Risk Level: Very Low. Type: Trojan.
December 13, 2017
What is the cyber kill chain?
December 12, 2017
Microsoft December Patch Tuesday Update Fixes 34 Bugs
December 12, 2017
Argy-bargy Argies barge into Starbucks Wi-Fi with alt-coin discharges
December 12, 2017
security update
December 12, 2017
Sophisticated ‘MoneyTaker’ group stole millions from Russian & US banks
December 12, 2017
New Spider Ransomware Comes With 96-Hour Deadline
December 12, 2017
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available.
December 12, 2017
LinuxSecurity.com: Upstream details at : https://access.redhat.com/errata/RHSA-2017:3402
December 12, 2017
iOS jailbreak exploit published by Google
December 12, 2017
Bitfinex cryptocurrency exchange hit by massive DDoS attacks
December 12, 2017
Ransom email scam from ‘hitman’ demands: pay up or die
December 12, 2017
Man apologizes after photo of ‘racist’ woman goes viral
December 12, 2017
Brrr! It’s a snow day and someone has pwned the chuffin’ school heating
December 12, 2017
Cryptocurrency in kilowatt hours: Counting the costs of anonymous transactions
The energy costs are not the only charges in a transaction: the bitcoin network itself levies a charge which, according to a blog from Valve, the gaming provider behind the Steam network, has skyrocketed from $0.20 in 2016 to $20 per transaction today The post Cryptocurrency in kilowatt hours: Counting the costs of anonymous transactions […]
December 12, 2017
Coinbase: don’t expect to trade your cryptocurrency at busy times
December 12, 2017
This Fidget spinner app is sending other apps data to Chinese server
December 12, 2017
It has been a turbulent year of devastating ransomware attacks (e.g. NotPetya) and gut-wrenching breaches (e.g. Equifax). Undoubtedly, the question on everyone’s mind is, “what’s in store for us in the New Year?” Webroot’s top 10 cybersecurity predictions for 2018 covers everything from ransomware and breaches to mobile, cryptocurrency, and government.We’ve grouped our predictions to […]
December 12, 2017
Spies are watching… on LinkedIn
December 12, 2017
Watch: How to Pick a Lock
December 12, 2017
Dyn Inc. DDoS anniversary, and the truth about the Reaper botnet
December 12, 2017
LinuxSecurity.com: New release (1:12.2.2-1), security fix for CVE-2017-16818
December 12, 2017
LinuxSecurity.com: Fix omapi SD leak (#1523547)
December 12, 2017
LinuxSecurity.com: * CVE-2017-1000256: libvirt: TLS certificate verification disabled for clients (bz #1503687) * Fix qemu image locking with shared disks (bz #1513447)
December 12, 2017
LinuxSecurity.com: Fix to directory traversal attacks (CVE-2017-17042).
December 12, 2017
LinuxSecurity.com: This is an update fixing denial of service (CVE-2017-16944). —- This is an update fixing use-after-free (CVE-2017-16943).
December 12, 2017
LinuxSecurity.com: Upstream annoucement: [WordPress 4.9.1 Security and Maintenance Release](https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and- maintenance-release/)
December 12, 2017
LinuxSecurity.com: Update to latest version. Contains security fixes for CVE-2017-15090, CVE-2017-15092, CVE-2017-15093 and CVE-2017-15094
December 12, 2017
LinuxSecurity.com: * Ver. 19.3.6.4
December 12, 2017
LinuxSecurity.com: The simplesamlphp package in wheezy is vulnerable to multiple attacks on authentication-related code, leading to unauthorized access and information disclosure.
December 12, 2017
LinuxSecurity.com: Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-15407
December 12, 2017
Enterprise security spend to continue to trend higher
A breakdown of the ‘spending pie’ shows that the ‘security services’ segment is projected to make up nearly 60% of the total IT security budgets, followed by the ‘infrastructure protection’ segment on a little over 18%. The post Enterprise security spend to continue to trend higher appeared first on WeLiveSecurity
December 12, 2017
LinuxSecurity.com: An update for org.ovirt.engine-root is now available for Red Hat Virtualization Manager version 4.1. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which
December 12, 2017
Google’s Project Zero reveals Apple jailbreak exploit
December 12, 2017
HP leaves accidental keylogger in laptop keyboard driver
December 12, 2017
security update
December 12, 2017
Type: Vulnerability. Microsoft Excel is prone to a remote code-execution vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer are prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft SharePoint is prone to a privilege-escalation vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Exchange Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft PowerPoint is prone to an information-disclosure vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.
December 12, 2017
Vulnerability Found in Two Keyless Entry Locks
December 11, 2017
In-Store WiFi Provider Used Starbucks Website to Generate Monero Coins
December 11, 2017
Mailsploit: using emails to attack mail software
December 11, 2017
security update
December 11, 2017
security update
December 11, 2017
As 2017 comes to a close, we’re looking back at the 10 most significant (or simply the most devastating) cybersecurity stories of the year. Read through the list below to see which attacks, data breaches, and other events left a lasting impact on both the security industry and the global online community overall. Which story […]
December 11, 2017
Leftover Debugger Doubles as a Keylogger on Hundreds of HP Laptop Models
December 11, 2017
Vietnamese man hacked Australian airport computers; stole security data
December 11, 2017
Banking malware on Google Play targets Polish banks
Besides delivering the promised functionalities, the malicious apps can display fake notifications and login forms seemingly coming from legitimate banking applications, harvest credentials entered into the fake forms, as well as intercept text messages to bypass SMS-based 2-factor authentication. The post Banking malware on Google Play targets Polish banks appeared first on WeLiveSecurity
December 11, 2017
Lil Bub, a special-needs celebrity cat, gets hacked
December 11, 2017
Blighty flogs Qatar a bunch of missiles and Typhoon fighter jets
December 11, 2017
Warrantless surveillance can continue until April, say Feds
December 11, 2017
Happy holidays, scam spotters!
Businesses are often sent fake invoices and waybills which install ransomware. Teach staff to avoid these. If questionable, ask your IT dept to look at it. E-cards have been a target in the past and may be used again in holiday-themed attacked. The post Happy holidays, scam spotters! appeared first on WeLiveSecurity
December 11, 2017
Language bugs infest downstream software, fuzzer finds
December 11, 2017
Leftover Synaptics debugger puts a keylogger on HP laptops
December 11, 2017
Dynamics 365 sandbox leaked TLS certificates
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
December 11, 2017
LinuxSecurity.com: It discovered that the Private Browsing mode in the Mozilla Firefox web browser allowed to fingerprint a user across multiple sessions via IndexedDB.
December 10, 2017
LinuxSecurity.com: Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. For the oldstable distribution (jessie), these problems have been fixed
December 10, 2017
Someone hacked this traffic sign with anti-Trump messages
December 10, 2017
A Trove of 1.4 Billion Clear Text Credentials File Found on Dark Web
December 10, 2017
LinuxSecurity.com: Update to latest upstream version.
December 10, 2017
LinuxSecurity.com: – fix NTLM buffer overflow via integer overflow (CVE-2017-8816) – fix FTP wildcard out of bounds read (CVE-2017-8817)
December 10, 2017
security update
December 9, 2017