April 27, 2018
Getting an Amazon Echo app to silently eavesdrop on you
World’s biggest DDoS marketplace taken down, six suspected admins nabbed
For as little as $15 per month, anyone with a criminal bent could rent the services of webstresser.org to take down a targeted site. The post World’s biggest DDoS marketplace taken down, six suspected admins nabbed appeared first on WeLiveSecurity
April 27, 2018
Infamous revenge porn site Anon-IB seized by police
April 27, 2018
RSA 2018: Behind the lines
ESET’s Senior Security Researcher Stephen Cobb reflects on RSA 2018 and the state of the cybersecurity industry The post RSA 2018: Behind the lines appeared first on WeLiveSecurity
April 27, 2018
Reading Time: ~2 min.The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. Amazon IPs Rerouted for Several Hours Early Tuesday morning attackers compromised an ISP that […]
April 27, 2018
LinuxSecurity.com: New openvpn packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.
April 27, 2018
LinuxSecurity.com: Upstream announcement: Welcome to **phpMyAdmin 4.8.0.1**, which fixes a security flaw found in phpMyAdmin. This version fixes a security flaw found in version 4.8.0 where an attacker can manipulate a user in to following a specially-crafted link, allowing the attacker to execute arbitrary SQL commands on the server. For more information, please see
April 27, 2018
LinuxSecurity.com: Update security update jdk8u171-b10
April 27, 2018
LinuxSecurity.com: Update to latest upstream release and security fix for CVE-2017-12626
April 27, 2018
LinuxSecurity.com: Security fix for CVE-2018-9918
April 27, 2018
LinuxSecurity.com: – don’t list nologin in /etc/shells (#1378893)
April 27, 2018
LinuxSecurity.com: **Version 1.6.4** – 2018-04-13 * Security fixes in some edge case scenarios, recommended update for all users * Fixed regression in version guessing of path repositories * Fixed removing aliased packages from the repository, which might resolve some odd update bugs * Fixed updating of package URLs for GitLab * Fixed run-script –list failing […]
April 27, 2018
LinuxSecurity.com: Upstream announcement: **Version 1.3.6** This is a security update to the stable version 1.3. It primarily fixes a recently discovered IMAP command injection vulnerability caused by insufficient input validation within the archive plugin. Details about the vulnerability are published under CVE-2018-9846. Additionally, we back-ported some minor fixes from the master
April 27, 2018
LinuxSecurity.com: Updated Boost libraries are available that fix compatibility with CUDA 9.x compilers and fix a possible integer overflow in Boost.Regex.
April 27, 2018
LinuxSecurity.com: An update that solves 9 vulnerabilities and has one errata is now available.
April 27, 2018
Popular Chrome VPN extensions are leaking your DNS data
April 26, 2018
LinuxSecurity.com: An update for apr is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat Enterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux 6.6 Advanced Update Support, Red Hat Enterprise Linux 6.6 Telco Extended Update Support, Red Hat Enterprise
April 26, 2018
security update
April 26, 2018
Microsoft Issues More Spectre Updates For Intel CPUs
April 26, 2018
Rubella Crimeware Kit: Cheap, Easy and Gaining Traction
April 26, 2018
PyRoMine Uses NSA Exploit for Monero Mining and Backdoors
April 26, 2018
Reading Time: ~2 min.Take Our Daughters And Sons To Work Day is today, and while your initial reaction may be to make a note to call in sick that day (heck, that was my gut instinct), resist the urge. It’s one day that is a great reminder for the entire year. We all need to […]
April 26, 2018
20 years ago today! What we can learn from the CIH virus…
April 26, 2018
Access denied! World’s largest denial of service site busted
April 26, 2018
Yahoo fined $35m for staying quiet about mega breach
April 26, 2018
WEI Mortgage uncovers email phishing scheme and data breach
April 26, 2018
Is “Malware of Mass Disruption” the WMD of the future? Insights from the stage at RSA 2018
ESET’s Global Security Evangelist Tony Anscombe expands on his theory The post Is “Malware of Mass Disruption” the WMD of the future? Insights from the stage at RSA 2018 appeared first on WeLiveSecurity
April 26, 2018
LinuxSecurity.com: An update for rh-mysql56-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
April 26, 2018
Power spike leads Chinese police to 600-machine mining rig
April 26, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
April 26, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
April 26, 2018
Risk Level: Very Low. Type: Trojan.
April 26, 2018
Smashing Security #075: Quitting Facebook
April 25, 2018
LinuxSecurity.com: CVE-2017-17833 An issue has been found in openslp that is related to heap memory
April 25, 2018
LinuxSecurity.com: An update that solves 18 vulnerabilities and has 29 fixes is now available.
April 25, 2018
Western Digital My Cloud EX2 NAS Device Leaks Files
April 25, 2018
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 5.9 Long Life. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 25, 2018
LinuxSecurity.com: A remote code execution vulnerability has been found in Drupal, a fully-featured content management framework. For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2018-004
April 25, 2018
LinuxSecurity.com: Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2, fixes several bugs, and adds various enhancements are now available for Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact
April 25, 2018
LinuxSecurity.com: An update for eap7-jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 7.1.2 for Red Hat Enterprise Linux 6 and Red Hat JBoss Enterprise Application Platform 7.1.2 for Red Hat Enterprise Linux 7.
April 25, 2018
LinuxSecurity.com: Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact
April 25, 2018
LinuxSecurity.com: Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.1.2 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact
April 25, 2018
LinuxSecurity.com: This release provides Perl 5.24.4 that fixes a heap buffer overflow in the pack() function and two overflows in the regular expression engine.
April 25, 2018
LinuxSecurity.com: This release provides Perl 5.24.4 that fixes a heap buffer overflow in the pack() function and two overflows in the regular expression engine.
April 25, 2018
LinuxSecurity.com: **Version 1.6.4** – 2018-04-13 * Security fixes in some edge case scenarios, recommended update for all users * Fixed regression in version guessing of path repositories * Fixed removing aliased packages from the repository, which might resolve some odd update bugs * Fixed updating of package URLs for GitLab * Fixed run-script –list failing […]
April 25, 2018
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support, Red Hat Enterprise Linux 7.2 Telco Extended Update Support, and Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions.
April 25, 2018
Metamorfo Targets Brazilian Users with Banking Trojans
April 25, 2018
Europol Smacks Down World’s Largest DDoS-for-Hire Market
April 25, 2018
Researchers Hacked Amazon’s Alexa to Spy On Users, Again
April 25, 2018
Podcast: Why Manufacturers Struggle To Secure IoT
April 25, 2018
LinuxSecurity.com: Several security issues were fixed in MySQL.
April 25, 2018
The firms that piggyback on ransomware attacks for profit
April 25, 2018
Mysterious “double kill” IE zero-day allegedly in the wild
April 25, 2018
One month to GDPR. Are you ready?
April 25, 2018
UK Financial Sector Must Improve Collaboration: Report
April 25, 2018
Email security in 2018
April 25, 2018
Bitcoin Ransomware Hits Ukraine’s Ministry of Energy website
April 24, 2018
LinuxSecurity.com: It was discovered that psensor, a server for monitoring hardware sensors remotely, was prone to a directory traversal vulnerability because the create_response function in server/server.c lacks a check for whether a file is under the webserver directory.
April 24, 2018
LinuxSecurity.com: librelp: Stack-based buffer overflow in relpTcpChkPeerName function in src/tcp.c (CVE-2018-1000140) SL6 x86_64 librelp-1.2.7-3.el6_9.1.x86_64.rpm librelp-debuginfo-1.2.7-3.el6_9.1.x86_64.rpm librelp-1.2.7-3.el6_9.1.i686.rpm librelp-debuginfo-1.2.7-3.el6_9.1.i686.rpm librelp-devel-1.2.7-3.el6_9.1.i686.rpm librelp-devel-1.2.7-3.el6_9.1.x86_64.rpm i386 librelp-1.2 [More…]
April 24, 2018
Exploit Targets Nvidia Tegra-Based Nintendo Systems
April 24, 2018
Orangeworm Mounts Espionage Campaign Against Healthcare
April 24, 2018
LinuxSecurity.com: It was discovered that there was an XML external entity expansion (XXE) vulnerability in lucene-solr, a search engine library for Java. It could be exploited to read arbitrary local files from the Solr server
April 24, 2018
LinuxSecurity.com: An update for librelp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
April 24, 2018
LinuxSecurity.com: An update for PackageKit is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
April 24, 2018
LinuxSecurity.com: An update for librelp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
April 24, 2018
Now Amazon wants the keys to your car
April 24, 2018
Medic! Orangeworm malware targets hospitals worldwide
April 24, 2018
LinuxSecurity.com: This update doesn’t fix a vulnerability in linux-tools, but provides support for building Linux kernel modules with the “retpoline” mitigation for CVE-2017-5715 (Spectre variant 2).
April 24, 2018
Sednit update: Analysis of Zebrocy
Zebrocy heavily used by the Sednit group over last two years The post Sednit update: Analysis of Zebrocy appeared first on WeLiveSecurity
April 24, 2018
Can a commercial VPN really keep you anonymous? [VIDEO]
April 24, 2018