment page for the last month. While the company is still unclear about how many customers were affected, the injected code does appear to have targeted both desktop and mobile visitors to the […]

LinuxSecurity.com: This is a security update for `CVE-2018-16802`. It also fixes a printing problem discovered in one of the previous CVE fixes. NOTE: *Please, be advised that there’s a separate issue related to printing problems, which is connected to CUPS itself, meaning this update might not completely resolve your printing issues.* —- This is a […]

LinuxSecurity.com: 3.6.9

LinuxSecurity.com: Security fix for CVE-2018-1000801

LinuxSecurity.com: Fixes CVE-2018-16515

LinuxSecurity.com: 8u181 update

LinuxSecurity.com: – New upstream Firefox version (62.0) – More info at https://www.mozilla.org/en- US/firefox/62.0/releasenotes/

LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes

LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes

LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes

LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes

LinuxSecurity.com: Update to devscripts-2.18.4, see http://metadata.ftp- master.debian.org/changelogs//main/d/devscripts/devscripts_2.18.4_changelog for details.

Dead retailer’s ‘customer data’ turns up on seized kit, unencrypted and very much for sale
Guilty: The Romanian ransomware mastermind who infected Trump inauguration CCTV cams

Risk Level: Very Low.

Risk Level: Very Low. Type: Trojan.

Microsoft’s Jet crash: Zero-day flaw drops after deadline passes
Developer goes rogue, shoots four colleagues at ERP code maker
Lucy Gang Debuts with Unusual Android MaaS Package