July 11, 2018
security update
July 11, 2018
LinuxSecurity.com: New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix bugs and security issues.
July 11, 2018
Risk Level: Very Low. Type: Trojan.
July 11, 2018
Risk Level: Very Low. Type: Trojan.
July 11, 2018
Risk Level: Very Low. Type: Trojan.
July 11, 2018
Risk Level: Very Low. Type: Trojan.
July 11, 2018
Risk Level: Very Low. Type: Trojan.
July 11, 2018
Risk Level: Very Low. Type: Trojan.
July 11, 2018
Risk Level: Very Low. Type: Trojan.
July 11, 2018
Risk Level: Very Low. Type: Trojan.
July 11, 2018
Risk Level: Very Low. Type: Trojan.
July 11, 2018
Risk Level: Very Low. Type: Trojan.
July 11, 2018
Risk Level: Very Low. Type: Trojan.
July 11, 2018
Risk Level: Very Low. Type: Trojan.
July 11, 2018
LinuxSecurity.com: An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions (a commonly used performance optimization). It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent […]
July 10, 2018
LinuxSecurity.com: An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions (a commonly used performance optimization). It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent […]
July 10, 2018
security update
July 10, 2018
Risk Level: Very Low.
July 10, 2018
LinuxSecurity.com: libjpeg-turbo could be made to crash or run programs as your login if it opened a specially crafted file.
July 10, 2018
Reading Time: ~3 min.With cybercrime damages set to cost the world $6 trillion annually by 2021, a new bar has been set for cybersecurity teams across industries to defend their assets. This rings especially true for IT service providers, who are entrusted to keep their clients’ systems and IT environments safe from cybercriminals. These clients […]
July 10, 2018
Red Hat’s disclosure process
July 10, 2018
LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
July 10, 2018
Ammyy Admin compromised with malware again; World Cup used as cover
Website altered to serve a malware-tainted version of otherwise legitimate software with the global event in Russia acting as a smokescreen The post Ammyy Admin compromised with malware again; World Cup used as cover appeared first on WeLiveSecurity
July 10, 2018
Woman scams scammer, incriminates self in the process
July 10, 2018
Gas thieves remotely pwn pump with mysterious device
July 10, 2018
LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
July 10, 2018
The Worst Cybersecurity Breaches of 2018 So Far
July 10, 2018
Timehop Breach Hits 21 Million Customers
July 10, 2018
Thai Cave rescue scammers pose as Elon Musk
July 10, 2018
LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
July 10, 2018
LinuxSecurity.com: An update for rh-git29-git is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 10, 2018
Type: Vulnerability. Microsoft .NET Framework is prone to a local privilege-escalation vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft Macro Assembler is prone to a security bypass vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft Visual Studio is prone to a remote code-execution vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft .NET Framework is prone to a remote code-execution vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft ASP.NET Core is prone to a security-bypass vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote code-execution vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft Office is prone to a security bypass vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft Web Customization for ADFS is prone to a cross-site scripting vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft WordPad is prone to a security-bypass vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft Wireless Display Adapter is prone to a command-injection vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft Windows is prone to a remote denial of service vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft .NET Framework is prone to a security-bypass vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft Office is prone to a remote code-execution vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft MSR JavaScript Cryptography Library is prone to a remote security-bypass vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft Windows is prone to a privilege-escalation vulnerability; fixes are available.
July 10, 2018
Type: Vulnerability. Microsoft Windows is prone to a local denial-of-service vulnerability; fixes are available.
July 10, 2018
Risk Level: Very Low. Type: Trojan.
July 10, 2018
LinuxSecurity.com: Orange Tsai discovered a path traversal flaw in ruby-sprockets, a Rack-based asset packaging system. A remote attacker can take advantage of this flaw to read arbitrary files outside an application’s root directory via specially crafted requests, when the Sprockets server is
July 9, 2018
Risk Level: Very Low. Type: Trojan.
July 9, 2018
Your social media memories may have been compromised
July 9, 2018
What sensitive data is lurking on your old SD card?
July 9, 2018
Smart TVs are spying on you through your phone
July 9, 2018
State of the SOC? Depends on Who You Ask
July 9, 2018
Certificates stolen from Taiwanese tech-companies misused in Plead malware campaign
D-Link and Changing Information Technologies code-signing certificates stolen and abused by highly skilled cyberespionage group focused on East Asia, particularly Taiwan The post Certificates stolen from Taiwanese tech-companies misused in Plead malware campaign appeared first on WeLiveSecurity
July 9, 2018
‘Domain Factory’ confirms January 2018 data breach
July 9, 2018
LinuxSecurity.com: Fix CVE-2018-13054 cinnamon: privilege escalation in cinnamon-settings-users.py GUI
July 8, 2018
LinuxSecurity.com: Several security vulnerabilities were found in Bouncy Castle, a Java implementation of cryptographic algorithms. CVE-2016-1000338
July 8, 2018
LinuxSecurity.com: New upstream version
July 7, 2018
LinuxSecurity.com: ## 3.3.17 (2018-05-25) * security #cve-2018-11407 [Ldap] cast to string when checking empty passwords * security #cve-2018-11408 [SecurityBundle] Fail if security.http_utils cannot be configured * security #cve-2018-11406 clear CSRF tokens when the user is logged out * security #cve-2018-11385 migrating session for UsernamePasswordJsonAuthenticationListener * security #cve-2018-11386
July 7, 2018