LinuxSecurity.com: A vulnerability in module File::Path for Perl allows local attackers to set arbitrary mode values on arbitrary files bypassing security restrictions. [More…]
September 18, 2017
LinuxSecurity.com: Gentoo’s GIMPS ebuilds are vulnerable to privilege escalation due to improper permissions. A local attacker could use it to gain root privileges. [More…]
September 18, 2017
LinuxSecurity.com: A command injection vulnerability in Git may allow remote attackers to execute arbitrary code.
September 18, 2017
LinuxSecurity.com: A command injection vulnerability in Subversion may allow remote attackers to execute arbitrary code.
September 18, 2017
Google Chrome Will Mark FTP Resources As “Not Secure”
September 18, 2017
Chrome to brand FTP as “not secure”
September 18, 2017
IDG Contributor Network: From equanimity to Equifax
September 18, 2017
CCleaner Software Hacked with Backdoor; 2 Million Users Infected
September 18, 2017
LinuxSecurity.com: GDK-PixBuf could be made to crash or run programs as your login if it opened a specially crafted file.
September 18, 2017
CCleaner, distributed by anti-virus firm Avast, contained malicious backdoor
September 18, 2017
Risk Level: Very Low. Type: Trojan.
September 18, 2017
Risk Level: Very Low. Type: Trojan.
September 18, 2017
security update
September 17, 2017
The Pirate Bay Caught Running Cryptocurrency Mining Script
September 17, 2017
Vevo hacked, 3.12 TB of data leaked
September 17, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in GDK-PixBuf, the worst of which could result in the execution of arbitrary code.
September 17, 2017
LinuxSecurity.com: A vulnerability in Kpathsea allows remote attackers to execute arbitrary commands by manipulating the -tex option from mpost program.
September 17, 2017
LinuxSecurity.com: A vulnerability in Supervisor might allow remote attackers to execute arbitrary code. [More…]
September 17, 2017
LinuxSecurity.com: A vulnerability in chkrootkit may allow local users to gain root privileges.
September 17, 2017
LinuxSecurity.com: A vulnerability in mod_gnutls allows remote attackers to spoof clients via crafted certificates.
September 17, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in WebkitGTK+, the worst of which may allow remote attackers to execute arbitrary code.
September 17, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Binutils, the worst of which may allow remote attackers to cause a Denial of Service condition. [More…]
September 17, 2017
Equifax confirms up to 400,000 UK consumers at risk after data breach
September 16, 2017
Alaska Voter Database Exposed Online
September 16, 2017
Guess what happened after VEVO told its hackers to ‘f**k off’…
September 16, 2017
security update
September 16, 2017
Fitbit’ Fitness Tracker Devices Leak Personal Data: Researchers
September 16, 2017
Android Apps Infected with ExpensiveWall Malware Downloaded 21M Times
September 16, 2017
OurMine hacks video hosting service Vevo; leaks 3.12TB data online
September 16, 2017
LinkedIn Phishing Scam Steals Gmail Credentials Through Google Docs
September 15, 2017
security update
September 15, 2017
Rogue WordPress Plugin Allowed Spam Injection
September 15, 2017
German Voting Software Raises Concerns With German elections only a couple weeks away, researchers have been working to determine how secure the voting systems really are. Per a recent study, the software being used contains multiple vulnerabilities that could lead to devastating results if the election is compromised. Meanwhile, the software creator maintains there is […]
September 15, 2017
Chrome will automatically block annoying autoplay videos
September 15, 2017
VMware Patches Bug That Allows Guest to Execute Code on Host
September 15, 2017
India’s Aadhaar digital ID scheme: what could possibly go wrong?
September 15, 2017
Linux 4.13 Kernel Launches With Accelerated Security Feature
September 15, 2017
Linus Torvalds Wants Attackers to Join Linux Kernel Development
September 15, 2017
Poisoned WordPress ‘Display Widgets’ plugin finally purged
September 15, 2017
Facebook’s Crisis Response hub centralizes help for disaster victims
September 15, 2017
$1M bounty offered for zero-day exploits targeting Tor Browser
September 15, 2017
Open Source Summit: Securing IoT is About Avoiding Anti-Patterns
September 15, 2017
How network automation can speed deployments and improve security
September 15, 2017
How many people outside the U.S. are affected by the Equifax breach?
In the recent Equifax breach you may have noticed that people in the UK and Canada are also affected but there has been little clarification as to how many. The post How many people outside the U.S. are affected by the Equifax breach? appeared first on WeLiveSecurity
September 15, 2017
Equifax Confirms March Struts Vulnerability Behind Breach
September 14, 2017
Premium SMS Malware ‘ExpensiveWall’ Infects Millions of Android Devices
September 14, 2017
Disguised as Citrix Utility, Kedi RAT Exploits Gmail to Transfer Data
September 14, 2017
Equifax: researchers find leaky customer help portal in Argentina
September 14, 2017
4,000 ElasticSearch servers found hosting PoS malware
September 14, 2017
Microsoft patches second FinSpy zero-day exploit this year
September 14, 2017
Equifax felled by a months-old Apache Struts vulnerability
September 14, 2017
Cryptocurrency web mining: In union there is profit
Cryptocurrency mining has been used by cybercriminals to make a quick and easy profit while corrupting the victim’s machine in the process. The post Cryptocurrency web mining: In union there is profit appeared first on WeLiveSecurity
September 14, 2017
Equifax: four simple steps to secure yourself
September 14, 2017
DHS faces lawsuit over legality of forced warrantless device searches
September 14, 2017
Next US Elections: Open Source vs. Commercial Software?
September 14, 2017
Smashing Security podcast #042: Equifax, BlueBorne, and the iPhone X
September 14, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 14, 2017
Risk Level: Very Low. Type: Trojan.
September 14, 2017
Risk Level: Very Low. Type: Trojan.
September 14, 2017
Get $1M for reporting zero-day flaws in Tor to “help Govt fight crime”
September 13, 2017
LinuxSecurity.com: Several security issues were fixed in tcpdump
September 13, 2017
LinuxSecurity.com: Several security issues were fixed in tcpdump.
September 13, 2017
security update
September 13, 2017
security update
September 13, 2017
Thousands of Elasticsearch Servers Hijacked to Host PoS Malware
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a security-bypass vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Remote Desktop Virtual Host is prone to a remote code-execution vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Office Publisher is prone to a remote code-execution vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a remote privilege-escalation vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a remote denial of service vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows Shell is prone to a remote code-execution vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Edge is prone to a security vulnerability that may allow attackers to conduct spoofing attacks; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Edge is prone to a security-bypass vulnerability.
September 13, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Edge is prone to a security-bypass vulnerability.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
September 13, 2017
Type: Vulnerability. Microsoft Windows Uniscribe is prone to a remote code-execution vulnerability; fixes are available.
September 13, 2017