Menu

Latest articles

Oh, for F…acebook: Critics bash WhatsApp encryption ‘backdoor’
WhatsApp bug: Messages ‘can be intercepted and read’

A WhatsApp ‘security issue’ has been identified, meaning third parties may be able to both intercept and read encrypted messages, according to new research. The post WhatsApp bug: Messages ‘can be intercepted and read’ appeared first on WeLiveSecurity

Threatpost News Wrap, January 13, 2017
Don’t follow the example of Donald Trump’s choice for cybersecurity czar
Podcast on ransomware’s threat to the healthcare industry
Forensic analysis techniques for digital imaging

ESET’s Miguel Ángel Mendoza looks at a range of forensic analysis techniques that are used to examine digital images. The post Forensic analysis techniques for digital imaging appeared first on WeLiveSecurity

Suspected NSA tool hackers dump more cyberweapons
GoDaddy revokes nearly 9,000 SSL certificates issued without proper validation
Trump’s CIA nominee grilled on his advocacy of surveillance database
Microsoft sued over forcing employees to watch child porn for online safety
UK launches major cybersecurity inquiry

The UK parliament has launched an inquiry into its cybersecurity defense measures, describing cyberthreats as a “major security challenge”. The post UK launches major cybersecurity inquiry appeared first on WeLiveSecurity

5 data breach predictions for 2017
PC security stepped up with new ‘Windows Goodbye’ screen lock

LinuxSecurity.com: Multiple vulnerabilities have been found in Mozilla SeaMonkey, the worst of which could lead to the remote execution of arbitrary code.

EU policy makers consider FRAND licensing of machine-generated data
WordPress plugs eight holes in latest release

LinuxSecurity.com: Security Report Summary

MongoDB hackers now sacking ElasticSearch

LinuxSecurity.com: An update for java-1.6.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: Update to 0.24.6

LinuxSecurity.com: New upstream release

Trump’s cyber-guru Giuliani runs ancient ‘easily hackable website’
ISC squishes BIND packet-of-death bugs

security update

Shadow Brokers quit operation; giving away free Windows hacking tools
Donald Trump will take cybersecurity advice from, um, Rudy Giuliani
Smashing Security #003: ‘Alexa! Get me an axe!’

LinuxSecurity.com: Fix [CVE-2016-9962] Insecure opening of file-descriptor allows privilege FixBZ#1412148 – containerd: container did not start before the specified timeout—- use container-selinux >= 2:2.0-2

Israeli Phone Hacking Firm Cellebrite Hacked; 900 GB data stolen
Security Sessions: Will security budgets go up in 2017?
Thanks, Obama: NSA to stream raw intelligence into FBI, DEA and pals

security update

security update

Shadow Brokers spew Windows hack tools after exploit auction flop

Type: Vulnerability. Microsoft Windows LSASS is prone to a denial-of-service vulnerability; fixes are available.

iPhone hacking biz Cellebrite hacked
Marie Moe on Medical Device Security
Pacemakers patched against potentially lifethreatening hacks
News in brief: new address system; fingerprint theft fears; facial recognition and chips, please
ShadowBrokers Bid Farewell, Close Doors
Hamas Compromised Dozens of IDF Soldiers’ Phones Using Seductive Female Images

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: Security Report Summary

WordPress 4.7.1 Fixes CSRF, XSS, PHPMailer Vulnerabilities

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Worm.

Security hardened, pah! Expert doubts Kaymera’s mighty Google’s Pixel
Insurer hit with fine after unencrypted NAS stolen
Beware new WhatsApp scam offering “free internet without Wi-Fi”

The number of scams spreading through the messaging app WhatsApp keeps on increasing, reports Lucas Paus. And there’s already a new one in 2017. The post Beware new WhatsApp scam offering “free internet without Wi-Fi” appeared first on WeLiveSecurity

Brother-and-sister duo arrested over hacking campaign targeting Italy’s bigwigs
43% off Microsoft Wireless Desktop 900 Keyboard and Mouse Bundle – Deal Alert
Russia ‘also hacked RNC’ – but not Trump’s campaign
Vawtrak malware spread via toxic Word documents is still a thing apparently
Flashing a peace sign in selfies could lead to identity theft, scientists warn
Honeytraps used to infect Israeli soldiers’ smartphones with spyware
Users reporting Electronic Arts (EA) servers are doing
Windows 10’s privacy dashboard aims to tackle data concerns
Fast Flux networks: What are they and how do they work?

The term Fast Flux can refer to networks used by several botnets to hide the domains used to download malware or host phishing websites, says Josep Albors. The post Fast Flux networks: What are they and how do they work? appeared first on WeLiveSecurity

Hacker Steals 900 GB of Cellebrite Data
Exitmap – Tor Exit Relay Scanner
Peace-sign selfie fools menaced by fingerprint-harvesting tech
Crims shut off Ukraine power in wide-ranging anniversary hacks

LinuxSecurity.com: New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. [More Info…]

LinuxSecurity.com: New irssi packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…]

LinuxSecurity.com: New gnutls packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…]

Docker swings door shut on privilege escalation bug

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: Security fix for CVE-2016-8605

Donald Trump finally believes Russia hacked the DNC
Google Cloud unlocks key achievement

LinuxSecurity.com: update to 3.2.10.RELEASE, fix CVE-2016-9879

LinuxSecurity.com: fix CVE-2016-8741 (rhbz#1409836,1409835)

LinuxSecurity.com: Update to the latest upstream release 1.3.2, also with some security fixes (seebug #1193445 from the native flac package).

LinuxSecurity.com: Security fix for CVE-2016-8605

security update

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Professionally designed ransomware Spora might be the next big thing
Buggy Domain Validation Forces GoDaddy to Revoke Certs
Hacker siblings arrested for targeting Italian elite – infecting 20k emails
Cloudflare Shares National Security Letter It Received in 2013
ShadowBrokers Selling Windows Exploits, Attack Tools
News in brief: Telegram crack “fake”; superuser passwords leaked; election systems “critical infrastructure”
How Blockchain Can Revolutionize Personal Data Storage?
Second Try at Windows LSASS Patch Addresses Vulnerability
Spammers Revive Hancitor Downloader Campaigns
Trump: It was probably Russia that hacked the DNC, Clinton campaign
Beware phishing scams in Amazon listings
Notorious Shadow Brokers’ Group Now Selling Windows Hacking Tools
Digital video recorder installers master password list ‘leaked’ – claims
Airline passengers’ bookings and info leaked by boarding gate displays
Thousands of MongoDB databases compromised and held to ransom
GoDaddy revokes digital certificates improperly validated due to bug
Debugging a kernel in QEMU/libvirt
Hello Kitty, Goodbye database containing 3.3 million users credentials
Your data is being held for ransom. Now what?
GCHQ feeds first crop of infosec startups to Cyber Accelerator
LA College Hit By Ransomware: Pays $28,000 to Unlock Files
US Navy runs into snags with aircraft carrier’s electric plane-slingshot
CES: IoT security comes of age

For years, IoT security seemed like solving a problem that didn’t exist. Not anymore says ESET’s Cameron Camp, who was at this year’s CES. The post CES: IoT security comes of age appeared first on WeLiveSecurity