November 20, 2017
US-CERT Warns of ASLR Implementation Flaw In Windows
It was El Reg wot won it: Bing banishes bogus Brit bank banner ad
November 20, 2017
Amazon Echo and Google Home patched against BlueBorne threat
November 20, 2017
US intelligence can’t break vulnerability hoarding habit
November 20, 2017
CENTCOM Says Massive Data Cache Found on Leaky Server is Benign
November 20, 2017
Germany slaps ban on kids’ smartwatches for being ‘secret spyware’
November 20, 2017
FCC: robocalls can go get BLOCKED
November 20, 2017
Android Flaw Lets Attackers Capture Screen and Record Audio
November 20, 2017
Android malware found in hundreds of music player apps on Play Store
November 20, 2017
Amazon to fix Key home security vulnerability
November 20, 2017
Kids’ smartwatches banned in Germany over spying concerns
German parents are being told to destroy smartwatches they have bought for their children after the country’s telecoms regulator put a blanket ban in place to prevent sale of the devices, amid growing privacy concerns. The post Kids’ smartwatches banned in Germany over spying concerns appeared first on WeLiveSecurity
November 20, 2017
Matrix Banker malware spreads to multiple industries | Salted Hash Ep 7
November 20, 2017
The First Threatpost Alumni Podcast
November 20, 2017
UK’s ICO issues stark reminder of backlash for privacy invasion
The Information Commissioner’s Office (ICO) in the United Kingdom has issued a stark reminder and straight-to-the-point warning for all employees who might be tempted to snoop on others’ personal data. The post UK’s ICO issues stark reminder of backlash for privacy invasion appeared first on WeLiveSecurity
November 20, 2017
LinuxSecurity.com: A security update for .NET Core on RHEL is now available. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
November 20, 2017
Container ship loading plans are ‘easily hackable’
November 20, 2017
Is your business ready for the Holiday Season?
Unfortunately, as with every opportunity, there are people who want to benefit from your success without putting in the hard work. Cybercriminals will view the increase in traffic and spending as opportunities to make extra money. The post Is your business ready for the Holiday Season? appeared first on WeLiveSecurity
November 20, 2017
It’s 2017, and command injection is still the top threat to web apps
November 20, 2017
DNS resolver 9.9.9.9 will check requests against IBM threat database
November 20, 2017
F5 DROWNing, not waving, in crypto fail
November 20, 2017
User experience test tools: a privacy accident waiting to happen
November 20, 2017
Some ‘security people are f*cking morons’ says Linus Torvalds
November 20, 2017
A banking trojan that steals Gmail, Facebook, Twitter and Yahoo Password
November 19, 2017
LinuxSecurity.com: A use-after-free vulnerability was discovered in XML::LibXML, a Perl interface to the libxml2 library, allowing an attacker to execute arbitrary code by controlling the arguments to a replaceChild() call.
November 19, 2017
LinuxSecurity.com: Jakub Wilk reported a heap-based buffer overflow vulnerability in procmail’s formail utility when processing specially-crafted email headers. A remote attacker could use this flaw to cause formail to crash, resulting in a denial of service or data loss.
November 19, 2017
security update
November 19, 2017
security update
November 19, 2017
security update
November 18, 2017
Researchers demonstrate Amazon Key system can be hacked
November 18, 2017
Multiple Vulnerabilities in LibXL Library Open Door to RCE Attacks
November 17, 2017
Germany bans kids smartwatches, asks parents to destroy them
November 17, 2017
security update
November 17, 2017
security update
November 17, 2017
Amazon Promises Fix to Stop Key Service Hack
November 17, 2017
Skype faces fine after refusing to allow eavesdropping
November 17, 2017
Digital certs authority StartCom to shut up shop
November 17, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
November 17, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
November 17, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
November 17, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
November 17, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
November 17, 2017
Twitter gets tough on white supremacists with new policy
November 17, 2017
For goodness sake, stop the plod using facial recog, London mayor told
November 17, 2017
McAfee’s ClickProtect Apparently Infected Devices with Banking Malware
November 17, 2017
Lloyds’ Avios Reward credit cardholders report fraudulent activity
November 17, 2017
Kaspersky Investigators Reveal How NSA Hacking Tools Were Stolen
November 17, 2017
Bug that deleted $300m could have been fixed months ago
November 17, 2017
KeePass – a password manager that’s cloud-less (but complex)
November 17, 2017
One-third of internet pounded by DoS attacks
Simple DoS attacks, which are a one-on-one affair, have been all but supplanted by DDoS attacks. The latter involve concerted campaigns from armies of devices conscripted into botnets which, as if lined up and marching in lockstep, aim to knock the unlucky target offline. The post One-third of internet pounded by DoS attacks appeared first […]
November 17, 2017
The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. Brothers Printers Vulnerable to Major Exploit Researchers have discovered an exploit in several Brothers printer models […]
November 17, 2017
Fake news ‘as a service’ booming among cybercrooks
November 17, 2017
LinuxSecurity.com: New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues.
November 17, 2017
LinuxSecurity.com: New libplist packages are available for Slackware 14.2 and -current to fix security issues.
November 17, 2017
Mr. Robot eps3.5_kill-process.inc – the security review
November 17, 2017
LinuxSecurity.com: An update that fixes three vulnerabilities is now available. An update that fixes three vulnerabilities is now available. An update that fixes three vulnerabilities is now available.
November 17, 2017
Risk Level: Very Low. Type: Trojan.
November 17, 2017
Risk Level: Very Low. Type: Trojan.
November 17, 2017
Kaspersky: Clumsy NSA leak snoop’s PC was packed with malware
November 16, 2017
Oracle Issues Emergency Patches for ‘JoltandBleed’ Vulnerabilities
November 16, 2017
LinuxSecurity.com: Rod Widdowson of Steading System Software LLP discovered a coding error in the OpenSAML library, causing the DynamicMetadataProvider class to fail configuring itself with the filters provided and omitting whatever checks they are intended to perform.
November 16, 2017
LinuxSecurity.com: Rod Widdowson of Steading System Software LLP discovered a coding error in the “Dynamic” metadata plugin of the Shibboleth Service Provider, causing the plugin to fail configuring itself with the filters provided and omitting whatever checks they are intended to perform.
November 16, 2017
security update
November 16, 2017
security update
November 16, 2017
Oracle scrambles to sew up horrid security holes in PeopleSoft’s Tuxedo
November 16, 2017
Another preinstalled app found on OnePlus that could collect user data
November 16, 2017
White House Releases VEP Disclosure Rules
November 16, 2017
Ransomware via RDP – how to stay safe! [VIDEO]
November 16, 2017
A Boeing 757 was hacked remotely while it sat on the runway
November 16, 2017
Pawnbroker pwnd: Cash Converters says hacker slurped customer data
November 16, 2017
Security is from Mars, Developers are from Venus……or ARE they?
November 16, 2017
New, revamped Terdot Trojan: It’s so 2017, it even fake-posts to Twitter
November 16, 2017
Woman scammed for $60,000 through fake Police website
November 16, 2017
LinuxSecurity.com: It was discovered that jackson-databind, a Java library used to parse JSON and other data formats, improperly validated user input prior to deserializing: following DSA-4004-1 for CVE-2017-7525, an additional set of classes was identified as unsafe for deserialization.
November 16, 2017
DJI bug bounty NDA is ‘not signable’, say irate infosec researchers
November 16, 2017
YASAT – A Simple Security Auditing Tool
November 16, 2017
Deleted WhatsApp sent messages might not be gone forever
November 16, 2017
Homeland Security team remotely hacked a Boeing 757
November 16, 2017
Forever 21 informs customers of a potential data breach
November 16, 2017
Apple’s Face ID security fooled by simple face mask
November 16, 2017
Does UK high street banks’ crappy crypto actually matter?
November 16, 2017
LinuxSecurity.com: An update for openstack-aodh is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
November 16, 2017
Q: Why are you running in the office? A: This is my password for El Reg
November 16, 2017
security update
November 16, 2017
Cisco Warns of Critical Flaw in Voice OS-based Products
November 15, 2017
Amazon Echo and Google Home Devices Vulnerable to BlueBorne Attack
November 15, 2017
Type: Vulnerability. Microsoft Office is prone to a cross-site request-forgery vulnerability; fixes are available.
November 15, 2017
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
November 15, 2017
Type: Vulnerability. Microsoft Office is prone to a memory-corruption vulnerability; fixes are available.
November 15, 2017