Menu

Latest articles

LinuxSecurity.com: The package radare2 before version 2.6.0-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.

Creepy CloudPets pulled from stores over security fears

LinuxSecurity.com: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

WhatsApp users targeted by homoglyph attack peddling free tickets to theme park
Zero-Day Flash Exploit Targeting Middle East
GDPR: A Compliance Quagmire, for Now
Targeted Spy Campaign Hits Russian Service Centers
Stop us if you’ve heard this one: Adobe Flash gets emergency patch for zero-day exploit
Shipping Industry Cybersecurity: A Shipwreck Waiting to Happen
Flash zero-day exploit. Act now!

Risk Level: Very Low.

Operation Prowli Profits On Weak IoT Devices, Servers
CloudPets May Be Out of Business, But Security Concerns Remain
Prowli malware takes over 40,000 devices worldwide for Monero mining
Baby Cam Creeper Actively Watched New Mom
Britain’s new F-35s arrive in UK as US.gov auditor sounds reliability warning klaxon
Atlanta’s ransomware attack: Police dashcam video archives lost forever

The city has spent $5 million to restore files, rebuild impacted systems, and harden its cyber-defenses The post Atlanta’s ransomware attack: Police dashcam video archives lost forever appeared first on WeLiveSecurity

World Cup, Vacation Scams Lead in Phishing Trips this Summer
WannaCry reverse-engineer Marcus Hutchins hit with fresh charges
InvisiMole: surprisingly equipped spyware, undercover since 2013

Hunting for secrets from high-profile targets while staying in the shadows The post InvisiMole: surprisingly equipped spyware, undercover since 2013 appeared first on WeLiveSecurity

VPNFilter malware caught infecting Asus, D-Link, Huawei, ZTE & others

LinuxSecurity.com: 8u171 update

We won! Smashing Security named Best Security Podcast

LinuxSecurity.com: Security fix for CVE-2017-13685 CVE-2017-15286

LinuxSecurity.com: 8u171 update

Dark web souks are so last year: Cybercrooks are switching to Telegram
MyHeritage Alerts Users to Data Breach
Open-source security: Zip Slip critical flaw hits thousands of projects. Update now
#Infosec18: Regulation is Top Driver of Cybersecurity, Now & in the Future
Phishing Scams Target FIFA World Cup Attendees
North Korean hacking group Covellite abandons US targets
Security fail? One in three companies think paying hackers is worth the risk
Customer Data Flies Away with Ticketfly Hacker
5 Tips for Protecting SOHO Routers Against the VPNFilter Malware
Cybercrime Is Skyrocketing as the World Goes Digital
Fitness app PumpUp left users’ personal data exposed on server
Queen’s University Belfast Launches Cyber-Testing Labs
Open Redis Servers Infected with Malware
Hackable CloudPets pulled from Target, Walmart, Amazon and more
VPNFilter update: More bad news for routers

New research into VPNFilter finds more devices hit by malware that’s nastier than first thought, making rebooting and remediating of routers more urgent. The post VPNFilter update: More bad news for routers appeared first on WeLiveSecurity

Oh the irony! When cybercriminals are rubbish at cybersecurity
Delete all your emails and acid wash your hard drives, says security expert Sean Hannity
Norman the AI bot reads Reddit, becomes “psychopath”
Smashing Security #081: Hacker no-hopers, Wessex Water has a word, and we win an award
VPNFilter router malware is a lot worse than everyone thought
‘Vigilance’ hacker charged over Minnesota government attacks
PageUp Malware Scare Sheds Light On Third-Party Risks
VPNFilter Malware Impact Larger Than Previously Thought
Zip Slip Flaw Affects Thousands of Open-Source Projects

LinuxSecurity.com: Several security issues were fixed in procps-ng.

HR software firm suffers massive data breach after malware attack

Reading Time: ~3 min.GDPR represents a massive paradigm shift for global businesses. Every organization that handles data belonging to European residents must now follow strict security guidelines and businesses are now subject to hefty fines if data breaches are not disclosed. Organizations around the world have been busy preparing to comply with these new regulations, […]

Tech giants! How do you know Jim in accounting isn’t Putin moves on you
Police Dept loses years worth of dashcam video to ransomware
The Zip Slip vulnerability – what you need to know
Auth0 Glitch Allows Attackers to Launch Phishing Attacks
Federal Agencies Face an Uphill Battle in Cyber-Preparedness
Cloudflare Gets Transparent on DNS Resolver Outage
Facebook Defends Against Device-Integrated APIs Policy, But Concerns Remain
Scammers hacked webcams to secretly record videos & post on YouTube
Apple says no to Facebook’s tracking

LinuxSecurity.com: Some more efail fixes, https://enigmail.net/index.php/en/download/changelog

LinuxSecurity.com: **Version 4.0.11** (2018-05-25) * bug #27364 [DI] Fix bad exception on uninitialized references to non-shared services (nicolas-grekas) * bug #27359 [HttpFoundation] Fix perf issue during MimeTypeGuesser intialization (nicolas- grekas) * security #cve-2018-11408 [SecurityBundle] Fail if security.http_utils cannot be configured * security #cve-2018-11406 clear CSRF tokens when the user

LinuxSecurity.com: **Version 2.8.41** (2018-05-25) * bug #27359 [HttpFoundation] Fix perf issue during MimeTypeGuesser intialization (nicolas-grekas) * security #cve-2018-11408 [SecurityBundle] Fail if security.http_utils cannot be configured * security #cve-2018-11406 clear CSRF tokens when the user is logged out * security #cve-2018-11385 Adding session authentication strategy to Guard

Syndicate Wallet hacked; $10 million dollars stolen
Blocking facial recognition surveillance using AI
Crappy IoT on the high seas: Holes punched in hull of maritime security
You have NOT won! A look at fake FIFA World Cup-themed lotteries and giveaways

With the 2018 FIFA World Cup in Russia just days away, fraudsters are increasingly using all things soccer as bait to reel in unsuspecting fans so that they get more than they bargained for The post You have NOT won! A look at fake FIFA World Cup-themed lotteries and giveaways appeared first on WeLiveSecurity

Microsoft faces wrath of developers after GitHub acquisition
WeLiveSecurity named Best Corporate Security Blog!

Thanks to everyone who reads us and voted for us! The post WeLiveSecurity named Best Corporate Security Blog! appeared first on WeLiveSecurity

In World Cup Russia, our Wi-Fi networks will log on to you!
SaaSy HR outfit PageUp reports ‘unauthorised activity’ and data breach
Pwn goal: Hackers used the username root, password root for botnet control database login

security update

LinuxSecurity.com: Several security issues were fixed in Git.

DNA Testing Service MyHeritage Leaks User Data of 92 Million Customers
WARDroid Uncovers Mobile Threats to Millions of Users Worldwide
DNA testing website MyHeritage hacked; 92 million user accounts stolen
Here’s a transaction Transamerica regrets: Transgressors swipe retirees’ personal info
Drupalgeddon 2.0 Still Haunting 115K+ Sites
Loose .zips sink chips: How poisoned archives can hack your computer
Google Patches 11 Critical Android Bugs in June Update
Facebook partnered with 60+ device makers & shared users’ private data
Continental: We, er, tire of Whatsapp, Snapchat on work phones. GDPR, innit?
UK’s first transatlantic F-35 delivery flight delayed by weather
Ex-CEO on TalkTalk mega breach: It woz ‘old shed’ legacy tech wot done it
The cyberattack on banks in Mexico: The challenges posed to cybersecurity

Following the massive cyberattack on banks in Mexico, we consider what can cybersecurity can do to help the industry The post The cyberattack on banks in Mexico: The challenges posed to cybersecurity appeared first on WeLiveSecurity

Social Media Privacy Dominates Apple iOS 12, macOS Launches
Misconfigured Google Groups Settings Leaking Sensitive Data

LinuxSecurity.com: **Version 3.4.11** (2018-05-25) * bug #27364 [DI] Fix bad exception on uninitialized references to non-shared services (nicolas-grekas) * bug #27359 [HttpFoundation] Fix perf issue during MimeTypeGuesser intialization (nicolas- grekas) * security #cve-2018-11408 [SecurityBundle] Fail if security.http_utils cannot be configured * security #cve-2018-11406 clear CSRF tokens when the user

Just a third of Brit cops are equipped to fight crime that is ‘cyber’
Bizarre Chrome and Firefox flaw exposed Facebook details
Facebook defends practice of giving deep data access to device makers
Learn what the ‘zero trust’ security model really means | Salted Hash Ep 29
Google says fix for ‘weird’ 1975 text message bug is on the way
End-to-end encryption doesn’t stop the FBI reading your messages. Just ask Paul Manafort
Microsoft to buy GitHub for $7.5 billion

security update

security update

LinuxSecurity.com: Several security issues were fixed in Liblouis.