September 20, 2018
NSS Labs fires off anti-malware-testing lawsuit at infosec toolmakers
Cisco Issues New Warning for 6-Month-Old Critical Bug in IOS XE
September 20, 2018
No, Sunspot Solar Observatory didn’t see aliens
September 20, 2018
Hackers behind Mirai botnet to avoid jail for working with the FBI
September 20, 2018
Magecart Strikes Again, Siphoning Payment Info from Newegg
September 20, 2018
Mirai’s architects avoid prison thanks to work for FBI
Instead, the three men will cooperate with law enforcement and the broader research community – an area in which, it turns out, they already have quite some experience The post Mirai’s architects avoid prison thanks to work for FBI appeared first on WeLiveSecurity
September 20, 2018
Sealed with an XSS: Lloyds Group should avoid cross talk, say IT pros
September 20, 2018
Man who shared Deadpool movie on Facebook faces 6 months in jail
September 20, 2018
Thousands of Breached Websites Turn Up On MagBo Black Market
September 20, 2018
LinuxSecurity.com: Several security issues were fixed in Little CMS.
September 20, 2018
LinuxSecurity.com: Multiple security vulnerabilities were discovered in GlusterFS, a clustered file system. Buffer overflows and path traversal issues may lead to information disclosure, denial-of-service or the execution of arbitrary code.
September 20, 2018
LinuxSecurity.com: An update that fixes three vulnerabilities is now available.
September 20, 2018
US military given the power to hack back/defend forward
September 20, 2018
LinuxSecurity.com: An update is now available for Red Hat OpenStack Platform 12.0 (Pike). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
September 20, 2018
LinuxSecurity.com: Bind could be made to crash if it received specially crafted network traffic.
September 20, 2018
LinuxSecurity.com: Several security issues were fixed in Little CMS.
September 20, 2018
FBI wants to keep “helpful” Mirai botnet authors around
September 20, 2018
Western Digital goes quiet on unpatched MyCloud flaw
September 20, 2018
What’s that smell? Oh, it’s Newegg cracked open by card slurpers
September 20, 2018
LinuxSecurity.com: A vulnerability has been discovered in php5, a server-side, HTML-embedded scripting language. The Apache2 component allows XSS via the body of a “Transfer-Encoding: chunked” request because of a defect
September 20, 2018
LinuxSecurity.com: An update that contains security fixes can now be installed.
September 20, 2018
LinuxSecurity.com: An update that contains security fixes can now be installed.
September 20, 2018
Smashing Security #096: Bribing Amazon staff, and blinking deepfakes
September 19, 2018
LinuxSecurity.com: CVE-2016-10728 If an ICMPv4 error packet is received as the first packet on a flow in the to_client direction, it can lead to missed TCP/UDP detection
September 19, 2018
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
September 19, 2018
Patch for EE’s 4G Wi-Fi mini modem nails local privilege escalation flaw
September 19, 2018
Mirai Masterminds Helping FBI Snuff Out Cybercrime
September 19, 2018
Critical Out-of-Band Patch Issued for Adobe Acrobat Reader
September 19, 2018
Security Embargos at Red Hat
September 19, 2018
URL spoofing – what it is and what to do about it [VIDEO]
September 19, 2018
A Hybrid Solution to Taming SOC Alert Overload
September 19, 2018
XBash Malware Packs Double Punch: Destroys Data and Mines for Crypto Coins
September 19, 2018
Fake finance apps on Google Play target users from around the world
Cybercrooks use bogus apps to phish six online banks and cryptocurrency exchange The post Fake finance apps on Google Play target users from around the world appeared first on WeLiveSecurity
September 19, 2018
‘Peekaboo’ zero-day lets hackers view and alter surveillance camera footage
September 19, 2018
The makers of the Mirai IoT-hijacking botnet are sentenced
September 19, 2018
iOS 12 is here: these are the security features you need to know about
September 19, 2018
Here we Mongo again! Millions of records exposed by insecure database
September 19, 2018
Years on, third party apps still exposing Grindr users’ locations
September 19, 2018
Employee Personal Info Exposed in State Department Hack
September 19, 2018
FBI Warns Parents of Edtech Security Risk
September 19, 2018
How Facebook wants to protect political campaigners from hacking
September 19, 2018
LinuxSecurity.com: Several security issues were fixed in PHP.
September 19, 2018
LinuxSecurity.com: Several security issues were fixed in Ghostscript.
September 19, 2018
How to secure your PostgreSQL database
September 19, 2018
Who ate all the PII? Not the blockchain, thankfully
September 19, 2018
LinuxSecurity.com: Several security issues were fixed in GLib.
September 19, 2018
LinuxSecurity.com: Several security issues were fixed in GLib.
September 19, 2018
Your business should be more afraid of phishing than malware
September 19, 2018
LinuxSecurity.com: Two vulnerabilities have been discovered in the chromium web browser. Kevin Cheung discovered an error in the WebAssembly implementation and evil1m0 discovered a URL spoofing issue.
September 19, 2018
security update
September 19, 2018
Judge: Georgia’s e-vote machines are awful – but go ahead and use them
September 18, 2018
US State Department confirms: Unclassified staff email boxes hacked
September 18, 2018
‘I am admin’ bug turns WD’s My Cloud boxes into Everyone’s Cloud
September 18, 2018
ThreatList: Malware Samples Targeting IoT More Than Double in 2018
September 18, 2018
Intel releases firmware update for ME flaw
September 18, 2018
LinuxSecurity.com: An update for openstack-neutron is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
September 18, 2018
Risk Level: Very Low.
September 18, 2018
State Government Online Payment Service Exposes 14M Customers
September 18, 2018
Linux & Windows hit with disk wiper, ransomware & cryptomining Xbash malware
September 18, 2018
Dangerous Pegasus Spyware Has Spread to 45 Countries
September 18, 2018
Medical records & patient-doctor recordings of thousands of people exposed
September 18, 2018
Hackers selling research phished from universities on WhatsApp
September 18, 2018
Insiders Continue to be Data Theft’s Best Friend
September 18, 2018
91 “child friendly” Android apps accused of exploitation
September 18, 2018
Linus Torvalds takes a break from Linux
September 18, 2018
Oh Smeg! Hacked white goods maker resurfaces after system shutdown
September 18, 2018
LinuxSecurity.com: An update is now available for Red Hat OpenStack Platform 13.0 (Queens). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
September 18, 2018
The Occasional Orator Part 1
Speaking at conferences can be daunting for presenters but often it is about striking the right balance between content and delivery The post The Occasional Orator Part 1 appeared first on WeLiveSecurity
September 18, 2018
Bristol Airport Hit by Ransomware Blackout
September 18, 2018
C’mon, biz: Give white hats a chance to tell you how screwed you are
September 18, 2018
LinuxSecurity.com: USN-3722-1 introduced a regression in ClamAV.
September 18, 2018
LinuxSecurity.com: Several security issues were fixed in PHP.
September 18, 2018
LinuxSecurity.com: USN-3722-1 introduced a regression in ClamAV.
September 18, 2018
State Department scores an F on 2FA security
September 18, 2018
LinuxSecurity.com: Security fix for CVE-2018-1000801
September 18, 2018
LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes
September 18, 2018
LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes
September 18, 2018
LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes
September 18, 2018
LinuxSecurity.com: Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.39_release_notes
September 18, 2018
Just 13 – no, er, make that 3,200 punters hit in Oz’s Perth Mint hack
September 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 18, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 18, 2018
Zero-Day Bug Allows Hackers to Access CCTV Surveillance Cameras
September 17, 2018