Menu

Latest articles

Chrome turns the screw ever tighter in Google’s encryption crusade
Bulletproof hosts stay online by operating out of disputed backwaters
Inside the CCleaner Backdoor Attack
India’s national internet registry breached, but says heist was trivial
Chinese Bitcoin exchange denies hacking rumors after theft of $2.5M
Attackers Redefining Objectives, Approaches
RAM, bam, awww … man! Boffins defeat Rowhammer protections

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Open your doors to white hats before black hats blow them off, US deputy AG urges big biz

security update

security update

Chips in iPhone 7s, Androids, smart TVs vulnerable to rogue Wi-Fi
Israeli Firm Offering WiFi Interception Service to Law Enforcement Agencies
Experts Have Sobering Message on Human Rights, Privacy for Security Pros
All 3 Billion Yahoo Users Were Hacked in 2013 Data Breach
Russian suspected of $4bn Bitcoin laundering op to be extradited to US
Costin Raiu and Juan Andres Guerrero-Saade on APT Fourth-Party Collection
DNSSEC master key change delayed after ISPs struggle
Facebook will use facial recognition to unlock your account
Users encounter threats through email twice as often as other infection vectors
The latest ISTR special report, Email Threats 2017, casts a light on a threat landscape where attackers are actively spreading malicious threats, BEC [...]
Cloudflare CTO Goes Inside the Cloudbleed Bug
Email fraudsters foiled by a smiley
It’s time that companies became more cyber-resilient

Cybersecurity is everyone’s responsibility and organisations need to train staff to ensure they have a more empowered and security savvy workforce. The post It’s time that companies became more cyber-resilient appeared first on WeLiveSecurity

2013 Yahoo Breach Affected All 3 Billion Accounts
Oracle wants you to drop a log into its cloud, so it can talk security
Sole Equifax security worker at fault for failed patch, says former CEO
Russian bot-herder and election-fiddling suspect closer to US trial
3 billion Yahoo accounts affected by 2013 breach
The biggest hack in history is actually three times bigger than we feared
Nothing matters any more… Now hapless Equifax bags $7.5m IT contract with US taxmen
Oath-my-God: THREE! BILLION! Yahoo! accounts! hacked! in! 2013! – not! ‘just!’ 1bn!
Patch your WordPress plugins: Scum are right now hijacking blogs
Five Critical Android Bugs Get Patched in October Update

security update

Equifax Says 145.5M Affected by Breach, Ex-CEO Testifies
Chinese Bitcoin Trading Exchange Blames User For Losing $3M

“I use a Mac, so I don’t need to worry about malware, phishing, or viruses.” Many Mac users turn a blind eye to cybersecurity threats, often noting that most scams and attacks occur on PCs. However, within the last few years, there has been a noted uptick in spyware (a type of software that gathers information […]

Google Warns of DoS and RCE Bugs in Dnsmasq
Google makes encryption mandatory for sites on 45 Top-Level Domains
The Google tracking feature you didn’t know you’d switched on
3 vulnerable WordPress plugins affecting 21,000 websites
‘Critical’ zero-day bug found in three popular WordPress plugins
How does Behavioral Biometrics help financial institutions manage fraud risk? Download VASCO’s white paper now
Schrems busts Privacy Shield wide open
How a Twitter troll was slain
MH370 final report: Aussies still don’t know where it crashed or why
How forgetting to renew a domain name cost $3m
‘I don’t need to understand how encryption works,’ admits UK Home Secretary
ESET at Virus Bulletin 2017

The annual Virus Bulletin International Conference takes place in Madrid, Spain this October and ESET will be well represented across the three-day event. The post ESET at Virus Bulletin 2017 appeared first on WeLiveSecurity

Un-Delled SonicWall beefs up firewall to wrestle ransomware
Patch your Android, peeps, it has up to 14 nasty flaws to flog
Equifax couldn’t find or patch vulnerable Struts implementations
Android keyboard app misled 200 million users about how it was collecting data
HPE coughed up source code for Pentagon’s IT defenses to … Russia
Bitcoin’s soft and vulnerable underbelly
Dnsmasq and the seven flaws: Patch these nasty remote-control holes
Netgear Fixes 50 Vulnerabilities in Routers, Switches, NAS Devices
Judge: FBI Can Keep iPhone Crack and Price Secret
3 simple steps to online safety
News in brief: Whole Foods holed; Facebook face lock; Mining malware
Gary McGraw on BSIMM8 and Software Security
UK National Lottery knocked offline by DDoS attack
Government demands for Apple and Google data keep on climbing
UK lotto players quids in: Website knocked offline by DDoS attack
FBI’s secret iPhone hacking tool must stay under wraps, court rules

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

‘Phish for the Future’ spearphishing campaign set digital civil liberty activists in its sights
Taboola ads exploited to serve up tech support scams
Banking trojan campaign uses commercial packers to target Brazilian users

security update

security update

security update

Blockchain skills: Don’t Try to Block the Chain
Black Hat Europe 2017: New Briefings Announced
Hikvision Security Cams Compromised to Display “HACKED”

LinuxSecurity.com: **nag 4.2.17** * [jan] SECURITY: Fix unauthorized access to task exports. * [jan] Fix regression when exporting single tags to iCalendar CATEGORIES. * [jan] Officially support PHP 7.

LinuxSecurity.com: **wicked 2.0.8** * [jan] SECURITY: Fix unauthorized access to page attachments.

LinuxSecurity.com: **passwd 5.0.7** * [jan] Officially support PHP 7. * [jan] SECURITY: Fix open redirects.

Java security plagued by crappy docs, complex APIs, bad advice
US yanks staff from Cuban embassy over sonic death ray fears
Equifax mea-culpas with free credit “locks” forever
Signal app’s address book security could upset governments
Siemens Patches Improper Access Vulnerability in Ruggedcom Protocol
ICANN Postpones Scheduled DNS Crypto Key Rollover
Threatpost News Wrap, September 29, 2017
Apple Mac fans told: Something smells EFI in your firmware
Android malware ZNIU exploits DirtyCOW vulnerability
Dildon’ts of Bluetooth: Pen test boffins sniff out Berlin’s smart butt plugs
Macs Not Receiving EFI Firmware Security Updates as Expected
Cloud security policy: The questions you need to ask

Cloud services are very much what you make of them, and you need to apply at least an equivalent level of rigorousness, in terms of risk assessment, as you would with assets that are hosted on your own network. The post Cloud security policy: The questions you need to ask appeared first on WeLiveSecurity

iPhone X Face ID baffled by kids, twins, siblings, doppelgängers
Citrix patches Netscaler hole, ARM TrustZone twisted, Android Dirty COW exploited – and more security fails

Showtime Site Found Using Cryptocurrency Miner Following the discovery last week that ThePirateBay has been using a Monero miner to experiment with revenue alternatives for the site, researchers have found that both Showtime.com and ShowtimeAnytime.com have embedded code for similar cryptocurrency mining. The code itself runs only while the user is on the site, and […]

Ouch: Brit council still staggering weeks after ransomware bit its PCs
Internet-wide security update put on hold over fears 60 million people would be kicked offline
Angst in her pants: Alleged US govt leaker Reality Winner stashed docs in her pantyhose

LinuxSecurity.com: New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues.

Google to Enforce HSTS on TLDs it Operates