January 10, 2017
Trump Plans To Build Anti-Hacking Team
Hacker: Lol, I pwned FBI.gov! Web devs: Nuh-uh, no you didn’t
January 10, 2017
Git Hound, Truffle Hog root out GitHub leaks
January 10, 2017
Q&A: RSA crypto pioneer Adleman keeps pushing the limits
I recently had the pleasure of interviewing Dr. Leonard Adleman — the “A” in the very popular public cryptographic algorithm RSA — as part of the Association for Computing Machinery’s 50th anniversary celebration of the Turing Award. In 2002, Adleman himself won the Turing Award, often referred to at the Nobel Prize of the computing […]
January 10, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Python, the worst of which could lead to arbitrary code execution.
January 10, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.
January 10, 2017
Autocomplete a novel phishing hole for Chrome, Safari crims
January 10, 2017
St Jude patching Merlin@home heart kit
January 10, 2017
Type: Vulnerability. Microsoft Office is prone to a remote memory-corruption vulnerability; fixes are available.
January 10, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote privilege-escalation vulnerability; fixes are available.
January 10, 2017
Type: Vulnerability. Microsoft Windows LSASS is prone to a local privilege-escalation vulnerability; fixes are available.
January 10, 2017
MongoDB Attacks Jump From Hundreds to 28,000 In Just Days
January 9, 2017
St. Jude Medical Patches Vulnerable Cardiac Devices
January 9, 2017
‘Fear factor pushing up cyber-insurance premiums’
January 9, 2017
LinuxSecurity.com: Security Report Summary
January 9, 2017
LinuxSecurity.com: Security Report Summary
January 9, 2017
LinuxSecurity.com: MinGW cross compiled libpng 1.6.27 release, fixing a potential security issue.For details, see https://sourceforge.net/p/png-mng/mailman/message/35575076/
January 9, 2017
LinuxSecurity.com: This update fixes an old NULL pointer dereference bug in png_set_text_2()discovered and patched by Patrick Keshishian (CVE-2016-10087). The potential”NULL dereference” bug has existed in libpng since version 0.71 of June 26,1995. To be vulnerable, an application has to load a text chunk into the pngstructure, then delete all text, then add another text chunk […]
January 9, 2017
LinuxSecurity.com: Update —- Update to 0.11 —- Update —- Update. **WARNING:** if youare using your own config file, add “` include /etc/sway/config.d/* “` Atthe end of it, otherwise nothing will work on Wayland
January 9, 2017
LinuxSecurity.com: MinGW cross compiled libpng 1.6.27 release, fixing a potential security issue.For details, see https://sourceforge.net/p/png-mng/mailman/message/35575076/
January 9, 2017
LinuxSecurity.com: This update fixes an old NULL pointer dereference bug in png_set_text_2()discovered and patched by Patrick Keshishian (CVE-2016-10087). The potential”NULL dereference” bug has existed in libpng since version 0.71 of June 26,1995. To be vulnerable, an application has to load a text chunk into the pngstructure, then delete all text, then add another text chunk […]
January 9, 2017
Man pleads guilty to role in harassment scheme against senior US government officials
Justin Liverman, a student from North Carolina, has admitted collaborating in a harassment scheme targeting US officials and their families. The post Man pleads guilty to role in harassment scheme against senior US government officials appeared first on WeLiveSecurity
January 9, 2017
US Voting Systems Deemed Critical Infrastructure
January 9, 2017
FTC sues D-Link for ‘insecure’ routers and IP cameras
January 9, 2017
FTC will pay you to build an IoT security checker
January 9, 2017
Top cop: Strap Wi-Fi jammers to teen web crims as punishment
January 9, 2017
Drug Trade on Dark Web Lands Two Men into Jail
January 9, 2017
Connected car hacking: Who’s to blame?
ESET’s Cameron Camp just about recovered from the sensory overload that is CES to gather his thoughts on what was another fascinating event. The post Connected car hacking: Who’s to blame? appeared first on WeLiveSecurity
January 9, 2017
How to recover your system from a Ransomware attack
January 9, 2017
What a Locky Ransomware attack looks like
January 9, 2017
Obama’s social media posts published as searchable archive
January 9, 2017
Open source server simplifies HTTPS, security certificates
January 9, 2017
Hacker publishes GitHub secret key hunter
January 9, 2017
Google caps punch-yourself-in-the-face malicious charger hack
January 9, 2017
VNC server library gets security fix
January 9, 2017
MongoDB ransom attacks soar, body count hits 27,000 in hours
January 9, 2017
security update
January 9, 2017
Risk Level: Very Low. Type: Trojan.
January 9, 2017
LinuxSecurity.com: Security Report Summary
January 8, 2017
How to respond to a ransomware infection
January 8, 2017
LinuxSecurity.com: Update to Samba 4.4.9 —- Security fix for CVE-2016-2125, CVE-2016-2126
January 8, 2017
LinuxSecurity.com: For changes see: https://www.mozilla.org/en-US/thunderbird/45.6.0/releasenotes/
January 8, 2017
LinuxSecurity.com: **Version 5.4.5** (2016-12-29) * SECURITY FIX: fixed CVE-2016-10074 bydisallowing potentially unsafe shell characters Prior to 5.4.5, the mailtransport (Swift_Transport_MailTransport) was vulnerable to passing arbitraryshell arguments if the “From”, “ReturnPath” or “Sender” header came from anon-trusted source, potentially allowing Remote Code Execution * deprecatedthe mail transport
January 8, 2017
Super Mario Run for Android? No, it’s malware
January 8, 2017
LinuxSecurity.com: **Version 5.4.5** (2016-12-29) * SECURITY FIX: fixed CVE-2016-10074 bydisallowing potentially unsafe shell characters Prior to 5.4.5, the mailtransport (Swift_Transport_MailTransport) was vulnerable to passing arbitraryshell arguments if the “From”, “ReturnPath” or “Sender” header came from anon-trusted source, potentially allowing Remote Code Execution * deprecatedthe mail transport
January 8, 2017
security update
January 8, 2017
security update
January 8, 2017
How to use “Find my iPhone” app to locate your smartphone
January 7, 2017
Now hiring: 1 million cybersecurity job openings in 2017
January 7, 2017
UK’s Largest Hosting firm 123-Reg ‘Pounded’ by DDoS Attack
January 7, 2017
FTC IoT privacy and security push points out D-Link router and webcam flaws
The US Federal Trade Commission has again acted on its serious concerns about data privacy and security in the Internet of Things (IoT). This time D-Link webcams and routers are the focus. Stephen Cobb puts this latest FTC move in context. The post FTC IoT privacy and security push points out D-Link router and webcam […]
January 7, 2017
security update
January 6, 2017
CIA director AOL email hacker coughs to crime
January 6, 2017
Risk Level: Very Low. Type: Trojan.
January 6, 2017
Risk Level: Very Low. Type: Trojan.
January 6, 2017
Risk Level: Very Low. Type: Trojan.
January 6, 2017
Risk Level: Very Low. Type: Trojan.
January 6, 2017
CyberZeist’s claims to have hacked FBI’s website ‘are a hoax’
January 6, 2017
FireCrypt Ransomware Builder Found in Wild Researchers have discovered a new ransomware variant that uses “.firecrypt” as its amended extension once encryption has taken place. FireCrypt is compiled using a command line builder software that allows varying inputs and outputs to be determined by the author for a unique hash, as this allows for […]
January 6, 2017
Tech security: oldies getting it in the neck again
January 6, 2017
Best company name ever! Share capital £1, name priceless…
January 6, 2017
Ransomware sleazeballs target UK schools
January 6, 2017
FBI refutes DNC claims about not investigating servers
January 6, 2017
Children in a digital world ‘need lessons in online safety’
More needs to be done to better equip children for life in a digital world, according to a new report from England’s children’s commissioner. The post Children in a digital world ‘need lessons in online safety’ appeared first on WeLiveSecurity
January 6, 2017
Telegram encrypted messaging app adds ‘Unsend’ button
January 6, 2017
MongoDB Databases being Targeted by Cyber-criminals for Ransom
January 6, 2017
Schools hit by spate of cold call ransomware attacks
January 6, 2017
3… 2…1… and 123-Reg hit by DDoSers. Again
January 6, 2017
Dodgy dealer on Amazon lures marks towards phishing site
January 6, 2017
Netgear unveils world’s easiest bug bounty
January 6, 2017
LinuxSecurity.com: This update includes the latest stable release of _Apache Subversion_, version**1.9.5**. #### Client-side bugfixes: * fix accessing non-existent paths duringreintegrate merge * fix handling of newly secured subdirectories in workingcopy * info: remove trailing whitespace in –show-item=revision ([issue4660](http://subversion.tigris.org/issues/show_bug.cgi?id=4660)) * fix recordingwrong revisions for tree conflicts * gpg-agent: improve discovery of gpg-agentsockets * gpg-agent: fix […]
January 6, 2017