Menu

Latest articles

LinuxSecurity.com: Multiple vulnerabilities have been found in QEMU, the worst of which could lead to the execution of arbitrary code on the host system.

LinuxSecurity.com: Multiple vulnerabilities have been found in Nagios, the worst of which could lead to privilege escalation.

LinuxSecurity.com: Multiple vulnerabilities have been found in libass, the worst of which have unknown impacts.

LinuxSecurity.com: Multiple vulnerabilities have been found in LibVNCServer/LibVNCClient, the worst of which allows remote attackers to execute arbitrary code when connecting to a malicious server.

LinuxSecurity.com: Multiple vulnerabilities have been found in Dropbear, the worst of which allows remote attackers to execute arbitrary code.

Gun Retailer Airsoft GI’s Forum Hacked; 65,000 User Accounts Leaked

LinuxSecurity.com: A vulnerability in Opus could cause memory corruption.

LinuxSecurity.com: Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.

LinuxSecurity.com: A buffer overflow in TigerVNC might allow remote attackers to execute arbitrary code.

Hacker defaces Donald Trump fundraising site via subdomain takeover attack

LinuxSecurity.com: Security fix for CVE-2017-3135

LinuxSecurity.com: Multiple vulnerabilities have been found in MuPDF, the worst of which allows remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in the GNU C Library, the worst of which allows context-dependent attackers to execute arbitrary code.

LinuxSecurity.com: A vulnerability in NTFS-3G allows local users to gain root privileges.

LinuxSecurity.com: Security fix for CVE-2017-5595

LinuxSecurity.com: Security fix for CVE-2017-5595

LinuxSecurity.com: Update to 0.6.1

News in brief: robot tax mooted; Kim Dotcom faces extradition; Apple buys biometrics start-up
The beer engines that put computer security at risk
It’s too easy to steal a second-hand connected car

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low.

Is your child a hacker? Liverpudlian parents get warning signs checklist
What makes for truly independent security product testing?
Where does the buck stop when there’s a security breach?
The quantified employee: new ways to be watched at work
Beeps, roots and leaves: Car-controlling Android apps create theft risk
Support scams now reign in Spain

If you thought that the problem of tech support scams was disappearing, think again, says Josep Albors and David Harley. The post Support scams now reign in Spain appeared first on WeLiveSecurity

Facebook’s new jobs service sparks privacy fears
Donald Trump Website Hacked by Iraqi Hacker
Monday review – the hot 32 stories of the week
Nowhere to hide: 9 new hacks coming to get you
Trends in Android ransomware

2016 saw interesting developments within the Android ransomware scene. Ransomware emerged as one of the most pressing cybersecurity issues on the mobile platform. The post Trends in Android ransomware appeared first on WeLiveSecurity

LinuxSecurity.com: An update for openssl is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…]

Connected car in the second-hand lot? Don’t buy it if you’re not hack-savvy
Google goes public about unpatched Windows vulnerability
German parents urged to destroy data-collecting toy doll
Google bellows bug news after Microsoft sails past fix deadline

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Goodbye Spy Toy: Germany Bans My Friend Cayla Doll
Charging Smartphone in Public Ports Leads to Data Hack — So Let’s Stop

LinuxSecurity.com: Backport upstream fix to force limit and offset to be numeric

LinuxSecurity.com: Backport upstream fix to force limit and offset to be numeric

LinuxSecurity.com: USN-3199-1 introduced a regression in the Python Cryptography Toolkit whichcaused programs which relied on the original behavior to fail.

LinuxSecurity.com: Multiple vulnerabilities have been found in ImageMagick, the worst of which allows remote attackers to execute arbitrary code.

LinuxSecurity.com: Programs using the Python Cryptography Toolkit could be made to crash or runprograms if they receive specially crafted network traffic or other input.

LinuxSecurity.com: Security Report Summary

Apple May Introduce Facial Recognition Instead of Touch ID in iPhone 8
Florida Man jailed for 4 years after raking in a million bucks from spam
Hackers Selling Undetectable Proton Malware for macOS in 40 BTC
RSA – day 3: Security for those who don’t know what that means

Here at RSA, an increasing amount of security purchases are made by those who got the task dumped in their laps, but who have little or no formal or practical training. The post RSA – day 3: Security for those who don’t know what that means appeared first on WeLiveSecurity

Paper factory fired its sysadmin. He returned via VPN and caused $1m in damage. Now jailed
RSA demo: TruStar anonymizes incident data to improve information exchange
Why cyber-robotics is key to cybersecurity’s future
Probe President Trump and his crappy Samsung Twitter-o-phone, demand angry congressfolk

security update

Smash up your kid’s Bluetooth-connected Cayla ‘surveillance’ doll, Germany urges parents
IDF targeted by sophisticated cyber espionage through Android devices
Gmail now blocks all JavaScript email attachments
News in brief: Oculus demos closed; smart doll ‘should be destroyed’; Europe warned over elections
Squirrels, Not Hackers, Pose Biggest Threat to Electric Grid

Risk Level: Very Low. Type: Trojan.

Couple can’t store data from camera pointed at next door’s garden
US account holders more likely to switch banks following fraud
Your computer is a cookie that you can’t delete
SMTP Strict Transport Security Coming Soon to Gmail, Other Webmail Providers
Cris Thomas on Cyberwar Rhetoric
To Spy or Not to Spy; Congress to Decide

Outerwear Online Retailer Hit with Cyber Attack Columbia Sportswear announced that they were in the midst of investigating a cyberattack on one of its subsidiary retail sites, prAna, a brand that was acquired by Columbia in 2014. While officials still haven’t confirmed the type of attack, they have stated that it shouldn’t affect any of […]

8 things you should know about spyware

WeLiveSecurity takes a look at what you need to know about spyware – the malware secretly prying on your online activities. The post 8 things you should know about spyware appeared first on WeLiveSecurity

Mystery deepens over Android spyware targeting Israeli soldiers
Tips for negotiating with cyber extortionists
Experts at RSA give their best cybersecurity advice
New Royal Navy Wildcat helicopters can’t transmit vital data
Xen Project asks to limit security vulnerability advisories
How Google reinvented security and eliminated the need for firewalls
Signal app gets video calling overhaul and a warning for iOS users
RSA 2017 hit parade: All the cool new security tools
RSA 2017 – day 2: Attacking yourself

Want to find holes in your security perimeter? What better way than to attempt to attack yourself, and here at RSA there are plenty of tools to help. The post RSA 2017 – day 2: Attacking yourself appeared first on WeLiveSecurity

Graham Cluley named most entertaining security blog

Successful companies stand on the shoulders of great customer service. At Webroot, we aim to consistently be the best, and to do so, we rely heavily on our highly skilled, globally-based technical support team to delight our customers at every turn. At Webroot, we utilize a follow-the-sun approach with customer service support staff in Australia, […]

US visitors must hand over Twitter, Facebook handles by law – newbie Rep starts ball rolling
Don’t panic over cyber-terrorism: Daesh-bags still at script kiddie level

security update

Corpse of US anti-spying law unearthed, reanimated, pushed blinking into the sunlight
Bangkok Police Arrests Ukrainian Hacker Planning ATM Malware Attack
Divide Between Work, Personal Data on Android Breached

LinuxSecurity.com: Applications using libgc could be made to crash or run programs asyour login.

News in brief: cookie breach alert for Yahoo users; text spammer fined; Churchill’s search for alien life
Smashing Security podcast #008: ‘I’ll give you my Android when you pry it from my cold, dead paws’
Microsoft calls for ‘Digital Geneva Convention’ to rein in cyberwarfare
Magento stores targeted by self-healing malware that steals credit card details
Haven’t deleted your Yahoo account yet? Reminder: Hackers forged login cookies
Another Yahoo Hack: Company Issues Security Notice to Users
Researchers develop battery that could run for more than a decade
Retailers push back against plans to boost security of online shopping
Security fixes delayed as Microsoft postpones Patch Tuesday
Fallen for a fake Twitter account? Here’s how to spot them