April 16, 2018
LinuxSecurity.com: Marcin Noga discovered multiple vulnerabilities in readxl, a GNU R package to read Excel files (via the integrated libxls library), which could result in the execution of arbitrary code if a malformed spreadsheet is processed.
April 16, 2018
LinuxSecurity.com: Several security issues were fixed in Ruby.
April 16, 2018
LinuxSecurity.com: Minor update from upstream with fix for CVE-2018-9234 and other bug fixes.
April 16, 2018
UK spy agency warns Brit telcos to flee from ZTE gear
April 16, 2018
LinuxSecurity.com: Several security issues were fixed in Patch.
April 16, 2018
How to protect your Facebook data [UPDATED]
April 16, 2018
Quarterly cybercrime digest: Sentencing
The long arm of the law caught up with a number of cybercriminals in the first three months of this year. The post Quarterly cybercrime digest: Sentencing appeared first on WeLiveSecurity
April 16, 2018
LinuxSecurity.com: It was discovered that there was an input validation vulnerability in the patch(1) utility where an ed(1) script embedded in a regular input file could result in arbitrary code execution. This was reported by Rachel Kroll [0] et al.
April 16, 2018
Nation-State Attacks Take 500% Longer to Find
April 16, 2018
Allscripts: Ransomware, recovery, and frustrated customers
April 16, 2018
Security bods liberate EITest malware slaves
April 16, 2018
LinuxSecurity.com: A NULL Pointer Dereference was discovered in the TIFFPrintDirectory function (tif_print.c) when using the tiffinfo tool to print crafted TIFF information. This vulnerability could be leveraged by remote attackers to cause a crash of the application.
April 16, 2018
LinuxSecurity.com: A NULL Pointer Dereference was discovered in the TIFFPrintDirectory function (tif_print.c) when using the tiffinfo tool to print crafted TIFF information. This vulnerability could be leveraged by remote attackers to cause a crash of the application.
April 16, 2018
Android apps prove a goldmine for dodgy password practices
April 16, 2018
LinuxSecurity.com: A vulnerability in Go allows remote attackers to execute arbitrary commands.
April 15, 2018
LinuxSecurity.com: The package lib32-openssl before version 1:1.1.0.h-1 is vulnerable to private key recovery.
April 15, 2018
LinuxSecurity.com: The package zsh before version 5.5-1 is vulnerable to arbitrary code execution.
April 15, 2018
security update
April 15, 2018
LinuxSecurity.com: An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
April 15, 2018
LinuxSecurity.com: Multiple vulnerabilities were discovered in the implementation of the Perl programming language. The Common Vulnerabilities and Exposures project identifies the following problems:
April 15, 2018
How Netflix Deploys Open Source AI to Reveal Your Favorites
April 15, 2018
LinuxSecurity.com: Minor update from upstream with fix for CVE-2018-9234 and other bug fixes.
April 15, 2018
LinuxSecurity.com: * Rebase to Ruby 2.5.1. * Several CVE fixes. * Conflict requirement needs to generate dependency. * Stop using –with-setjmp-type=setjmp on aarch64.
April 15, 2018
LinuxSecurity.com: harden the binaries (rhbz#1548670)
April 15, 2018
LinuxSecurity.com: Security fix for CVE-2018-1086 and CVE-2018-1079 Rebased to latest upstream sources
April 15, 2018
LinuxSecurity.com: Fix CVE-2017-11550 and CVE-2004-2779
April 15, 2018
LinuxSecurity.com: Fixes several heap-buffer-overflows, see related Bugzilla tickets!
April 15, 2018
LinuxSecurity.com: GwanYeong Kim reported that ‘pack()’ could cause a heap buffer write overflow with a large item count. For Debian 7 “Wheezy”, these problems have been fixed in version
April 15, 2018
security update
April 14, 2018
LinuxSecurity.com: python-paramiko: Authentication bypass in transport.py (CVE-2018-7750) SL6 noarch python-paramiko-1.7.5-4.el6_9.noarch.rpm – Scientific Linux Development Team
April 14, 2018
New malware mine cryptocurrency without open browser session
April 14, 2018
Critical Vulnerability in Drupal CMS Used for Cryptomining
April 14, 2018
Q1 Cyber-Attacks on UK Firms Jump 27%
April 14, 2018
USING OPEN SOURCE DESIGNS TO CREATE MORE SPECIALIZED CHIPS
April 14, 2018
Don’t Trust Android OEM Patching, Claims Researcher
April 13, 2018
LinuxSecurity.com: USN-3621-1 caused a regression in Ruby.
April 13, 2018
LinuxSecurity.com: The package apache before version 2.4.33-1 is vulnerable to multiple issues including session hijacking, access restriction bypass, content spoofing and denial of service.
April 13, 2018
Someone stole $3 million from Coinsecure Bitcoin exchange
April 13, 2018
This ransomware wants you to play, not pay
Unlike its much more malicious counterparts, this ransomware has a rather benign demand. It also provides two curious ways of recovering one’s files. The post This ransomware wants you to play, not pay appeared first on WeLiveSecurity
April 13, 2018
Anti-Malware testing needs standards, and testers need to adopt them
A closer look at Anti-Malware tests and the somewhat unreliable nature of the process. The post Anti-Malware testing needs standards, and testers need to adopt them appeared first on WeLiveSecurity
April 13, 2018
Story of a ransomware victim
April 13, 2018
Facebook shines a little light on ‘shadow profiles’
April 13, 2018
What Facebook and the CLOUD Act mean for cloud privacy
April 13, 2018
Quarterly cybercrime digest: Part 1
In Part 1, our roundup of some of the most notable law enforcement actions against computer crime in the first quarter of 2018 will focus on arrests and charges involving suspected cyber-crooks. The post Quarterly cybercrime digest: Part 1 appeared first on WeLiveSecurity
April 13, 2018
Reading Time: ~2 min.The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. Music-Oriented YouTube Channels Hacked Within the last week, hackers have defaced multiple YouTube music […]
April 13, 2018
LinuxSecurity.com: An update that solves three vulnerabilities and has 7 fixes is now available.
April 13, 2018
LinuxSecurity.com: An update for python-paramiko is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
April 12, 2018
LinuxSecurity.com: An update for python-paramiko is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat Enterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux 6.6 Advanced Update Support, Red Hat Enterprise Linux 6.6 Telco Extended Update Support, and Red Hat Enterprise
April 12, 2018
Type: Vulnerability. Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability; fixes are available.
April 12, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
April 12, 2018
Calls For Regulation Build After Facebook Privacy Fallout
April 12, 2018
Microsoft Outlook bug expose Windows credentials to hackers
April 12, 2018
LinuxSecurity.com: An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 10.0 (Newton), Red Hat OpenStack Platform 11.0 (Ocata), Red Hat OpenStack Platform 12.0 (Pike), Red Hat OpenStack Platform 8.0 (Liberty), and Red Hat OpenStack Platform 9.0 (Mitaka).
April 12, 2018
LinuxSecurity.com: An update for sensu is now available for Red Hat OpenStack Platform 11.0 Operational Tools for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
April 12, 2018
LinuxSecurity.com: This updates LibOFX to fix assorted CVEs.
April 12, 2018
Risk Level: Very Low. Type: Trojan, Virus, Worm.
April 12, 2018
Risk Level: Very Low. Type: Worm.
April 12, 2018
Risk Level: Very Low. Type: Worm.
April 12, 2018
Avoiding the Ransomware Mistakes that Crippled Atlanta
April 12, 2018
LinuxSecurity.com: It was discovered that the poppler upload for the oldstable distribution (jessie), released as DSA-4079-1, did not correctly address CVE-2017-9776 and additionally caused regressions when rendering PDFs embedding JBIG2 streams. Updated packages are now available to correct
April 12, 2018
Using Outlook? You should probably do some patching
April 12, 2018
How many Linux users are there anyway?
April 12, 2018
Top Ten Ways to Detect Phishing
April 12, 2018