Menu

Latest articles

iOS Password Prompts are Ripe for Abuse

Risk Level: Very Low. Type: Trojan.

Israel hacked Kaspersky to inform US about Russia stealing NSA exploits
Equifax: Umm, actually hackers stole records of 15.2 million Brits, not 400,000
North Korean hackers allegedly probing US utilities for weaknesses
Equifax: up to 15 million more at risk
RubyGems Patches Remote Code Execution Vulnerability
What’s the fuzz about? Microsoft unveils its latest security tool
Medical Records and Sensitive Data of 150,000 US Patients Exposed
PureVPN Aided FBI to Track CyberStalker by Providing His Logs

LinuxSecurity.com: Several vulnerabilities were discovered in WordPress, a web blogging tool. They would allow remote attackers to exploit path-traversal issues, perform SQL injections and various cross-site scripting attacks.

Five cool things happening for National Cyber Security Awareness Month

National Cyber Security Awareness Month and its events have become top of mind for people and businesses in recent years, given the staggering number of recent data breaches and global ransomware attacks. The post Five cool things happening for National Cyber Security Awareness Month appeared first on WeLiveSecurity

US Treasury denies domestic spying
When Irish data’s leaking: Supermarket shoppers urged to check bank statements
Hackers steal $60 million from Taiwanese bank using bespoke malware

LinuxSecurity.com: An update that fixes 47 vulnerabilities is now available. An update that fixes 47 vulnerabilities is now available. An update that fixes 47 vulnerabilities is now available.

LinuxSecurity.com: An update that fixes 143 vulnerabilities is now available. An update that fixes 143 vulnerabilities is now available. An update that fixes 143 vulnerabilities is now available.

LinuxSecurity.com: An update that fixes 140 vulnerabilities is now available. An update that fixes 140 vulnerabilities is now available. An update that fixes 140 vulnerabilities is now available.

‘There has never been a right to absolute privacy’ – US deputy AG slams ‘warrant-proof’ crypto

LinuxSecurity.com: 6.9.9-15 —- Rebuilt for ImageMagick 6.9.9-13

LinuxSecurity.com: update to upstream release 0.2.9.12 (SECURITY) (#1494860)

LinuxSecurity.com: 6.9.9-15 —- Rebuilt for ImageMagick 6.9.9-13

‘Israel hacked Kaspersky and caught Russian spies using AV tool to harvest NSA exploits’
Hackers nick $60m from Taiwanese bank in tailored SWIFT attack

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

37K Chrome Users Tricked into Downloading Fake Adblock Plus Extension
It’s 2017… And Windows PCs can be pwned via DNS, webpages, Office docs, fonts – and some TPM keys are fscked too

LinuxSecurity.com: 6.9.9-15 —- Rebuilt for ImageMagick 6.9.9-13

Equifax: About those 400,000 UK records we lost? It’s now 15.2M. Yes, M for MEELLLION
Microsoft Patches Office Bug Actively Being Exploited
Apple’s iOS password prompts prime punters for phishing: Too easy now for apps to swipe secrets, dev warns
Internal Accenture Data, Customer Information Exposed in Public Amazon S3 Bucket
Massive Trove of Sensitive ‘Accenture’ Data Exposed Online
Microsoft Patches Critical Windows DNS Client Vulnerabilities
Porn Site Becomes Hub for Malvertising Campaigns
New Malware Hits ATMs Running on Win7 and Win Vista

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan.

Hackers in Arab world collaborate more than hoodie-clad Westerners
Why it’s time to stop calling users “n00bs” and “1d10ts”
Learning from the Disqus data breach
Overdraft-fiddling hackers cost banks in Eastern Europe $100m
Is your SME ready for GDPR?

Billed as the largest piece of privacy legislation for 20 years, the GDPR isn’t merely a directive, but EU legislation enshrined in law. It has been designed to harmonise different laws to protect individuals’ privacy. The post Is your SME ready for GDPR? appeared first on WeLiveSecurity

Accenture left a huge trove of highly sensitive data on exposed servers

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 7.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

SELinux blocks loading kernel modules
PornHub visitors hit with malware attack via poisoned ads
Busted! Founder sells $51m website, hacks it, tries to sell site its own data
Real Mad-quid: Murky cryptojacking menace that smacked Ronaldo site grows
Canadian SMBs: How technology can help you have a better start in business

A recent Ipsos survey, found that only 26 per cent of Canadian SMBs feel very confident that their business and its information is safe from cyberattacks The post Canadian SMBs: How technology can help you have a better start in business appeared first on WeLiveSecurity

Ada Lovelace Day: celebrating women in technology

By the 1800s, long before the famous Enigma machine and military computerization to decipher codes, a Victorian woman trapped in a patriarchal world, glimpsed the potential reach of computing and the change it would impose on humanity. The post Ada Lovelace Day: celebrating women in technology appeared first on WeLiveSecurity

Leaky-by-design location services show outsourced security won’t ever work
Smut-watchers suckered by evil advertising

Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.

Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.

Type: Vulnerability. Microsoft ChakraCore is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows Shell is prone to a remote code-execution vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability; fixes are available.

Type: Vulnerability. Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local security-bypass vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local denial-of-service vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to an information disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to multiple local privilege-escalation vulnerabilities; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Skype for Business is prone to a privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a remote privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a remote denial-of-service vulnerability; fixes are available.

Type: Vulnerability. Microsoft Office SharePoint is prone to a cross-site scripting vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows Shell is prone to a remote code-execution vulnerability; fixes are available.