July 20, 2018
Canada tackles malicious online advertising
Federal agency issues Notices of Violation to Datablocks and Sunlight Media for allegedly facilitating the installation of malware through online advertising The post Canada tackles malicious online advertising appeared first on WeLiveSecurity
July 20, 2018
LinuxSecurity.com: The dns-root-data update to 2017072601~deb8u2 broke dnsmasq’s init script, making dnsmasq no longer start when dns-root-data was installed.
July 20, 2018
Hackers hold 80,000 healthcare records to ransom
July 20, 2018
Gov Slow to Address Urgent CNI Security Needs
July 20, 2018
White House Cybersecurity Strategy at a Crossroads
July 20, 2018
Reading Time: ~2 min.Venmo’s Public Data Setting Shows All Researchers recently uncovered just how much data is available through the Venmo API, successfully tracking routines, high-volume transactions from vendors, and even monitoring relationships. Because Venmo’s privacy settings are set to public by default, many users have unknowingly contributed to the immense collection of user data […]
July 20, 2018
LinuxSecurity.com: The linux-base package has been updated to support the package of Linux 4.9 that was recently added to Debian 8. This resolves a dependency that was not satisfiable by the jessie and jessie-security suites.
July 20, 2018
Risk Level: Very Low. Type: Trojan.
July 20, 2018
LinuxSecurity.com: CVE-2015-1239 Fix for denial of service (process crash) via a crafted PDF.
July 19, 2018
ThreatList: Sizing Up The Scourge of Credential-Stuffing
July 19, 2018
security update
July 19, 2018
security update
July 19, 2018
LinuxSecurity.com: Update to 0.26.5 (CVE-2018-10887, CVE-2018-10888)
July 19, 2018
LinuxSecurity.com: This release fixes a directory and symbolic link traversal vulnerability in Archive::Zip::Archive Perl module that allows an attacker to writite into an arbitrary file accesible by a local user.
July 19, 2018
LinuxSecurity.com: – Fix Side Channel Based ECDSA Key Extraction (CVE-2018-12437) (PR #408) – Fix potential stack overflow when DER flexi-decoding (CVE-2018-0739) (PR #373) – Fix two-key 3DES (PR #390) – Fix accelerated CTR mode (PR #359) – Fix Fortuna PRNG (PR #363) – Fix compilation on platforms where cc doesn’t point to gcc (PR #382) […]
July 19, 2018
LinuxSecurity.com: Fix heap memory corruption, CVE-2017-17833
July 19, 2018
LinuxSecurity.com: Linux 4.9 has been packaged for Debian 8 as linux-4.9. This provides a supported upgrade path for systems that currently use kernel packages from the “jessie-backports” suite.
July 19, 2018
LinuxSecurity.com: Linux 4.9 has been packaged for Debian 8 as linux-4.9. This provides a supported upgrade path for systems that currently use kernel packages from the “jessie-backports” suite.
July 19, 2018
How Cyber Insurance Changes the Conversation Around Risk
July 19, 2018
Ubisoft Games Hit by Massive DDoS Attacks
July 19, 2018
LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 13. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 19, 2018
Google slapped with €4.34bn fine by EU over antitrust violations
Tech giant has 90 days to comply with ruling or faces further penalties over ‘anti-competitive’ practices The post Google slapped with €4.34bn fine by EU over antitrust violations appeared first on WeLiveSecurity
July 19, 2018
LinuxSecurity.com: An update for fluentd is now available for Red Hat OpenStack Platform 13.0 Operational Tools for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 19, 2018
LinuxSecurity.com: This is the Six-Month notification for the retirement of Red Hat Enterprise Linux 6.7 Extended Update Support (EUS). This notification applies only to those customers subscribed to the Extended Update Support (EUS) channel for Red Hat Enterprise Linux 6.7.
July 19, 2018
US Orgs Overly Optimistic About Cyber-Readiness
July 19, 2018
LinuxSecurity.com: unzip and untar target tasks in ant allows the extraction of files outside the target directory. A crafted zip or tar file submitted to an Ant build could create or overwrite arbitrary files with the
July 19, 2018
Microsoft offers up to $100,000 to identity bug finders
July 19, 2018
British Airways cancelled flights at Heathrow after ‘IT system issue’
Thousands of British Airways passengers left stranded at Heathrow airport following incident The post British Airways cancelled flights at Heathrow after ‘IT system issue’ appeared first on WeLiveSecurity
July 19, 2018
LinuxSecurity.com: Jeriko One discovered two vulnerabilities in the ZNC IRC bouncer which could result in privilege escalation or denial of service. For the stable distribution (stretch), these problems have been fixed in
July 18, 2018
LinuxSecurity.com: A use-after-free was discovered in the MP4 demuxer of the VLC media player, which could result in the execution of arbitrary code if a malformed media file is played.
July 18, 2018
LinuxSecurity.com: New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
July 18, 2018
LinuxSecurity.com: CVE-2018-11439 Fix for a heap-based buffer over-read via a crafted audio file.
July 18, 2018
security update
July 18, 2018
security update
July 18, 2018
ThreatList: Popular Apps Get Enterprise Blacklisted
July 18, 2018
LinuxSecurity.com: New release (1:12.2.6-1) Security fix for CVE-2018-1128 Security fix for CVE-2018-1129 Security fix for CVE-2018-10861
July 18, 2018
LinuxSecurity.com: The package curl before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: The package libcurl-gnutls before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: The package libcurl-compat before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: The package lib32-libcurl-gnutls before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: The package lib32-libcurl-compat before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: The package lib32-curl before version 7.61.0-1 is vulnerable to arbitrary code execution.
July 18, 2018
LinuxSecurity.com: Several security issues were fixed in PolicyKit.
July 18, 2018
Smaller Nation State Attacks: A Growing Cyber Menace
July 18, 2018
Could semantic icons replace passwords and PINs?
July 18, 2018
SPECTRE Variant 1 scanning tool
July 18, 2018
21-year-old spy tool developer faces prison
July 18, 2018
Time to Yank Cybercrime into the Light
July 18, 2018
LinuxSecurity.com: A vulnerability was discovered in WordPress, a web blogging tool. It allowed remote attackers with specific roles to execute arbitrary code.
July 18, 2018
LinuxSecurity.com: A vulnerability in tqdm could allow remote attackers to execute arbitrary code.
July 18, 2018
security update
July 18, 2018
LinuxSecurity.com: Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.
July 17, 2018
LinuxSecurity.com: Multiple vulnerabilities have been discovered in various parsers of Blender, a 3D modeller/ renderer. Malformed .blend model files and malformed multimedia files (AVI, BMP, HDR, CIN, IRIS, PNG, TIFF) may result in the execution of arbitrary code.
July 17, 2018
LinuxSecurity.com: New mutt packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
July 17, 2018
800K Patient Records At Issue in ProCare Health Snafu
July 17, 2018