September 5, 2017
Patch Released for Critical Apache Struts Bug
September 5, 2017
Four Million Time Warner Cable Records Left on Misconfigured AWS S3
September 5, 2017
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 5, 2017
Risk Level: Very Low. Type: Trojan.
September 5, 2017
London police’s use of facial recognition falls flat on its face
September 5, 2017
Instagram breach deepens with dark web ‘Doxagram’ domain
September 5, 2017
Military Contractor’s Vendor Leaks Resumes in Misconfigured AWS S3
September 5, 2017
Spam Campaigns Using Trickbot Banking Trojan Against Cryptocurrencies
September 5, 2017
Would-be cyberattackers caught by malware with a sting in the tail
September 5, 2017
Kurat võtku! Estonia identifies security risk in almost 750,000 ID cards
September 5, 2017
YouTube MP3 Converter Site Shut Down After Labels Win Lawsuit
September 5, 2017
Yahoo! braces itself for enormous class-action suit over breaches
September 5, 2017
Bazinga! Social network Taringa ‘fesses up to data breach
September 5, 2017
LinuxSecurity.com: GD library could be made to crash if it opened a specially crafted file.
September 5, 2017
LinuxSecurity.com: An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata is now available. is now available.
September 5, 2017
Chinese cryptocurrency crackdown
China banned the raising of funds using token-based digital currencies and deemed the practice illegal on Monday, in a move seen as an attempt to impose more regulations on the virtual market. The post Chinese cryptocurrency crackdown appeared first on WeLiveSecurity
September 5, 2017
UK not as keen on mobile wallets as mainland Europe and US
September 5, 2017
Latin American social media giant Taringa hacked; 28M accounts stolen
September 4, 2017
LinuxSecurity.com: A vulnerability in MCollective might allow remote attackers to execute arbitrary code.
September 4, 2017
Lawyer suggests tying access to encryption to verified ID
September 4, 2017
Leaky S3 bucket sloshes deets of thousands with US security clearance
September 4, 2017
Trove of Private Military Contractor Job Applicants Exposed Online
September 4, 2017
Security-focused phone launches crowdfunding drive
September 4, 2017
Tempted to join the games in the crytpcurrency playground?
September 4, 2017
LinuxSecurity.com: Several security issues were fixed in FontForge.
September 4, 2017
LinuxSecurity.com: Libidn2 2.0.4 (released 2017-08-30) integer overflow in bidi.c/_isBidi() * Fix integer overflow in puny_decode.c/decode_digit() * Improve docs * Fix idna_free() to idn_free() * Update fuzzer corpora
September 4, 2017
LinuxSecurity.com: Qemu: usb: ohci: infinite loop due to incorrect return value [CVE-2017-9330] (#1457698) Qemu: nbd: segmentation fault due to client non-negotiation [CVE-2017-9524] (#1460173) Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [CVE-2017-10664] (#1466466) Qemu: exec: oob access during dma operation [CVE-2017-11334] (#1471640) revised full fix for XSA-226 (regressed
September 4, 2017
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available.
September 4, 2017
Six million Instagram accounts hacked
A hack believed to target only celebrity accounts on Instagram has also accessed millions of users’ private data. The post Six million Instagram accounts hacked appeared first on WeLiveSecurity
September 4, 2017
LinuxSecurity.com: Several security issues were fixed in Liblouis.
September 4, 2017
Crypto-busters reverse nearly 320 MEELLION hashed passwords
September 4, 2017
LinuxSecurity.com: An update that solves 9 vulnerabilities and has two fixes An update that solves 9 vulnerabilities and has two fixes An update that solves 9 vulnerabilities and has two fixes is now available. is now available.
September 4, 2017
security update
September 4, 2017
Asterisk RTP bug worse than first thought: think intercepted streams
September 3, 2017
LinuxSecurity.com: This update fixes CVE-2017-12982.
September 3, 2017
LinuxSecurity.com: This update fixes CVE-2017-12982.
September 3, 2017
LinuxSecurity.com: Qemu: usb: ohci: infinite loop due to incorrect return value [CVE-2017-9330] (#1457698) Qemu: nbd: segmentation fault due to client non-negotiation [CVE-2017-9524] (#1460173) Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [CVE-2017-10664] (#1466466) Qemu: exec: oob access during dma operation [CVE-2017-11334] (#1471640) revised full fix for XSA-226 (regressed
September 3, 2017
Stolen 6M Celebrities data from Instagram sold on Dark Web
September 3, 2017
LinuxSecurity.com: Libidn2 2.0.4 (released 2017-08-30) integer overflow in bidi.c/_isBidi() * Fix integer overflow in puny_decode.c/decode_digit() * Improve docs * Fix idna_free() to idn_free() * Update fuzzer corpora
September 3, 2017
security update
September 3, 2017
security update
September 3, 2017
security update
September 2, 2017
LinuxSecurity.com: Libidn2 2.0.4 (released 2017-08-30) integer overflow in bidi.c/_isBidi() * Fix integer overflow in puny_decode.c/decode_digit() * Improve docs * Fix idna_free() to idn_free() * Update fuzzer corpora
September 2, 2017
LinuxSecurity.com: **Version 2.2.5** – 2017-08-30 * **Security** – Double-free in gdImagePngPtr(). **CVE-2017-6362** – Buffer over-read into uninitialized memory. **CVE-2017-7890** * **Fixed** – Fix #109: XBM reading fails with printed error – Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable – Fix #357: 2.2.4: Segfault in test suite – Fix #386:
September 2, 2017
LinuxSecurity.com: – Update to 2.6.0 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.6.0-2.1.9-and-1.3.21-released Security Advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security- advisory-2017-02
September 2, 2017
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available. An update that fixes 6 vulnerabilities is now available.
September 2, 2017
LinuxSecurity.com: An update that solves three vulnerabilities and has 5 fixes An update that solves three vulnerabilities and has 5 fixes An update that solves three vulnerabilities and has 5 fixes is now available. is now available.
September 2, 2017
LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.
September 2, 2017
DailyStormer comes back with Albanian domain; gets booted off
September 1, 2017
From streaming entertainment to social media to our online bank accounts and software, we are inundated every day with the need to create and remember new passwords. In fact, one study revealed that Americans have an average of 130 online accounts registered to a single email address. And what are the chances that those 130 […]
September 1, 2017
‘HoeflerText’ Popups Target Browsers With RAT and Locky Ransomware
September 1, 2017
US cops can’t keep license plate data scans secret without reason
September 1, 2017
Massive Locky Ransomware Strain Hits US with Over 23 Million Emails
September 1, 2017
Online file conversion services – why trust them?
September 1, 2017
Hacker Charged for Crashing Businesses Using Millions of Mirai botnet
September 1, 2017
Open source or proprietary: how should we secure voting systems?
September 1, 2017
Threatpost News Wrap, September 1, 2017
September 1, 2017
Ex-cop who won’t decrypt hard drives still in jail indefinitely
September 1, 2017
No Fix Planned For LabVIEW Bug, Says National Instruments
September 1, 2017
US Government Site Was Hosting Ransomware
September 1, 2017
Twitter struggles to deal with the sock-puppet and bot armies
September 1, 2017
Snoops ‘n’ snitches auditor IPCO gets up and running
September 1, 2017
Instagram warns users of API bug on heels of nude Bieber photos leak
September 1, 2017
Connect at mine free Wi-Fi! I would knew what I is do! I is cafe boss!
September 1, 2017
WikiLeaks suffer defacement at the hands of OurMine group
WikiLeaks’ whistleblowing website suffered an attack from the group known as OurMine on Thursday The post WikiLeaks suffer defacement at the hands of OurMine group appeared first on WeLiveSecurity
September 1, 2017
IRS-Themed Ransomware Using Old-School Tactics Over the past week, researchers have discovered a new ransomware variant that attempts to impersonate both the IRS and the FBI, similar to the FBI lockscreen malware that was popular several years ago. By tricking the victim into opening a link to a fake FBI questionnaire, the ransomware is downloaded […]
September 1, 2017
Asterisk bugs make a right mess of RTP
September 1, 2017
AT&T customers with Arris modems at risk, claim infosec bods
September 1, 2017
Robocall scumbags already target Hurricane Harvey victims
August 31, 2017
Instagram hacked; data of top celebrities stolen and traded
August 31, 2017
Session Hijacking Bug Exposed GitLab Users Private Tokens
August 31, 2017
When uploading comments to the FCC, you can now include malware
August 31, 2017
Angelfire: CIA’ Undetectable Implants Infect Windows Boot Sector
August 31, 2017
Polyinstantiating /tmp and /var/tmp directories
August 31, 2017
FDA Recalls 465K Pacemakers Tied to MedSec Research
August 31, 2017
Pacemaker gets firmware update – go and see your doctor
August 31, 2017
Beware scammers phishing for disaster charity – or anything else
August 31, 2017
WikiLeaks official website hacked by OurMine hacking group
August 31, 2017
Instagram confirms hack against high-profile users’ account info
August 31, 2017
Machine learning for malware: what could possibly go wrong?
August 31, 2017
Is your email in the latest cache of 711 million pwnd addresses?
August 31, 2017
Google removes 300 Android apps following DDoS attack
Google has been forced to remove almost 300 apps from its Play Store after learning that apps were being hijacked for DDoS attacks. The post Google removes 300 Android apps following DDoS attack appeared first on WeLiveSecurity
August 31, 2017
Patchy PCI compliance putting consumer credit card data at risk
August 31, 2017