Menu

Latest articles

Valentine’s day: what’s your secret technology crush?
The Register’s guide to protecting your data when visiting the US
SaaS-y security outfit CrowdStrike falls out of love with test lab
Senators raise concerns over Donald Trump’s smartphone security
Roses are red, you’re over the moon, ‘cos you work in infosec, and you’re retiring soon
Explain! yourself! US! senators! yell! at! Yahoo!
Infosec pros aren’t too bothered by Trump – it’s his cabinet sidekicks you need to worry about
WTF is up with the W3C, DRM and security bods threatened – we explain
IT bosses: Get budgets for better security by rating threats on a scale of zero to Yahoo!
Smashing Security podcast: Using public Wi-Fi
Teacher Being Investigated for Exposing 7th Graders to Porn
Lazarus mob possibly behind malware attacks against Polish banks
Mozilla says Firefox Klar does not Collect User Data from iOS Devices
News in brief: Cook hits out at ‘fake news’; Trump under fire; flying cars on the runway

LinuxSecurity.com: Update to 3.20.7, fixing a serious password extraction sweep attack on thepassword manager [(#752738)](https://bugzilla.gnome.org/show_bug.cgi?id=752738)

Risk Level: Very Low. Type: Worm.

Risk Level: Very Low. Type: Trojan.

Updated Firmware Due for Serious TP-Link Router Vulnerabilities
Fancy Bear: who’s behind the group implicated in so many political hacks?
Bloke, 27, arrested, tech gear seized by cops over UK Sports Direct hack
University’s IoT devices went fishing for information – how did it happen?
Open Databases a Juicy Extortion Target
Brave VMs to destroy themselves, any malware they find on HP’s new laptop
Russia and China bombard Blighty with 188 cyberattacks in 3 months
Google to cough up $20m after Chrome rips off four malware patents
7 Best Encrypted Email Services That You Can Use
Threatpost News Wrap, February 13, 2017
‘Paranoid’ Republicans flock to app that wipes conversations
Next-gen security software: Myths and marketing

There is a view in the media of the current security market that assumes a split between first-generation and technologies using next-generation signature-less detection. The post Next-gen security software: Myths and marketing appeared first on WeLiveSecurity

Line between cyber crooks and cyber spies getting more blurry
How San Diego fights off 500,000 cyberattacks a day
Worldwide bank attack blitz linked to Sony Pictures hacking crew
Monday review – the hot 28 stories of the week
Which Windows 10 should your business install? This one
RSA Conference preview: The agenda can’t keep up
Despite the spiel, we’re still some decades from true anti-malware AI

LinuxSecurity.com: An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…]

That guy using a Surface you keep seeing around town could be a spook

Risk Level: Very Low. Type: Trojan.

Ex-FBI man spills on why hackers are winning the security game

LinuxSecurity.com: New openssl packages are available for Slackware 14.2 and -current to fix security issues. [More Info…]

LinuxSecurity.com: New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. [More Info…]

LinuxSecurity.com: New tcpdump packages are available for Slackware 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. NOTE: These updates also require the updated libpcap package. [More Info…]

LinuxSecurity.com: New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…]

LinuxSecurity.com: Multiple vulnerabilities have been found in Graphviz and the extent of these vulnerabilities are unspecified.

LinuxSecurity.com: A vulnerability in Lsyncd allows execution of arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in GnuTLS, the worst of which may allow execution of arbitrary code.

New Ticketbleed Vulnerability Bleeds Like Old Heartbleed.. Literally
Gmail’s Spam Filter Not Impenetrable For Hackers
Bugat-wielding hacker: Yes, I tried to nick $3.2m from US schools, oil biz
Lovely. Now someone’s ported IoT-menacing Mirai to Windows boxes
25% off Kuna Smart Home Security Outdoor Light & Camera – Deal Alert

security update

Run this in April: UPDATE Azure SET SQLthreat_detection = ‘generally available’
Tor and Its 10 Best Alternatives
IDG Contributor Network: Why executive orders aren’t enough to fix cybersecurity
News in brief: Big Brother in India; hacking warning to journalists; WordPress sites hit
Microsoft unveils a bonanza of security capabilities
Deleted browsing history on safari may not actually be deleted

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: Minor upstream release fixing CVE-2016-8610, CVE-2017-3731, CVE-2017-3732.

LinuxSecurity.com: Important change: * most of the utilities were move to the new sub-package”server-utils” Other enhancements: (see changelog) * CVE fixes, SPECfilefixes, patches revision, tests blacklist revisions * Preparation and testing ofthe Cracklib plugin to be added

LinuxSecurity.com: Add upstream patches fixing CVE-2016-9577 and CVE-2016-9578

LinuxSecurity.com: gnome-boxes 3.20.4 release, fixing a possible security issue with storing theexpress installation password in clear text. – Store the user password in thekeyring during an express installation. – Fix typo in debug string. – Fix printfformat strings.

LinuxSecurity.com: Version 1.1.26 (released 24-Jan-2017) * security fix: escape nav_data name toavoid XSS attack Version 1.1.25 (released 15-Sep-2016) * fix _rev2optrevassertion on long input

Recent WordPress vulnerability used to deface 1.5 million pages
How would you feel about your kids’ teachers wearing a body camera?
No replacement yet named for White House chief infosec officer
Protecting Small Business from Increasing Cyber Attacks
1.5M Unpatched WordPress Sites Hacked Following Vulnerability Disclosure
How to better protect your WhatsApp account with two-step verification (2SV)
NSA contractor charged with stealing thousands of top-secret documents
Apple iCloud didn’t wipe ‘deleted’ browser histories for over a year
Scammers slip fake Amazon ad under Google’s nose

Macros Turn Focus Towards MacOS Researchers have discovered a trend of malicious Microsoft Word documents for MacOS that behave similar to Windows macro infections. The culprits download and execute a malicious payload to a user’s computer. While not particularly sophisticated, the macro-based infections focus on exploiting the users of the computer, rather than a software […]

Crossing border security? Here’s how you protect your data
Apple’s iCloud saved deleted browser records, security company finds
Microsoft lawsuit against indefinite gag orders can proceed
RSA Conference 2017: your chance to get to grips with ransomware
Arby’s Gets Roasted in Breach of 300K Payment Cards
Google set to purge Play store of apps lacking a privacy policy
Caution! The cloud’s backdoor is your datacenter

LinuxSecurity.com: Update to 2.1

LinuxSecurity.com: January 2017 security fixes – http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixJAVA

LinuxSecurity.com: Security fix for CVE-2017-5884, CVE-2017-5885

LinuxSecurity.com: * various security relevant flaws

After Linux; Mirai Botnet is Available for Windows

LinuxSecurity.com: January 2017 security fixes – http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixJAVA

Scottish court issues damages to couple over distress caused by neighbour’s use of CCTV
Explained: Apple iCloud kept ‘deleted’ browser histories for over a year
Russian Authorities Arrest Nine for Stealing $17 Million from Banks
Trump cybersecurity order morphs into 2,200-plus-word extravaganza

security update

security update

Clusters f**ked: Insecure Hadoop file systems wiped by miscreants

LinuxSecurity.com: Several security issues were fixed in the kernel.

Macs don’t get viruses? Hahaha, ha… seriously though, that Word doc could be malware
High Severity BIND Vulnerability Can Lead to A Crash

LinuxSecurity.com: Security Report Summary

InterContinental Hotels Group confirms suspected data breach

The InterContinental Hotels Group has revealed that 12 of its hotels suffered a data breach between August and December last year. The post InterContinental Hotels Group confirms suspected data breach appeared first on WeLiveSecurity