December 7, 2016
Flaw spotted in North Korea’s Red Star operating system
New Botnet is Attacking the US West Coast with Huge DDoS Attacks
December 7, 2016
Nintendo targets 3DS vulnerabilities in new bug bounty
December 7, 2016
Hackers Gamify DDoS Attacks With Collaborative Platform
December 7, 2016
Malicious online ads expose millions to possible hack
December 7, 2016
Uber is watching your smartphone’s battery charge
December 7, 2016
LinuxSecurity.com: Multiple vulnerabilities have been found in Mercurial, the worst of which could lead to the remote execution of arbitrary code.
December 7, 2016
LinuxSecurity.com: Multiple vulnerabilities have been found in OpenSSH, the worst of which allows remote attackers to cause Denial of Service.
December 7, 2016
LinuxSecurity.com: A buffer overflow in PECL HTTP might allow remote attackers to execute arbitrary code.
December 7, 2016
LinuxSecurity.com: Multiple vulnerabilities have been found in OpenSSL, the worst of which allows attackers to conduct a time based side-channel attack.
December 7, 2016
Android, Qualcomm move on insecure GPS almanac downloads
December 7, 2016
Risk Level: Very Low. Type: Trojan.
December 7, 2016
After IoTs, it is the IMDs that are Most Vulnerable to Hacking
December 6, 2016
IBM Watson steps into real-world cybersecurity
December 6, 2016
LinuxSecurity.com: New upstream version 2.50. – Fixes serious DLL hijacking attack:https://sourceforge.net/p/nsis/bugs/1125/
December 6, 2016
Flash Exploit Found in Seven Exploit Kits
December 6, 2016
DailyMotion Hack Leaks Emails, Passwords of 87M Users
December 6, 2016
LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…]
December 6, 2016
LinuxSecurity.com: Nghttp2 is vulnerable to a Denial of Service attack.
December 6, 2016
LinuxSecurity.com: Patch is vulnerable to a locally generated Denial of Service condition.
December 6, 2016
LinuxSecurity.com: Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.
December 6, 2016
LinuxSecurity.com: Security fix for CVE-2016-9296
December 6, 2016
LinuxSecurity.com: phpMyAdmin 4.6.5.1 (2016-11-26) =============================== A patch-levelrelease fixing two small issues: * an issue affecting a small number of usersusing $cfg[‘Servers’][$i][‘hide_db’] or $cfg[‘Servers’][$i][‘only_db’]. * anissue affecting the create table dialog where the partition selection tool wasoverzealous and made it difficult to create a new table. There are also minorimprovements to the Czech language file. phpMyAdmin […]
December 6, 2016
LinuxSecurity.com: Update to 1.10.1
December 6, 2016
LinuxSecurity.com: Add fix for gstreamer FLIC decoder vulnerability
December 6, 2016
LinuxSecurity.com: xen : various security flaws (#1397383) x86 null segments not always treated asunusable [XSA-191, CVE-2016-9386] x86 task switch to VM86 mode mis-handled[XSA-192, CVE-2016-9382] x86 segment base write emulation lacking canonicaladdress checks [XSA-193, CVE-2016-9385] guest 32-bit ELF symbol table loadleaking host data [XSA-194, CVE-2016-9384] x86 64-bit bit test instructionemulation broken [XSA-195, CVE-2016-9383] x86 software interrupt […]
December 6, 2016
LinuxSecurity.com: Libvirt is vulnerable to directory traversal when using Access Control Lists (ACL).
December 6, 2016
LinuxSecurity.com: Multiple vulnerabilities have been found in GD, the worst of which allows remote attackers to execute arbitrary code.
December 6, 2016
LinuxSecurity.com: A vulnerability in LinuxCIFS utils’ “cifscreds” PAM module might allow remote attackers to have an unspecified impact via unknown vectors.
December 6, 2016
Putin moves to step up Russia’s cyberdefenses
December 6, 2016
App developers not ready for iOS transport security requirements
December 6, 2016
Sony Closes Backdoors in IP-Enabled Cameras
December 6, 2016
‘Rich irony’ as Facebook blocks extension to highlight fake news
December 6, 2016
Lock suspect in stolen car to bust him? There’s an app for that…
December 6, 2016
Dailymotion hacked, millions of user accounts exposed
December 6, 2016
Hackers actively stealing Wi-Fi keys from vulnerable routers
December 6, 2016
Rogue admin jailed after taking down former employer’s network
December 6, 2016
Hacking is legal again finally (sometimes)
Go ahead and hack your car, that’s fine now. Go ahead and hack the Department of Defense, that’s okay too under new policies. It wasn’t always this way. The post Hacking is legal again finally (sometimes) appeared first on WeLiveSecurity.
December 6, 2016
4 top disaster recovery packages compared
December 6, 2016
Are you human or a bot? Google’s invisible reCAPTCHA will decide
December 6, 2016
Obama’s cybersecurity plan faces uncertainty with Trump
December 6, 2016
Sony kills off secret backdoor in 80 internet-connected CCTV models
December 6, 2016
The cloud storage security gap — and how to close it
December 6, 2016
Why it’s so hard to prosecute cyber criminals
December 6, 2016
<div>Why it's so hard to prosecute cyber criminals</div>
We live in a world where internet crime is rampant. Cyber criminals steal hundreds of millions of dollars each year with near impunity. For every 1 that gets caught, 10,000 go free — maybe more. For every 1 successfully prosecuted in a court of law, 100 get off scot-free or with a warning. Why is […]
December 6, 2016
Facebook, Microsoft, Twitter and YouTube team to ID terror content
December 6, 2016
Standards body warned SMS 2FA is insecure and nobody listened
December 6, 2016
Printer security is so bad HP Inc will sell you services to fix it
December 6, 2016
Arista CloudVision Portal bug revealed, plus evidence it’s been used
December 6, 2016
Video-sharing Website Dailymotion Hacked; 87 Million Accounts Leaked
December 6, 2016
CloudFlare warns of another massive botnet, er, flaring up
December 5, 2016
Credit Cards can be Hacked in Just 6 Seconds—Reveals New Study
December 5, 2016
Dirty Cow Vulnerability Patched in Android Security Bulletin
December 5, 2016
Google Debuts Continuous Fuzzer for Open Source Software
December 5, 2016
Distributed Guessing Attack Reels in Payment Card Data
December 5, 2016
New Large-Scale DDoS Attacks Follow Schedule
December 5, 2016
How to guess credit card security codes
December 5, 2016
Facebook reportedly looking at curating news (again)
December 5, 2016
Amazon Launches AWS Shield DDoS Protection Service
December 5, 2016
Saudi Arabian Central Bank Systems Targeted with Shamoon Malware
December 5, 2016
Website leaves 43,000 sensitive medical records exposed
December 5, 2016
Yorkshire cyber security biz ECSC Group to debut on AIM exchange
December 5, 2016
EFF Blasts DEA in Ongoing Secret ‘Super Search Engine’ Lawsuit
December 5, 2016
Five new malware programs are discovered every second
December 5, 2016
How to survive the death of Flash
December 5, 2016
Apple set to deploy drones to boost Maps accuracy
December 5, 2016
Take care copy-and-pasting that code from Stack Overflow
December 5, 2016
Android ransomware spreads further, with new methods in its toolbox
ESET lifts the lid on Android ransomware – the picture doesn’t look good. It’s on the increase and extremely sophisticated. The post Android ransomware spreads further, with new methods in its toolbox appeared first on WeLiveSecurity.
December 5, 2016
Child safety: An unexpected radio interview
David Harley, talking about child safety and security in (and yet not in) the South Atlantic. The post Child safety: An unexpected radio interview appeared first on WeLiveSecurity.
December 5, 2016
Guessing valid credit card numbers in six seconds? Priceless
December 5, 2016
IoT camera crew Titathink tells Reg it’ll patch GET bug in a week
December 5, 2016
LinuxSecurity.com: A vulnerability in DavFS2 allows local users to gain root privileges.
December 3, 2016
LinuxSecurity.com: Due to a design flaw, the output of GnuPG’s Random Number Generator (RNG) is predictable.
December 3, 2016
LinuxSecurity.com: Security fix for CVE-2016-7504, CVE-2016-7505, CVE-2016-7506, CVE-2016-9017,CVE-2016-9108, CVE-2016-9109, CVE-2016-9294
December 3, 2016
LinuxSecurity.com: Security fix for CVE-2016-7504, CVE-2016-7505, CVE-2016-7506, CVE-2016-9017,CVE-2016-9108, CVE-2016-9109, CVE-2016-9294
December 3, 2016
LinuxSecurity.com: Update to 1.9.9 (bugfix release for CVE-2016-7146, CVE-2016-7148)
December 3, 2016
LinuxSecurity.com: An update for firefox is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…]
December 3, 2016
LinuxSecurity.com: A security update that fixes Calamares bug CAL-405:https://calamares.io/bugs/browse/CAL-405 When installing with a LUKS-encrypted`/` partition, Calamares was always creating a keyfile to decode `/` and storingit in the initramfs. It did that even with an unencrypted separate `/boot`partition. As a result, the keyfile would be stored in cleartext on the `/boot`partition, and it was possible […]
December 3, 2016
LinuxSecurity.com: Update to 1.9.9 (bugfix release for CVE-2016-7146, CVE-2016-7148)
December 3, 2016
LinuxSecurity.com: A security update that fixes Calamares bug CAL-405:https://calamares.io/bugs/browse/CAL-405 When installing with a LUKS-encrypted`/` partition, Calamares was always creating a keyfile to decode `/` and storingit in the initramfs. It did that even with an unencrypted separate `/boot`partition. As a result, the keyfile would be stored in cleartext on the `/boot`partition, and it was possible […]
December 3, 2016
LinuxSecurity.com: Security fix for CVE-2016-9299
December 3, 2016
LinuxSecurity.com: Security fix for CVE-2016-9299
December 3, 2016
LinuxSecurity.com: Update to 1.9.9 (bugfix release for CVE-2016-7146, CVE-2016-7148)
December 3, 2016