Menu

Latest articles

Four arrested as Microsoft and UK police team up to crack down on technical support scammers
Idea to encrypt Web traffic at rest hits the IETF’s Standard Track
How to secure your CMS with out patching
Even weak hackers can pull off a password reset MitM attack via account registration
Anthem to pay record $115m to settle lawsuits over massive breach
Year-old vulnerability allowed pro-ISIS hackers to hack US government websites

LinuxSecurity.com: An update that contains security fixes can now be installed. An update that contains security fixes can now be installed. An update that contains security fixes can now be installed.

Hackers Demand Banks $315k Ransom or Face DDoS Attacks

A host of companies across industries have confirmed attacks today by a brutal wave of ransomware, including global law firm DLA Piper, U.S. pharmaceutical giant Merck, and the Danish shipping company Maersk. Although targets originally appeared in Ukraine—shutting down power plants, banking services and supermarkets—this latest cyberattack has quickly spanned critical economic sectors around the […]

The Amazon Echo (Horror) Show
Complex Petya-Like Ransomware Outbreak Worse than WannaCry
Google Hit With $2.7 Billion Antitrust Fine
Massive Goldeneye Ransomware Attack Hits Users Worldwide

Risk Level: Very Low. Type: Trojan.

News in brief: cars confused by kangaroos; fears on airport books move; Google hit with €2.42bn fine
Facebook moves to protect profile pictures from scammers
Second Global Ransomware Outbreak Under Way
Breaking news: here’s what we know about what could be the latest ‘Petya’ ransomware outbreak
New WannaCryptor-like ransomware attack hits Ukraine … may be global in scope

Numerous reports are coming out on social media about a new ransomware attack in Ukraine, which could be related to the Petya family. The post New WannaCryptor-like ransomware attack hits Ukraine … may be global in scope appeared first on WeLiveSecurity

8Track Hacked: 18M accounts from music social network site stolen
Global ransomware outbreak hits organisations hard
South Korean banks told to pay $315,000 or suffer DDoS wrath
Watch out: don’t lose your passwords when you sign up online
Major Hole Plugged in Secure File Transfer Tool
3 Ways Corporations are Keeping Track of Data Breaches
3 security tips for software developers
Firefox Focus: the not-quite-a-browser for Android aims for privacy

LinuxSecurity.com: A vulnerability in KAuth and KDELibs allows local users to gain root privileges.

LinuxSecurity.com: Multiple vulnerabilities have been found in LibreOffice, the worst of which allows for the remote execution of arbitrary code.

LinuxSecurity.com: A vulnerability in FreeRADIUS might allow remote attackers to bypass authentication.

LinuxSecurity.com: Several vulnerabilities have been found in VLC, the VideoLAN project’s media player. Processing malformed subtitles or movie files could lead to denial of service and potentially the execution of arbitrary code.

security update

Risk Level: Very Low. Type: Trojan.

LinuxSecurity.com: Fixes CVE-2017-9462.

LinuxSecurity.com: New kernel packages are available for Slackware 14.2 and -current to fix security issues.

News in brief: Gmail stops scanning; UK Parliament hack; Windows 10 S hacked

LinuxSecurity.com: Rebase to the newest upstream release. This release contains only bug fixes, most notably fixes for many CVEs. There are no new features.

LinuxSecurity.com: Multiple vulnerabilities have been discovered in Expat, an XML parsing C library. The Common Vulnerabilities and Exposures project identifies the following problems:

LinuxSecurity.com: This update addresses CVE-2017-1000366, a vulnerability in the dynamic linker allowing local privilege escalation.

LinuxSecurity.com: Two vulnerabilities were discovered in Drupal, a fully-featured content management framework. The Common Vulnerabilities and Exposures project identifies the following issues:

Another RCE Vulnerability Patched in Microsoft Malware Protection Engine
Svpeng Behind a Spike in Mobile Ransomware

Risk Level: Very Low. Type: Trojan.

How Spora ransomware tries to fool antivirus
Anthem to stump up record $115 million in data breach lawsuit settlement
Anthem Agrees to Settle 2015 Data Breach for $115 Million
Enable Ghost Mode in Snapchat NOW if you want to keep your location private
New EU Privacy Laws Will Complicate B2B Data Sharing
Pro-ISIS group hacks Ohio Governor’ site with anti-Trump message
Pro-ISIS hackers deface Ohio government websites
Basic Security Testing with Kali Linux

LinuxSecurity.com: An update that solves one vulnerability and has 27 fixes is An update that solves one vulnerability and has 27 fixes is An update that solves one vulnerability and has 27 fixes is now available. now available.

LinuxSecurity.com: An update that fixes three vulnerabilities is now available. An update that fixes three vulnerabilities is now available. An update that fixes three vulnerabilities is now available.

Google strips private medical data from searches

LinuxSecurity.com: An update that fixes 50 vulnerabilities is now available. An update that fixes 50 vulnerabilities is now available. An update that fixes 50 vulnerabilities is now available.

Risk Level: Very Low. Type: Trojan.

security update

Fake Pornography App Infecting Devices with Android Ransomware
Google to stop scanning user emails for Gmail ads
Hackers attempt to break into UK MPs’ email accounts, as Houses of Parliament targeted by cyber attack
UK Parliament Under “Sustained and Determined” Cyber Attack
Facebook’s new feature to prevent misuse of profile pics

security update

800,000 Virgin Media customer urged to change their router passwords
Someone leaked 32TB of Windows 10 internal builds and source code

security update

security update

security update

WikiLeaks’ Latest Dump Exposes CIA Hacking Tools for air-gapped PCs
Siemens Patches Vulnerabilities in SIMATIC CP, XHQ

LinuxSecurity.com: Several vulnerabilities have been found in the Apache HTTPD server. CVE-2017-3167

LinuxSecurity.com: Multiple vulnerabilities have been found in Vim and gVim, the worst of which might allow remote attackers to execute arbitrary code.

LinuxSecurity.com: An out-of-bounds write in Graphite might allow remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in jbig2dec, the worst of which might allow remote attackers to execute arbitrary code.

LinuxSecurity.com: Several security issues were fixed in OpenVPN.

LinuxSecurity.com: Multiple vulnerabilities have been found in Urban Terror, the worst of which allows for the remote execution of arbitrary code.

LinuxSecurity.com: It was discovered that Flatpak, an application deployment framework for desktop apps insufficiently restricted file permissinons in third-party repositories, which could result in privilege escalation.

LinuxSecurity.com: Multiple vulnerabilities have been found in libksba which might allow remote attackers to obtain sensitive information or crash an libksba-based application. [More…]

LinuxSecurity.com: Multiple vulnerabilities have been found in the Graphite font rendering engine which might result in denial of service or the execution of arbitrary code if a malformed font file is processed.

Few Victims Reporting Ransomware Attacks to FBI
News in brief: drone chiefs urge regulation; Microsoft drops SMB1; Virgin router warning
Threatpost News Wrap, June 23, 2017
Virgin Media to 800,000 Hub 2 users: Change Your Password Now
NSA Advocates Data Sharing Framework
Russia ‘targeted 21 states’ during US election campaign, says official
Millennials: Meet the next generation of cybersecurity

As baby boomers retire and the employment gap in cybersecurity is plugged by generation x, we look at how millennials are set to shape the industry. The post Millennials: Meet the next generation of cybersecurity appeared first on WeLiveSecurity

The Cyber News Rundown brings you the latest happenings in cyber news weekly. Who am I? I’m Connor Madsen, a Webroot Threat Research Analyst, and a guy with a passion for all things security. Any more questions? Just ask. WannaCry Shuts Down Honda Production Plant Over the last few days, Honda officials have discovered a […]

If these universities had run an ad blocker they might have been saved from ransomware attack
Ransomware revisited – is it really the worst sort of malware? [Security SOS Week]
Dating app boss sees ‘no problem’ on face-matching without consent
Police cancel 590 speeding fines after WannaCry hits traffic cameras

LinuxSecurity.com: An update that fixes 12 vulnerabilities is now available. An update that fixes 12 vulnerabilities is now available. An update that fixes 12 vulnerabilities is now available.

Ouch! UK Govt’s Cyber Essentials scheme suffers data breach due to configuration error

Risk Level: Very Low. Type: Trojan.

LinuxSecurity.com: This update addresses CVE-2017-1000366, a vulnerability in the dynamic linker allowing local privilege escalation.

LinuxSecurity.com: For changes see https://www.mozilla.org/en-US/thunderbird/52.2.0/releasenotes/

Textalyzer Device Tells Police Everything Users Do on Their Smartphone

security update

Cisco Patches XXE, DOS, Code Execution Vulnerabilities
Cybereason snags $100m from Softbank to mount distribution, tech offensive