Menu

Latest articles

LinuxSecurity.com: Security fix for CVE-2016-9131, CVE-2016-9147, CVE-2016-9444

LinuxSecurity.com: This update avoids a malicious repository writing to files outside the localstorage root.

LinuxSecurity.com: An update for bind is now available for Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: An update for bind97 is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…]

Terrorists are winning the digital arms race
Router Vulnerabilities Disclosed in July Remain Unpatched
Italian pair arrested over alleged hack of cardinals and masons
Credential-stuffers enjoy up to 2% attack success rate – report
Mega UK hospitals trust Barts says IT borkage was due to trojan – not ransomware
SHA-1 End Times Have Arrived
Advice for Trump: think about your security infrastructure
Why WhatsApp’s ‘Backdoor’ Isn’t a Backdoor
WhatApp scams spread widely thanks to trust between friends
It makes good security sense to change Alexa’s name – here’s how
BBC launches probe into leak of Russian-dubbed Sherlock finale
Andrew Macpherson on Intelligence Gathering with Maltego
Facebook took two weeks to remove video of 12-year-old girl that livestreamed her suicide
Ransomware: Should you pay up?

ESET’s Cameron Camp provides valuable insight into what you should do if you’re a victim of ransomware. The post Ransomware: Should you pay up? appeared first on WeLiveSecurity

The war for cybersecurity talent hits the Hill
Ransomware brutes smacked 1 in 3 NHS trusts last year
Google ventures into public key encryption
Got microservices? You'd better secure them

One of the toughest parts of being a computer security pro is trying to figure out what to hang your career on every two to five years. Which new buzzwords will stick to become a new paradigms, and which will disappear into the ether? Keeping up with the latest and greatest enterprise tech is part […]

Is your IP security camera making you less secure?
Advice to Donald Trump: think before you tweet
Devs reverse-engineer 16,000 Android apps, find secrets and keys to AWS accounts
Dodgy Dutch developer built backdoors into thousands of sites

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: Multiple vulnerabilities have been found in file, the worst of which could allow remote attackers to execute arbitrary code.

LinuxSecurity.com: A buffer overflow in MiniUPnPc might allow remote attackers to cause a Denial of Service condition.

911 app is a joke, says security researcher Randy Westergren
Dovecot mailserver graded ‘nearly impenetrable’
Top tips (not including anti-virus) for protecting your Android from malware

Risk Level: Very Low. Type: Trojan.

LinuxSecurity.com: A buffer overflow in xdelta might allow remote attackers to execute arbitrary code.

LinuxSecurity.com: A buffer overflow in VLC might allow remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in Pidgin, the worst of which could lead to execution of arbitrary code.

Researchers Expose Fake Android Apps Stealing Instagram Passwords

Type: Vulnerability. Microsoft Identity Model Extensions is prone to a privilege-escalation vulnerability; fixes are available.

News in brief: Snowden supporters petition Obama; iOS Onion browser now free; bank bans WhatsApp
I love podcasts so much, I took a deep breath and made one…
Ukraine power outages ‘the work of cyberattackers’, warn experts
White House Approves New Rules for Sharing of Raw Intelligence Data
Spora ransomware goes freemium with four different payment options
Botnet of things: Samsung SmartCams vulnerable to hackers
Invest in encryption and get it right

The heavy ICO fine against Royal & Sun Alliance Insurance PLC has highlighted a shortcoming with encryption. The post Invest in encryption and get it right appeared first on WeLiveSecurity

WhatsApp ‘backdoor’ turns out to be known design feature
Facebook’s new public Wi-Fi locator is raising privacy concerns
Trump picks hackable Rudy Giuliani as cybersecurity advisor
Free IoT Vulnerability Scanner Hunts Enterprise Threats
The CSO guide to top security conferences
IHOP’s Twitter account hacked; retweets a tweet against Hillary clinton
Wandera has uncovered severe mobile data exposures that affect a high proportion of enterprises. Try it now for free.
Obama administration signs off on wider data-sharing for NSA
French spies warn politicians of hack risk as election draws near
Google Cloud Platform finally offers key management service
Windows 10 Anniversary Update crushed exploits without need of patches
Google reveals its servers all contain custom security silicon
Brilliant phishing attack probes sent mail, sends fake attachments
Just give up: 123456 is still the world’s most popular password

Risk Level: Very Low. Type: Trojan.

Netflix Users Targeted with yet another sophisticated Phishing Scam
Meet Spora, a ransomware that infects users in good faith – Literally

security update

security update

security update

Student Arrested for Selling Keylogger that Infected thousands of devices
WhatsApp vulnerability could allow Facebook and others to read messages
Facebook users hit with “You are in this video?” malware scam
Just in Time for Trump, the NSA Loosens Its Privacy Rules
First came mass MongoDB ransacking: Now copycat ransoms hit Elasticsearch
Guccifer 2.0, alleged Russian cyberspy, returns to deride U.S.
Suspected NSA tool hackers dump more cyberweapons in farewell
How to set up your Android phone for ultimate privacy
Promising compsci student sold key-logger, infects 16,000 machines, pleads guilty, faces jail
US Marines seek more than a few good men (3,000 men and women, actually) for cyber-war

security update

Playpen child sex abuse archive admin gets 20 years in the Big House

security update

Researchers Warn Against “free internet without Wi-Fi” WhatsApp Scam
Adobe’s Latest Security Patch Installs Chrome Extension to Collect Data
WhatsApp Says ‘Backdoor’ Claim Bogus
Adobe Acrobat Reader DC security update installs Chrome spyware
News in brief: new browser launched; social network closes down; cyberattack on health provider
Google’s Key Transparency Simplifies Public Key Lookups
UK’s largest hospital trust battles Friday 13th malware outbreak

LinuxSecurity.com: A vulnerability in runC could lead to privilege escalation.

LinuxSecurity.com: Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in execution of arbitrary code or privilege escalation.

LinuxSecurity.com: Security Report Summary

Tor users at risk of being unmasked by ultrasound tracking
Google floats prototype Key Transparency in bid to tackle secure swap woes
Cautious welcome to Facebook’s moves to fight fake news
Pirates, pirates, whatchu gonna do? Advertisers cop a visit from PIPCU
Windows 10 anniversary update: Security and privacy, hope and change?

With analysts predicting a big shift to Windows 10 in the enterprise in 2017, a new ESET white paper looks at security and privacy changes in Windows 10 Anniversary Update, the build that Microsoft expects its business customers to run on the majority of their desktop computers. The post Windows 10 anniversary update: Security and […]

After MongoDB, ransomware groups hit exposed Elasticsearch clusters
How far can we go – and should we go – with robots?
Oh, for F…acebook: Critics bash WhatsApp encryption ‘backdoor’
WhatsApp bug: Messages ‘can be intercepted and read’

A WhatsApp ‘security issue’ has been identified, meaning third parties may be able to both intercept and read encrypted messages, according to new research. The post WhatsApp bug: Messages ‘can be intercepted and read’ appeared first on WeLiveSecurity

Threatpost News Wrap, January 13, 2017
Don’t follow the example of Donald Trump’s choice for cybersecurity czar
Podcast on ransomware’s threat to the healthcare industry