Menu

Latest articles

Civil Liberties Activists Hit By Phishing Campaign
DHS expanding surveillance of immigrants to social media

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Your Android lock screen pattern isn’t as safe as a PIN code

What’s safer? Using a numeric PIN code to unlock your Android smartphone or relying on a finger squiggle? The answer might surprise you. The post Your Android lock screen pattern isn’t as safe as a PIN code appeared first on WeLiveSecurity

Windows Defender Bypass Tricks OS into Running Malicious Code
Internet Explorer bug can reveal the contents of your address bar
Patch alert! Easy-to-exploit flaw in Linux kernel rated ‘high risk’
Android unlock patterns are too easy to guess, stop using them
Money-making machine: Monero-mining malware

While far behind Bitcoin in market capitalization, Monero has several features that make it a very attractive cryptocurrency to be mined by malware. The post Money-making machine: Monero-mining malware appeared first on WeLiveSecurity

The UK isn’t ditching Boeing defence kit any time soon

LinuxSecurity.com: An update that fixes 16 vulnerabilities is now available. An update that fixes 16 vulnerabilities is now available. An update that fixes 16 vulnerabilities is now available.

Popular GoKeyboard App Spying on Millions of Android Users
The sorry state of stock trading mobile app security revealed
?Dios m?o! Spain blocks DNS to silence Catalan independence vote sites
Smashing Security podcast #045: Deloitte fail, CCleaner, and dotards on Twitter
Europol warns ransomware has taken cybercrime ‘to another level’
Microsoft downplays alarm over Windows Defender ‘flaw’
NatWest customer services: We’re aware of security glitch
Ransomware keeping cops, NHS and local UK gov bods awake at night
Mac High Sierra hijinks continue: Nasty apps can pull your passwords

LinuxSecurity.com: New gegl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.

iOS apps can read metadata revealing users’ location histories

security update

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Signal taps up Intel’s SGX to (hopefully) stop contacts falling into hackers, cops’ hands

Another day, another phishing attack. From businesses to consumers, phishing attacks are becoming a more widespread and dangerous online threat every year. One wrong click could quickly turn into a nightmare if you aren’t aware of the current techniques cyber scammers are using to get access to your valuable personal information. A phishing attack is […]

Alleged dark web drug baron cuffed – after he flew to US for World Beard Championships

security update

CCleaner Malware: Here is the Full List of Affected Companies
Gatekeeper Alone Won’t Mitigate Apple Keychain Attack
Facebook-hijacking Faceliker malware is on the rise
Signal Testing New Private Contact Discovery Service
Waiting for Skynet? Don’t hold your breath
South Korea Blames North Korean Hackers For Stealing Bitcoin
Instagram now lets you block people from commenting on your posts
TalkTalk once told GCHQ: Cyberattack? We’d act fast to get sports back up
Remote Wi-Fi Attack Backdoors iPhone 7
Gov contractor nicked on suspicion of Official Secrets Act breach
Campaigner who refused to hand over passwords found guilty
US Army Black Hawk helicopter damaged in drone crash
Heads-up teenage hoodlums! Don’t SWAT Brian Krebs or else…
Bossies 2017: The Best of Open Source Software Awards
Bossie Awards 2017: The best networking and security software
Have MAC, will hack: iThings have trivial-to-exploit Wi-Fi bug
Oracle corrals and patches Struts 2 vulnerabilities

LinuxSecurity.com: This release fixes a crash when parsing an empty code string of a codewscope type.

White House staffers jabbed with probe over private email use
Google reveals Android Robocop AI to spot and destroy malware
Deloitte is a sitting duck: Key systems with RDP open, VPN and proxy ‘login details leaked’

Type: Vulnerability. Adobe Flash Player is prone to an unspecified remote code-execution vulnerability; fixes are available.

Oracle Patches Apache Struts, Reminds Users to Update Equifax Bug

LinuxSecurity.com: Multiple vulnerabilities have been found in RAR and UnRAR, the worst of which may allow attackers to execute arbitrary code.

LinuxSecurity.com: Libplist could be made to crash if it opened a specially crafted file.

LinuxSecurity.com: The 4.13.3 stable update contains a number of important fixes across the tree.

macOS High Sierra Available—And Vulnerable to Keychain Attack
After The Pirate Bay, Showtime Websites Also Found Mining Cryptocoins
Keychain-busting zero-day disclosed hours before release of macOS High Sierra
What’s at risk from nRansom? Your memories of Thomas the Tank Engine
Equifax CEO falls on his sword weeks after credit biz admits mega-breach
Mobile Stock Trading App Providers Unresponsive to Glaring Vulnerabilities
Mobile stock trading apps riddled with security holes
WordPress 4.8.2 is out, update your website now
Adobe’s security team reveals its private PGP key
1.4 Million New Phishing Sites Launched Each Month
Beyond public key encryption
Another thug learns that SWATting Brian Krebs is a bad idea
Suspected mass-spoofing of ships’ GPS in the Black Sea

LinuxSecurity.com: A vulnerability in libsoup might allow remote attackers to execute arbitrary code.

Docs ran a simulation of what would happen if really nasty malware hit a city’s hospitals. RIP :(
Boffins take biometric logins to heart, literally: Cardiac radar IDs users to unlock their PCs
Researchers promise demo of ‘God-mode’ pwnage of Intel mobos

Risk Level: Very Low. Type: Trojan.

LinuxSecurity.com: An update that fixes 15 vulnerabilities is now available. An update that fixes 15 vulnerabilities is now available. An update that fixes 15 vulnerabilities is now available.

Brit broke anti-terror law by refusing to cough up passwords to cops
CBS’s Showtime caught mining crypto-coins in viewers’ web browsers
The software flaw that could beam out passwords by DNS
Deloitte: ‘Very Few Clients’ Impacted by Cyber Attack
Android Lockscreen Patterns Less Secure Than PINs

LinuxSecurity.com: Multiple vulnerabilities have been found in Chromium, the worst of which could result in the execution of arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in PHP, the worst of which could result in the execution of arbitrary code.

News in brief: New IoT grief; Old patch lessons; Older voting tech

Risk Level: Very Low. Type: Trojan.

TV broadcasts in California interrupted to show “end of the world” alert
Sensitive client emails, usernames, passwords exposed in Deloitte hack
Chris Vickery on Amazon S3 Data Leaks
Joomla 3.8 fixes serious LDAP authentication issue, update now

I’m delighted to join the Webroot team officially today as CEO. We helped define the cybersecurity field in our first 20 years, but I believe our best days are ahead. With this introductory post, I thought I’d let you know where I intend to focus in my first months at Webroot, with the goal of […]

Insteon and Wink home hubs appear to have a problem with encryption
Adobe Private PGP Key Leak a Blunder, But It Could Have Been Worse
Bankbot trojan returns to Google Play with new tricks

The Android banking trojan that we first informed about in the beginning of this year has found its way to Google Play again and contains new tricks designed to get access to the private banking information of the user. The post Bankbot trojan returns to Google Play with new tricks appeared first on WeLiveSecurity

For eight years, hackers have been able to exploit this password-stealing flaw in Joomla
Brit military wants a small-drone-killer system for £20m
No, Facebook spies aren’t secretly “following me”, it’s a hoax
Cops shut 28k sites flogging knock-off footie kits and other tat
Monday review – Adobe botches, Apache bleeds and Equifax blunders
Security and privacy on the new iOS 11

These new security measures will undoubtedly not only impact the security of data stored on a phone that has been lost or stolen, but could also complicate the progress of criminal investigations requiring the forensic analysis of a phone. The post Security and privacy on the new iOS 11 appeared first on WeLiveSecurity

Pesky users! They’re always compromising endpoints! Security baked into silicon helps

LinuxSecurity.com: Multiple vulnerabilities have been found in Tcpdump, the worst of which may allow execution of arbitrary code.

Spammed-out emails threaten websites with DDoS attack on September 30th