July 27, 2018
Help us bring a smile to a sysadmin’s dial…
Threatpost News Wrap Podcast For July 27
July 27, 2018
Google wants you to beef up your account security with its own hardware token
The company credits hardware-based two-factor authentication with practically eliminating the problem of phishing attacks that have targeted its own employees of late The post Google wants you to beef up your account security with its own hardware token appeared first on WeLiveSecurity
July 27, 2018
Virginian Bank Robbed Twice in Eight Months
July 27, 2018
COSCO Hit by Suspected Ransomware
July 27, 2018
Wyden urges government agencies to ditch Flash
July 27, 2018
LinuxSecurity.com: The security update of mailman announced as DLA-1442-1 introduced a regression due to an incomplete fix for CVE-2018-13796 that broke the admin and listinfo overview pages.
July 27, 2018
LinuxSecurity.com: Security researchers identified two software analysis methods that, if used for malicious purposes, have the potential to improperly gather sensitive data from multiple types of computing devices with different vendors’ processors and operating systems.
July 27, 2018
Reading Time: ~2 min.Paired Bluetooth Devices Vulnerable to Man-in-the-Middle Attacks A new vulnerability has been discovered that would allow an attacker to easily view the traffic sent between two Bluetooth-paired devices. The core of the vulnerability relies on the attacker’s device being within wireless range of both devices in the process of being paired. Signals […]
July 27, 2018
LinuxSecurity.com: Busybox, utility programs for small and embedded systems, was affected by several security vulnerabilities. The Common Vulnerabilities and Exposures project identifies the following issues.
July 27, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in the chromium web browser. CVE-2018-4117
July 27, 2018
Risk Level: Very Low. Type: Trojan.
July 27, 2018
Risk Level: Very Low. Type: Trojan.
July 27, 2018
LinuxSecurity.com: CVE-2018-11319 The improper handling of search for configuration files might be exploited for arbitrary code execution via a malicious gcc plugin.
July 26, 2018
Bugs in Samsung IoT Hub Leave Smart Home Open To Attack
July 26, 2018
LinuxSecurity.com: An update for ceph is now available for Red Hat Ceph Storage 2.5 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 26, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2241
July 26, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2252
July 26, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2242
July 26, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2240
July 26, 2018
Sen. Wyden Urges Government Ban on Adobe Flash
July 26, 2018
Chrome now flags HTTP sites as “not secure”
This is bad news for many websites that have yet to embrace encrypted connections The post Chrome now flags HTTP sites as “not secure” appeared first on WeLiveSecurity
July 26, 2018
LinuxSecurity.com: An update for procps is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support and Red Hat Enterprise Linux 6.6 Telco Extended Update Support. Red Hat Product Security has rated this update as having a security impact
July 26, 2018
Fake banking apps on Google Play leak stolen credit card data
Fraudsters are using bogus apps to convince users of three Indian banks to divulge their personal data The post Fake banking apps on Google Play leak stolen credit card data appeared first on WeLiveSecurity
July 26, 2018
LinuxSecurity.com: An update for procps is now available for Red Hat Enterprise Linux 6.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 26, 2018
HTTP versus HTTPS – what’s all the fuss? [VIDEO]
July 26, 2018
8 types of malware and how to recognize them
July 26, 2018
More browser extensions and apps caught spying on users
July 26, 2018
Man accused of tricking men into involuntary porn
July 26, 2018
Would a bill banning bots do more harm than good?
July 26, 2018
Bigamists have no right to privacy on Facebook
July 26, 2018
LinuxSecurity.com: The package jenkins before version 2.133-1 is vulnerable to multiple issues including access restriction bypass, arbitrary filesystem access, cross-site scripting and information disclosure.
July 26, 2018
I saw what you did…or did I?
It might seem legit but there are several reasons why you should not always hit the panic button when someone claims to have your email password The post I saw what you did…or did I? appeared first on WeLiveSecurity
July 26, 2018
Risk Level: Very Low. Type: Trojan.
July 26, 2018
Risk Level: Very Low. Type: Trojan.
July 26, 2018
Risk Level: Very Low. Type: Trojan.
July 26, 2018
Risk Level: Very Low. Type: Trojan.
July 26, 2018
Risk Level: Very Low. Type: Trojan.
July 26, 2018
Risk Level: Very Low. Type: Trojan.
July 26, 2018
Skills That a ‘Next-Level’ Pentester Should Have
July 25, 2018
security update
July 25, 2018
security update
July 25, 2018
LinuxSecurity.com: This update includes the latest upstream release, **httpd 2.4.34**, with multiple bug fixes and enhancements. See http://www.apache.org/dist/httpd/CHANGES_2.4.34 for more information on the changes in this version. A security vulnerability is addressed in this update: * `mod_md`: DoS via Coredumps on specially crafted requests (CVE-2018-8011)
July 25, 2018
Facebook Security Exec Calls for Tightened Data Privacy
July 25, 2018
LinuxSecurity.com: New version of dcraw is available 9.28.0 Security fix for CVE-2018-5801
July 25, 2018
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2018:2251
July 25, 2018
Risk Level: Very Low. Type: Trojan, Worm.
July 25, 2018
Security Technologies: ExecShield
July 25, 2018
How one hacker could have changed automotive history
July 25, 2018
Hook, line, and sinker: How to avoid looking ‘phish-y’
Top tips to help you avoid being caught receiving or sending phishing-looking emails The post Hook, line, and sinker: How to avoid looking ‘phish-y’ appeared first on WeLiveSecurity
July 25, 2018
Reading Time: ~4 min.According to the Identity Theft Research Center, 2017 saw 1,579 data breaches—a record high, and an almost 45 percent increase from the previous year. Like many IT service providers, you’re probably getting desensitized to statistics like this. But you still have to face facts: organizations will experience a security incident sooner or […]
July 25, 2018
Endpoint Concerns Blight IIoT Security
July 25, 2018
Two-Thirds of Organizations Hit in Supply-Chain Attacks
July 25, 2018
London Calling with New Strategies to Stop Ransomware
July 25, 2018
Safeguard your code: 17 tips to develop more-secure code
July 25, 2018
Risk Level: Very Low. Type: Trojan.
July 25, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
July 25, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
July 25, 2018
LinuxSecurity.com: A vulnerability has been discovered in Sympa, a modern mailing list manager, that allows write access to files on the server filesystem. This flaw allows to create or modify any file writable by the Sympa user, located on the server filesystem, using the function of Sympa
July 24, 2018
LinuxSecurity.com: The libarchive-zip-perl package is vulnerable to a directory traversal attack in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use
July 24, 2018
LinuxSecurity.com: CVE-2018-12584 A flaw in function ConnectionBase::preparseNewBytes of resip/stack/ConnectionBase.cxx has been detected, that
July 24, 2018
LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 24, 2018
LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 24, 2018