Type: Vulnerability. Microsoft Lync for Mac is prone to a security-bypass vulnerability.
September 11, 2018
Type: Vulnerability. Microsoft Word PDF is prone to a remote code-execution vulnerability; fixes are available.
September 11, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
September 11, 2018
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
September 11, 2018
Type: Vulnerability. Microsoft Office SharePoint is prone to a cross-site scripting vulnerability; fixes are available.
September 11, 2018
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability; fixes are available.
September 11, 2018
Type: Vulnerability. Microsoft Excel is prone to a remote code-execution vulnerability; fixes are available.
September 11, 2018
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
September 11, 2018
Type: Vulnerability. Microsoft OData is prone to a remote denial-of-service vulnerability; fixes are available.
September 11, 2018
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
September 11, 2018
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
September 11, 2018
Type: Vulnerability. Microsoft Windows kernel is prone to a remote code-execution vulnerability; fixes are available.
September 11, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
September 11, 2018
Type: Vulnerability. Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability; fixes are available.
September 11, 2018
Type: Vulnerability. Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability; fixes are available.
September 11, 2018
Type: Vulnerability. Microsoft ChakraCore Scripting Engine is prone to a remote memory-corruption vulnerability; fixes are available.
September 11, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 11, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 11, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 11, 2018
Register-Orbi-damned: Netgear account order irks infosec bods
September 10, 2018
Tor(ched): Zerodium drops exploit for version 7 of anonymous browser
September 10, 2018
LinuxSecurity.com: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 10, 2018
LinuxSecurity.com: Several vulnerabilities were discovered in libextractor, a library to extract arbitrary meta-data from files, which may lead to denial of service or the execution of arbitrary code if a specially crafted file is opened.
September 10, 2018
Law firm launches £500 million group action over British Airways hack
September 10, 2018
Arms race: SiFive, Hex Five build code safe houses for RISC-V chips
September 10, 2018
ProtonVPN, NordVPN Flaws Open Door to Privilege Escalation
September 10, 2018
Tor Brings Onion Browser to Android Devices
September 10, 2018
Apple Finally Boots Sneaky Adware Doctor App from Mac App Store
September 10, 2018
Apple yanks top grossing app from Mac App Store for grabbing private user data
The several thousand glowing reviews that Adware Doctor had garnered prior to its removal were “likely fake”, researchers say The post Apple yanks top grossing app from Mac App Store for grabbing private user data appeared first on WeLiveSecurity
September 10, 2018
Apps that steal users’ browser histories kicked out of the Mac App store
September 10, 2018
Apple’s new tool will make it easier for law enforcement to request data
September 10, 2018
Supermicro servers fixed after insecure firmware updating discovered
September 10, 2018
North Korean programmer charged for Sony, WannaCry attacks and more
September 10, 2018
Sextortion scum armed with leaked credentials are persistent pests
September 10, 2018
100 days of GDPR
What impact has the new data protection directive had on businesses so far? The post 100 days of GDPR appeared first on WeLiveSecurity
September 10, 2018
Google Chrome will now generate unique passwords for you
September 10, 2018
LinuxSecurity.com: Several vulnerabilities have been found in OpenSSH, a free implementation of the SSH protocol suite:
September 10, 2018
‘Only paper ballots by 2020!’ call experts after election tampering
September 10, 2018
LinuxSecurity.com: An update that fixes four vulnerabilities is now available.
September 9, 2018
Teen arrested for DDoS attack on ProtonMail & making fake bomb threats
September 9, 2018
WannaCry ransomware fame North Korean hacker tracked down by the US
September 9, 2018
LinuxSecurity.com: Several heap-based buffer over-reads were found in discount, an implementation of the Markdown markup language in C, that allowed remote attackers to cause a denial-of-service via specially crafted files.
September 8, 2018
security update
September 8, 2018
security update
September 8, 2018
security update
September 8, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
September 8, 2018
Schneider Electric Shipped USB Drives Loaded with Malware
September 8, 2018
LinuxSecurity.com: It was discovered that there was a an integer overflow vulnerability in curl, a command line tool for transferring data over HTTP, etc. For more information, please see:
September 8, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
September 8, 2018
LinuxSecurity.com: An update that solves two vulnerabilities and has three fixes is now available.
September 8, 2018
LinuxSecurity.com: An update that fixes 24 vulnerabilities is now available.
September 8, 2018
LinuxSecurity.com: An update that fixes 24 vulnerabilities is now available.
September 8, 2018
LinuxSecurity.com: An update that fixes 13 vulnerabilities is now available.
September 8, 2018
The worst cyberattacks undertaken by nation-state hackers
September 8, 2018
UK Teen Hacker Arrested After DDoS-ing Own Email Provider
September 8, 2018
The Linux Foundation: Accelerating Open Source Innovation
September 8, 2018
Gits exposed, kinky app devs spanked, Feds spy on spyware buyers, etc
September 8, 2018
LinuxSecurity.com:
September 8, 2018
LinuxSecurity.com: Tavis Ormandy discovered multiple vulnerabilites in Ghostscript, an interpreter for the PostScript language, which could result in denial of service, the creation of files or the execution of arbitrary code if a malformed Postscript file is processed (despite the dSAFER sandbox being
September 7, 2018
LinuxSecurity.com: Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and use-after-frees may lead to the execution of arbitrary code or denial of service.
September 7, 2018
‘Domestic Kitten’ Mobile Spyware Campaign Aims at Iranian Targets
September 7, 2018
Open .Git Directories Leave 390K Websites Vulnerable
September 7, 2018
LinuxSecurity.com: transfig could be made to execute arbitrary code if it received a specially crafted FIG file.
September 7, 2018
LinuxSecurity.com: Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, informations leaks or privilege escalation.
September 7, 2018
Reading Time: ~2 min.Banking Trojans Still Appearing in Google Play Store Multiple security researchers recently discovered a handful of banking trojans that have still managed to make their way into the Google Play app store, despite Google having increased its security to detect such apps. Many of the apps are disguised as astrology/horoscope software, but […]
September 7, 2018
British Airways Website, Mobile App Breach Compromises 380k
September 7, 2018
Feel the shame: Email-scammed staffers aren’t telling bosses about it
September 7, 2018
Threatpost News Wrap Podcast For Sept. 7
September 7, 2018
Teen hacker admits to SWATting schools, airline flight
September 7, 2018
Former NASA contractor arrested on charges of sextorting seven women
September 7, 2018
Threat Actors Eyeing IQY Files To Peddle Malspam
September 7, 2018
LinuxSecurity.com: Updated libxkbcommon packages fix security vulnerabilities: Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation
September 7, 2018
LinuxSecurity.com: Updated wireshark packages fix security vulnerabilities: Bluetooth Attribute Protocol dissector crash (CVE-2018-16056). Radiotap dissector crash (CVE-2018-16057).
September 7, 2018
LinuxSecurity.com: Updated sleuthkit packages fix security vulnerabilities: In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660_proc_dir() in tsk/fs/iso9660_dent.c in libtskfs.a, as demonstrated by fls (CVE-2017-13755).
September 7, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
September 7, 2018
Top MacOS App Exfiltrates Browser Histories Behind Users’ Backs
September 7, 2018
Firefox finally casts Windows XP users adrift
September 7, 2018
Dark web sites could be exposed by routine slip-up
September 7, 2018
How a data request turned into a data breach
September 7, 2018
ThreatList: Attacks on Industrial Control Systems on the Rise
September 7, 2018
M-M-M-MONSTER KILL: Cisco’s bug-wranglers swat 29 in single week
September 7, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
September 7, 2018
Bug bounty alert: Musk lets pro hackers torpedo Tesla firmware risk free
September 6, 2018
U.S. Ties Lazarus to North Korea and Major Hacking Conspiracy
September 6, 2018
LinuxSecurity.com: Firefox could be made to crash or run programs as your login if it opened a malicious website.
September 6, 2018