January 11, 2017
How White Hat hackers do bad things for good reasons
Pay the ransom? You won’t get your data back
January 11, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in phpMyAdmin, the worst of which could lead to arbitrary code execution.
January 11, 2017
LinuxSecurity.com: Flex might generate code with a buffer overflow making applications using such scanners vulnerable to the execution of arbitrary code.
January 11, 2017
LinuxSecurity.com: A vulnerability has been found in Vim and gVim concerning how certain modeline options are treated.
January 11, 2017
LinuxSecurity.com: A vulnerability in vzctl might allow attackers to gain control over ploop containers.
January 11, 2017
LinuxSecurity.com: A heap-based buffer overflow in c-ares might allow remote attackers to cause a Denial of Service condition.
January 11, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in 7-Zip, the worst of which may allow execution of arbitrary code.
January 11, 2017
LinuxSecurity.com: A vulnerability in BIND might allow remote attackers to cause a Denial of Service condition.
January 11, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in phpBB, the worst of which may allow remote attackers to inject arbitrary web script or HTML.
January 11, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in PgBouncer, the worst of which may allow an attacker to bypass authentication.
January 11, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Botan, the worst of which might allow remote attackers to obtain ECDSA secret keys.
January 11, 2017
New Windows 10 privacy controls: Just a little snooping – or the max
January 11, 2017
LinuxSecurity.com: Gentoo’s NGINX ebuilds are vulnerable to privilege escalation due to the way log files are handled.
January 11, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Expat, the worst of which may allow execution of arbitrary code.
January 11, 2017
Sundown exploit kit weaves Edge hack hole
January 11, 2017
Ansible patches ‘own the farm’ vulnerability
January 11, 2017
EMC slings patch at remote hack nonce-nse
January 11, 2017
Juniper warns: Borked upgrade opens root on firewalls
January 11, 2017
Risk Level: Very Low. Type: Trojan.
January 11, 2017
US Intel: Russia hacked Republican groups during election
January 10, 2017
Adobe patches critical flaws in Flash Player, Reader, and Acrobat
January 10, 2017
Netflix users targeted by credit card phishing scheme
January 10, 2017
Microsoft Issues Record Low Number of Patch Tuesday Bulletins
January 10, 2017
It’s now 2017, and your Windows PC can still be pwned by a Word file
January 10, 2017
Amazon Echo and the Alexa dollhouses: Security tips and takeaways
Tips on securing the Alexa service on Amazon Echo devices, notably voice purchasing, a topic brought into focus by the recent “San Diego dollhouse TV story”. The post Amazon Echo and the Alexa dollhouses: Security tips and takeaways appeared first on WeLiveSecurity
January 10, 2017
Anonymous hacks Thai Gov’t job portal; leaks a trove of data
January 10, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in libTIFF, the worst of which may allow execution of arbitrary code.
January 10, 2017
The Spy, sorry, The Fridge Who Loved Me
January 10, 2017
Adobe Patches Code Execution Flaws in Flash, Reader, Acrobat
January 10, 2017
Cybercriminals ‘should be punished with Wi-Fi jammers’
A senior UK police officer has suggested that offenders of cybercrime should be penalized by being made to wear Wi-Fi jammers rather than being sent to prison. The post Cybercriminals ‘should be punished with Wi-Fi jammers’ appeared first on WeLiveSecurity
January 10, 2017
US college pays $28,000 to get files back after ransomware attack
January 10, 2017
Disk-wiping malware Shamoon targets virtual desktop infrastructure
January 10, 2017
Lawmakers Reintroduce Popular Email Privacy Act
January 10, 2017
Two New Edge Exploits Integrated into Sundown Exploit Kit
January 10, 2017
How could social media legalese be made more friendly?
January 10, 2017
Security scare over hackable heart implants
A US government probe into claims that certain heart implants are vulnerable to hacking attacks, has resulted in emergency security patches being issued for devices that cardiac patients have in their homes. The post Security scare over hackable heart implants appeared first on WeLiveSecurity
January 10, 2017
EU tosses Europe’s cookies… popups
January 10, 2017
New privacy rules at risk as Trump prepares to take office
January 10, 2017
Google Patches Android Custom Boot Mode Vulnerability
January 10, 2017
Threatpost News Wrap, January 6, 2017
January 10, 2017
Experts Warn of Novel PDF-Based Phishing Scam
January 10, 2017
FTC: D-Link Failed to Secure Routers, IP Cameras
January 10, 2017
Attacks On MongoDB Rise As Hijackings Continue
January 10, 2017
Ransomware extorts Los Angeles school to the tune of $28,000
January 10, 2017
Uber offers an olive branch to city planners with new tool
January 10, 2017
Dangerous assumptions that put enterprises at risk
January 10, 2017
Privacy legislation reintroduced for mail older than 180 days
January 10, 2017
MongoDB ransacked: Now 27,000 databases hit in mass ransom attacks
January 10, 2017
GitHub secret key finder released to public
January 10, 2017
Trump Plans To Build Anti-Hacking Team
January 10, 2017
Hacker: Lol, I pwned FBI.gov! Web devs: Nuh-uh, no you didn’t
January 10, 2017
Git Hound, Truffle Hog root out GitHub leaks
January 10, 2017
Q&A: RSA crypto pioneer Adleman keeps pushing the limits
I recently had the pleasure of interviewing Dr. Leonard Adleman — the “A” in the very popular public cryptographic algorithm RSA — as part of the Association for Computing Machinery’s 50th anniversary celebration of the Turing Award. In 2002, Adleman himself won the Turing Award, often referred to at the Nobel Prize of the computing […]
January 10, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Python, the worst of which could lead to arbitrary code execution.
January 10, 2017
LinuxSecurity.com: Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.
January 10, 2017
Autocomplete a novel phishing hole for Chrome, Safari crims
January 10, 2017
St Jude patching Merlin@home heart kit
January 10, 2017
Type: Vulnerability. Microsoft Office is prone to a remote memory-corruption vulnerability; fixes are available.
January 10, 2017
Type: Vulnerability. Microsoft Edge is prone to a remote privilege-escalation vulnerability; fixes are available.
January 10, 2017
Type: Vulnerability. Microsoft Windows LSASS is prone to a local privilege-escalation vulnerability; fixes are available.
January 10, 2017
MongoDB Attacks Jump From Hundreds to 28,000 In Just Days
January 9, 2017
St. Jude Medical Patches Vulnerable Cardiac Devices
January 9, 2017
‘Fear factor pushing up cyber-insurance premiums’
January 9, 2017
LinuxSecurity.com: Security Report Summary
January 9, 2017
LinuxSecurity.com: Security Report Summary
January 9, 2017
LinuxSecurity.com: MinGW cross compiled libpng 1.6.27 release, fixing a potential security issue.For details, see https://sourceforge.net/p/png-mng/mailman/message/35575076/
January 9, 2017
LinuxSecurity.com: This update fixes an old NULL pointer dereference bug in png_set_text_2()discovered and patched by Patrick Keshishian (CVE-2016-10087). The potential”NULL dereference” bug has existed in libpng since version 0.71 of June 26,1995. To be vulnerable, an application has to load a text chunk into the pngstructure, then delete all text, then add another text chunk […]
January 9, 2017
LinuxSecurity.com: Update —- Update to 0.11 —- Update —- Update. **WARNING:** if youare using your own config file, add “` include /etc/sway/config.d/* “` Atthe end of it, otherwise nothing will work on Wayland
January 9, 2017
LinuxSecurity.com: MinGW cross compiled libpng 1.6.27 release, fixing a potential security issue.For details, see https://sourceforge.net/p/png-mng/mailman/message/35575076/
January 9, 2017
LinuxSecurity.com: This update fixes an old NULL pointer dereference bug in png_set_text_2()discovered and patched by Patrick Keshishian (CVE-2016-10087). The potential”NULL dereference” bug has existed in libpng since version 0.71 of June 26,1995. To be vulnerable, an application has to load a text chunk into the pngstructure, then delete all text, then add another text chunk […]
January 9, 2017
Man pleads guilty to role in harassment scheme against senior US government officials
Justin Liverman, a student from North Carolina, has admitted collaborating in a harassment scheme targeting US officials and their families. The post Man pleads guilty to role in harassment scheme against senior US government officials appeared first on WeLiveSecurity
January 9, 2017
US Voting Systems Deemed Critical Infrastructure
January 9, 2017
FTC sues D-Link for ‘insecure’ routers and IP cameras
January 9, 2017