Menu

Latest articles

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local denial-of-service vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a remote denial-of-service vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a denial-of-service vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a privilege-escalation vulnerability; fixes are available.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

LinuxSecurity.com: Several security issues were fixed in GnuPG.

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

LinuxSecurity.com: Several security issues were fixed in the Linux kernel.

Meet Summit, world’s fastest AI-powered supercomputer
Tens of thousands of Android devices are leaving their debug port exposed
Foscam Issues Patches For Vulnerabilities in IP Cameras

security update

Scammers ahoy! International police operation harpoons 74 email whaling suspects
InvisiMole Burrows into Targets with Rich Espionage Tools
Report: Chinese Hackers Siphon Off ‘Massive’ Amounts of Undersea Military Data
Unprotected Server Exposes Weight Watchers Internal IT Infrastructure
Hackers target payment transfer system at Chile’s biggest bank
Check your router – list of routers affected by VPNFilter just got bigger
When Ducks collide – an #Infosec18 retrospective [VIDEO]
Android users: Beware these popularity-faking tricks on Google Play

Tricksters have been misleading users about the functionality of apps by displaying bogus download numbers The post Android users: Beware these popularity-faking tricks on Google Play appeared first on WeLiveSecurity

LinuxSecurity.com: An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

Bitcoin price takes a dive after another cryptocurrency exchange hack

LinuxSecurity.com: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Bootloader vulnerability in OnePlus 6 lets an attacker take control of the device
FBI Slaps New Charges Against Researcher Who Stopped WannaCry
GDPR will increase reported breaches and trigger a flood of ‘Right to be Forgotten’ requests
Google: We won’t cause “overall harm” with our AI
US Government’s biometric database worries privacy advocates
Welcome to the non-neutral net: Day one
Security execs must prep for post-Brexit cyber challenges – report

LinuxSecurity.com: An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for RHEL-7. Red Hat Product Security has rated this update as having a security impact

Bitcoin falls after Korean exchange loses $40M following hack attack

LinuxSecurity.com: Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service, sandbox bypass, execution of arbitrary code or bypass of JAR signature validation.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that contains security fixes can now be installed.

LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.

LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

8 Google Maps hidden places You are not allowed to see

LinuxSecurity.com: The package flashplugin before version 30.0.0.113-1 is vulnerable to multiple issues including arbitrary code execution and information disclosure.

LinuxSecurity.com: The package p7zip before version 16.02-5 is vulnerable to arbitrary code execution.

LinuxSecurity.com: The package firefox before version 60.0.2-1 is vulnerable to arbitrary code execution.

Chinese hackers stole undersea warfare data from US Navy contractor
How NATO Defends Against the Dark Side of the Web

LinuxSecurity.com: The package chromium before version 67.0.3396.79-1 is vulnerable to access restriction bypass.

LinuxSecurity.com: The package krb5 before version 1.16.1-1 is vulnerable to insufficient validation.

security update

security update

security update

security update

LinuxSecurity.com: This update fixes CVE-2016-10040, a stack overflow in QXmlSimpleReader due to a too lenient entityCharacterLimit in our version of the patch for CVE-2013-4549. (The limit was increased from the upstream 1024 to 65536 to address QTBUG-35459, an issue where the security fix was breaking existing real-world XML files. Unfortunately, that is too much to […]

LinuxSecurity.com: Security fix for CVE-2018-8013. Updated to upstream release 1.10.

Bug Bounty Payouts Up 73% Per Vulnerability: Bugcrowd
Survey Shows Florida at the Bottom for Consumer Cybersecurity
What got breached this week? Ticket portals, DNA sites, and Atlanta’s police cameras
Chinese hackers stole 614 gigabytes of US Navy’s anti-ship missile data

LinuxSecurity.com: Alexander Peslyak discovered that insufficient input sanitising of RFB packets in LibVNCServer could result in the disclosure of memory contents.

LinuxSecurity.com: Marcus Brinkmann discovered that GnuGPG performed insufficient sanitisation of file names displayed in status messages, which could be abused to fake the verification status of a signed email.

LinuxSecurity.com: Marcus Brinkmann discovered that GnuGPG performed insufficient sanitisation of file names displayed in status messages, which could be abused to fake the verification status of a signed email.

LinuxSecurity.com: Marcus Brinkmann discovered that GnuGPG performed insufficient sanitisation of file names displayed in status messages, which could be abused to fake the verification status of a signed email.

Lenovo Finally Patches Ancient BlueBorne Bugs in Tab and Yoga Tablets

LinuxSecurity.com: An update that solves one vulnerability and has three fixes is now available.

LinuxSecurity.com: Ivan Fratric discovered a buffer overflow in the Skia graphics library used by Firefox, which could result in the execution of arbitrary code. For the oldstable distribution (jessie), this problem has been fixed

LinuxSecurity.com: New gnupg2 packages are available for Slackware 13.37, 14.0, 14.1, 14.2, and – -current to fix a security issue.

Creative Spam Thinks Outside the Macro with .IQY Attachments
Facebook bug exposed private posts of 14 million users to public

LinuxSecurity.com: An update for java-1.7.1-ibm is now available for Red Hat Satellite 5.6 and Red Hat Satellite 5.7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Google Tackles AI Principles: Is It Enough?
WannaCry hero sinks deeper into trouble as new malware charges filed
Threatpost News Wrap Podcast for June 8
Facebook Software Bug Made Some Private Posts Public: 14 Million Affected
Facebook bug may have made 14m users’ posts public
Busted by a Facebook ‘friend’ who’s an undercover cop? It’s legal!

Reading Time: ~2 min.The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. 92 Million Genealogy Site Accounts Compromised Earlier this week, genealogy and DNA testing site […]

Deck the halls with HALs: AI steals the show at Infosec Europe
Adobe Patches Critical Flash Player Bug With Active Exploit

LinuxSecurity.com: DWARF5 and split dwarf, including GNU DebugFission, support.

LinuxSecurity.com: Remove essentially unused pre_release tagging in spec file Fixup Makefile patch to include LDFLAGS in all linking commands

Interred in the Internet of Everything

The security implications of devices connecting and sharing data The post Interred in the Internet of Everything appeared first on WeLiveSecurity

What is the New York Cybersecurity Regulation? What you need to do to comply
#Infosec18: Nation State Hacking is Biggest Change in Cyber-Threat Landscape
Atlanta ransomware attack destroyed years of police dashcam video
Russia appears to be ‘live testing’ cyber attacks – Former UK spy boss Robert Hannigan

LinuxSecurity.com: Several vulnerabilities were discovered in jruby, a Java implementation of the Ruby programming language. They would allow an attacker to use specially crafted gem files to mount cross-site scripting attacks, cause denial of service through an infinite loop,

LinuxSecurity.com: An update that solves three vulnerabilities and has one errata is now available.

LinuxSecurity.com: An update that fixes one vulnerability is now available.

LinuxSecurity.com: An update that fixes 16 vulnerabilities is now available.

security update

LinuxSecurity.com: A security issue was fixed in Unbound.

Drupal drisputes dreport of widespread wide-open websites – whoa