March 20, 2018
Facebook fallout: How to protect your data
March 20, 2018
In light of the publicity, panic, and lingering despair around Spectre and Meltdown, I thought this might be a good time to clear up the differences between vulnerabilities, exploits, and malware. Neither Spectre nor Meltdown are exploits or malware. They are vulnerabilities. Vulnerabilities don’t hurt people, exploits and malware do. To understand this distinction, witness […]
March 20, 2018
LinuxSecurity.com: Paramiko could be made to run programs if it received speciallycrafted network traffic.
March 20, 2018
LinuxSecurity.com: Paramiko could be made to run programs if it received speciallycrafted network traffic.
March 20, 2018
LinuxSecurity.com: This update upgrades Firefox to version 52.7.2 ESR. * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) SL6 x86_64 firefox-52.7.2-1.el6_9.x86_64.rpm firefox-debuginfo-52.7.2-1.el6_9.x86_64.rpm firefox-52.7.2-1.el6_9.i686.rpm firefox-debuginfo-52.7.2-1.el6_9.i686.rpm i386 firefox-52.7.2-1.el6_9.i686.rpm firefox-debuginfo-52.7.2-1.el6 [More…]
March 20, 2018
Nine years on, Firefox’s master password is still insecure
March 20, 2018
Apple burns the HSTS super cookie
March 20, 2018
Fake Amazon ad ranks top on Google search results
March 20, 2018
Brit police forces spend peanuts on cybercrime training
March 20, 2018
UK’s National Lottery urges millions of players to change their passwords
The lottery’s operator has found that attackers probably used an automated method known as ‘credential stuffing’ to access up to 150 customer accounts. The post UK’s National Lottery urges millions of players to change their passwords appeared first on WeLiveSecurity
March 20, 2018
You need an ‘I’ve been hacked’ plan for your cloud
March 20, 2018
Apple moves on HSTS abuse in Safari
March 20, 2018
LinuxSecurity.com: The package lib32-libcurl-gnutls before version 7.59.0-1 is vulnerable to multiple issues including denial of service and information disclosure.
March 20, 2018
LinuxSecurity.com: The package libcurl-gnutls before version 7.59.0-1 is vulnerable to multiple issues including denial of service and information disclosure.
March 20, 2018
LinuxSecurity.com: The package lib32-libcurl-compat before version 7.59.0-1 is vulnerable to multiple issues including denial of service and information disclosure.
March 20, 2018
LinuxSecurity.com: The package libcurl-compat before version 7.59.0-1 is vulnerable to multiple issues including denial of service and information disclosure.
March 20, 2018
LinuxSecurity.com: The package lib32-curl before version 7.59.0-1 is vulnerable to multiple issues including denial of service and information disclosure.
March 20, 2018
LinuxSecurity.com: The package curl before version 7.59.0-1 is vulnerable to multiple issues including denial of service and information disclosure.
March 20, 2018
LinuxSecurity.com: The package clamav before version 0.99.4-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.
March 20, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 20, 2018
security update
March 19, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 19, 2018
LinuxSecurity.com: An update that solves 7 vulnerabilities and has one errata is now available.
March 19, 2018
How to Keep Your Customers Safe Online – 2018
March 19, 2018
A Mirai Botnet Postscript: Lessons Learned
March 19, 2018
LinuxSecurity.com: The package firefox before version 59.0.1-1 is vulnerable to arbitrary code execution.
March 19, 2018
Modified BlackBerrys sold to drug dealers, five indicted
March 19, 2018
LinuxSecurity.com: The package libvorbis before version 1.3.6-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.
March 19, 2018
Russia accused of burrowing into US energy networks
March 19, 2018
LinuxSecurity.com: An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
March 19, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in KDE Plasma Workspaces, the worst of which allows local attackers to execute arbitrary commands.
March 19, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.
March 19, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Gentoo’s JabberD 2.x ebuild, the worst of which allows local attackers to escalate privileges. [More…]
March 19, 2018
LinuxSecurity.com: Multiple vulnerabilities have been found in Oracle’s JDK and JRE software suites, the worst of which may allow execution of arbitrary code. [More…]
March 19, 2018
LinuxSecurity.com: Multiple vulnerabilities were found in cURL, an URL transfer library: CVE-2018-1000120
March 18, 2018
LinuxSecurity.com: The package ntp before version 4.2.8.p11-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing and denial of service.
March 18, 2018
security update
March 18, 2018
security update
March 18, 2018
security update
March 18, 2018
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
March 18, 2018
security update
March 17, 2018
security update
March 17, 2018
The Pirate Bay is down – Here are its best alternatives
March 17, 2018
LinuxSecurity.com: Richard Zhu and Huzaifa Sidhpurwala discovered that an out-of-bounds memory write when playing Vorbis media files could result in the execution of arbitrary code.
March 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 17, 2018
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 17, 2018
LinuxSecurity.com: Huzaifa Sidhpurwala discovered that an out-of-bounds memory write in the codebook parsing code of the Libtremor multimedia library could result in the execution of arbitrary code if a malformed Vorbis file is opened.
March 16, 2018
security update
March 16, 2018
LinuxSecurity.com: Richard Zhu discovered that an out-of-bounds memory write in the codeboook parsing code of the Libvorbis multimedia library could result in the execution of arbitrary code.
March 16, 2018
The ‘Perfect Storm’ of Disinformation and Hacking
March 16, 2018
The Chrome extension that knows its you by the way you type
March 16, 2018
LinuxSecurity.com: Some vulnerabilities have been found in ClamAV, an open source antivirus engine:
March 16, 2018
LinuxSecurity.com: An update that fixes 27 vulnerabilities is now available.
March 16, 2018
yescrypt – modern KDF and password hashing scheme
March 16, 2018
Why a hard drive RAID array can save your bacon
March 16, 2018
Linus Torvalds slams CTS Labs over AMD vulnerability report
March 16, 2018
Facebook: we won’t share data with WhatsApp (yet)
March 16, 2018
Tricks that cybercriminals use to hide in your phone
Malware in the official Google store never stops appearing. For cybercriminals, sneaking their malicious applications into the marketplace of genuine apps is a huge victory. The post Tricks that cybercriminals use to hide in your phone appeared first on WeLiveSecurity
March 16, 2018
The Cyber News Rundown brings you the latest happenings in cybersecurity news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst and a guy with a passion for all things security. Any questions? Just ask. Global Gas Station Software Found Unsecured Researchers have recently discovered a vulnerability that would allow anyone to […]
March 16, 2018