January 27, 2017
That Hearbleed problem may be more pervasive than you think
Securing MySQL DBMS
January 27, 2017
Breach Notification Website LeakedSource Allegedly Raided, Shut Down
January 27, 2017
Smashing Security podcast #005: ‘Upskirt insecurity’
January 27, 2017
218,000 private unencrypted AlphaBay dark web messages exposed
January 27, 2017
Celebgate hacker who stole nude photos gets nine months in jail
January 27, 2017
An introduction to private browsing
Privacy and security fears are driving many people to look into the possibilities of private browsing. We investigate what it is and how you stay anonymous online The post An introduction to private browsing appeared first on WeLiveSecurity
January 27, 2017
Sednit: How this notorious cyberespionage group operates
Take a closer look at the cyberespionage group Sednit, which has targeted over 1000 high-profile individuals and organizations with phishing attacks and zero-day exploits. The post Sednit: How this notorious cyberespionage group operates appeared first on WeLiveSecurity
January 27, 2017
No, disabling your anti-virus software does not make security sense
January 27, 2017
Trump administration is giving us a good lesson on Twitter security
January 27, 2017
Data Privacy Day: know the risks of Amazon Alexa and Google Home
January 27, 2017
Facebook taps FIDO U2F for stronger login security
January 27, 2017
Worrying about data privacy isn’t enough: Here’s how to own your online presence
ESET’s Ondrej Kubovič: “Worrying about privacy isn’t enough” – here’s how to control your data privacy and online presence. The post Worrying about data privacy isn’t enough: Here’s how to own your online presence appeared first on WeLiveSecurity
January 27, 2017
PayPal users targeted in sophisticated new phishing campaign
Recent phishing scams targeted both Gmail and Yahoo, and now attackers have their sights set on PayPal with some very convincing bait. The post PayPal users targeted in sophisticated new phishing campaign appeared first on WeLiveSecurity
January 27, 2017
LeakedSource website goes dark amid claims of police raid
January 27, 2017
Bookish hacker finds holes in Amazon, Apple, Google epub services
January 27, 2017
Uber pays hacker US$9,000 for partner firm’s bug
January 27, 2017
Americans fear their data isn’t safe, yet do little to defend it
January 27, 2017
The security of President Trump’s Android smartphone
January 27, 2017
Malicious “Charger Ransomware” App Discovered on Google Play Store
January 26, 2017
security update
January 26, 2017
More mobe malware creeps into Google Play – this time, ransomware
January 26, 2017
Your Facebook account is now more secure than your bank’s (probably)
January 26, 2017
Facebook Touts ‘Safer’ Security Key Login
January 26, 2017
Machine behaviors that threaten enterprise security
January 26, 2017
Bill Calls for Study of Cybersecurity Standards for Cars
January 26, 2017
LinuxSecurity.com: An update for ansible is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact [More…]
January 26, 2017
LinuxSecurity.com: Security Report Summary
January 26, 2017
LinuxSecurity.com: – new upstream (51.0)
January 26, 2017
LinuxSecurity.com: * CVE-2016-6836: vmxnet: Information leakage in vmxnet3_complete_packet (bz#1366370) * CVE-2016-7909: pcnet: Infinite loop in pcnet_rdra_addr (bz #1381196)* CVE-2016-7994: virtio-gpu: memory leak in resource_create_2d (bz #1382667) *CVE-2016-8577: 9pfs: host memory leakage in v9fs_read (bz #1383286) *CVE-2016-8578: 9pfs: potential NULL dereferencein 9pfs routines (bz #1383292) *CVE-2016-8668: OOB buffer access in rocker switch emulation (bz #1384898) *CVE-2016-8669: […]
January 26, 2017
LinuxSecurity.com: Update to ansible 2.2.1. Fixes several CVEs as well as a number of otherbugfixes. See: https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.mdfor full changes.
January 26, 2017
LinuxSecurity.com: Update to ansible 2.2.1. Fixes several CVEs as well as a number of otherbugfixes. See: https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.mdfor full changes.
January 26, 2017
Clock’s ticking for MD5-signed JAR files, says Oracle
January 26, 2017
Firefox flags Web of Trust add-on as suspicious, blocks by default
January 26, 2017
Voyeur adult website hacked; 180k members data leaked
January 26, 2017
Uber.com Backup Bug Nets Researcher $9K
January 26, 2017
How one man could have deleted any public Facebook video
January 26, 2017
Google to Block .js Attachments in Gmail
January 26, 2017
High-Severity Chrome Vulnerabilities Earn Researcher $32K in Rewards
January 26, 2017
Desperately seeking cybersecurity skills
Cybercrime is victimizing US companies and consumers, but a gap in cybersecurity skills presents a problem for the federal government. ESET’s Stephen Cobb investigates. The post Desperately seeking cybersecurity skills appeared first on WeLiveSecurity
January 26, 2017
In a bad mood? You might not be allowed to log on
January 26, 2017
10 questions to ask IDaaS vendors before you buy
January 26, 2017
Half of Ransomware Victims Pay Criminals’ Demands to Recover Data
January 26, 2017
Google pressure on devs to fix security issues bears fruit
January 26, 2017
Self-protection is key to Linux kernel security
January 26, 2017
LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact [More…]
January 26, 2017
‘Celebgate’ nudes thief gets just nine months of porridge
January 26, 2017
Cisco WebEx code execution hole – what you need to know
January 26, 2017
Default Credentials Found in Schneider Electric Wonderware Historian
January 25, 2017
Firefox 51 Begins Warning Users of Insecure HTTP Connections
January 25, 2017
Linux nasty kicks weak, hacked gadgets when they’re already down
January 25, 2017
Penguins force-fed root: Cruel security flaw found in systemd v228
January 25, 2017
Kaspersky cybercrime investigator cuffed in Russian treason probe
January 25, 2017
To address the need for application security in the digital transformation era, F5 is releasing a new host of products and services. “The digital transformation has really changed security as a whole,” says Preston Hogue, Director of Security Marketing and Competitive Intelligence. What he means is that everything—EVERYTHING—is moving to the cloud. Think about the […]
January 25, 2017
Lloyds Banking Group hit with distributed denial of service attack
Lloyds Banking Group fell victim to an attempted cyberattack earlier this month, which saw cybercriminals attempt to crash the online banking service over a two day period. The post Lloyds Banking Group hit with distributed denial of service attack appeared first on WeLiveSecurity
January 25, 2017
China clamps down tighter on web use with new VPN ban
January 25, 2017
Cisco scrambling to fix a remote code execution problem in WebEx
January 25, 2017
RoT: Ransomware of Things
Could the Internet of Things spark the Ransomware of Things? ESET’s Stephen Cobb examines how ransomware and jackware are evolving. The post RoT: Ransomware of Things appeared first on WeLiveSecurity
January 25, 2017
Twitter’s Phantom Menace: a Star Wars botnet
January 25, 2017
Charger Mobile Ransomware Removed from Google Play
January 25, 2017
Yahoo faces SEC probe into its two record-breaking data breaches
The US Securities and Exchange Commission is looking into whether Yahoo could have been quicker to tell investors about two record-breaking data breaches. The post Yahoo faces SEC probe into its two record-breaking data breaches appeared first on WeLiveSecurity
January 25, 2017
Identify and escape: A two-part ransomware plan
January 25, 2017
InfoWorld’s 2017 Technology of the Year Award winners
January 25, 2017
Boffins break Samsung Galaxies with one SMS carrying WAP crap
January 25, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Oracle’s JRE and JDK software suites, the worst of which may allow execution of arbitrary code
January 25, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in X.Org X Server, the worst of which may allow authenticated attackers to read from or send information to arbitrary X11 clients.
January 25, 2017
Firefox bares teeth, attacks sites that collect personal data
January 25, 2017
Western Digital fixes remote execution bug in My Cloud Mirror
January 25, 2017
Human bot hybrid finds LinkedIn email, phone number-filching holes
January 25, 2017
Internet gang claims it caused Lloyds Bank outage via a DDoS attack
January 25, 2017
SpyNote RAT Now Disguised As Netflix App
January 24, 2017
LinuxSecurity.com: Security fix for console video game music emu vulnerability in the fullyoptional audacious-plugins-exotic subpackage: CVE-2016-9957, CVE-2016-9958,CVE-2016-9959, CVE-2016-9960, CVE-2016-9961
January 24, 2017