Menu

Latest articles

Hacker Who DDoSed Boston Hospital for OpJustina Facing Charges
Know your enemy: Training can help avoid cybersecurity pitfalls

European Cyber Security Month offers a great opportunity to remind people of some of the practices that can boost their cybersecurity skills. The post Know your enemy: Training can help avoid cybersecurity pitfalls appeared first on WeLiveSecurity.

Rowhammer Vulnerability Comes to Android
Russian indicted over LinkedIn and Dropbox mega-breaches
Dyn DDoS – what can we do right now to help prevent the next attack?
Jester defaces website but the Russian Government isn’t laughing
For rent: An IoT botnet to take down much of the internet
Post-Mirai, how to better protect your IoT devices
Chinese electronics biz recalls webcams at heart of botnet DDoS woes
Anonymous hacker charged with #opJustina DDoS attacks on hospitals
From There to Here (But Not Back Again)
Crashing a $1,000 Drone by Hacking the 3D Manufacturing System
French surveillance law is unconstitutional after all, highest court says
Chinese firm admits its hacked products were behind Friday’s massive DDOS attack
Mirai, Mirai, on the wall – through the looking glass of the attack on Dyn
Hacktivist crew claims it launched last week’s DDoS mega-attack
Dyn DDoS attack exposes soft underbelly of the cloud
PayPal’s 2FA proves too easy to bypass
How to delete your Yahoo account
Ageing GSM crypto cracked on commodity graphics rig

Risk Level: Very Low. Type: Trojan.

Hackers pop top ‘secure’ wireless keyboard and mouse kits, gain RCE
Thanks, IoT vendors: your slack attitude will get regulators moving
Brute force cred crunchers gifted Username Anarchy
Every LTE call, text, can be intercepted, blacked out, hacker finds
Mozilla plots TLS 1.3 future for Firefox
Data breach at Weebly affects 43 million users
DDoS attack on Dyn involved 10s of millions of hacked IP addresses
“No More Ransom” Campaign Saves 2,500 Ransomware Victims, 1.3 Mil Euros

security update

Mirai Botnet Linked to Massive DDoS Attacks on Dyn DNS
Pacemaker maker St Jude faces new security flaw claims from biz short-selling its stock
“Dirty COW”, the most dangerous Linux Bug for the last 9 years
Mirai-Fueled IoT Botnet Behind DDoS Attacks on DNS Providers

  A portion of the internet went down after suffering a crippling blow from a series of global attacks on a cloud-based Internet Performance Management (IPM) company, called Dyn. Major websites including Twitter, Reddit, Spotify and even game servers for Battle Field 1 have been affected. This was all made possible by an unknown group of […]

  DDoS Attack on Dyn Crippled the Internet A portion of the internet went down after suffering a crippling blow from a series of global attacks on a cloud-based Internet Performance Management (IPM) company, called Dyn. Major websites including Twitter, Reddit, Spotify and even game servers for Battle Field 1 have been affected. Malware Using Trump’s […]

Como–D’oh! Infosec duo exploits OCR flaw to nab a website’s HTTPS cert
Mozilla Turning TLS 1.3 On By Default With Firefox 52

LinuxSecurity.com: An update for bind is now available for Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact [More…]

LinuxSecurity.com: An update for bind97 is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…]

LinuxSecurity.com: An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 5, Oracle Java for Red Hat Enterprise Linux 6, and Oracle Java for Red Hat Enterprise Linux 7. [More…]

Linux kernel bug: DirtyCOW “easyroot” hole and what you need to know
Millions of AdultFriendFinder user accounts hacked – again
Serious Dirty Cow Linux Vulnerability Under Attack
Threatpost News Wrap, October 21, 2016
Online crime leads to losses of £10.9 billion a year
Dyn dinged by DDoS: US DNS firm gives web a bad hair day
Dyn Confirms DDoS Attack Affecting Twitter, Github, Many Others
DDoS attack against DNS provider knocks major sites offline
Why you should be cautious of emails from friends or colleagues
Hax0rs sow Discord by using VoIP service to sling malware at gamers
DDoS Attack on DNS; Major sites including GitHub, Twitter Suffering Outage
Intel asserts its trademark rights against John McAfee
Hack us and you’re basically attacking America, says UK defence sec
Hackers Steal Data from Japanese Nuclear Facility
9 Sources For Tracking New Vulnerabilities
Cybercriminals target Brazilian routers with default credentials

Criminals are hunting for routers with default credentials and with vulnerabilities in their firmware, with Brazilians the main target. The post Cybercriminals target Brazilian routers with default credentials appeared first on WeLiveSecurity.

“Anonymous” Yik Yak users can be tracked down, say researchers
Hacked: 43M Weebly and 22M FourSquare accounts stolen
Windows GDI flaw leads to PowerShell attacks
Virtual lineup: Your face is already on file
Slack whacks global account hijack holes
Fruity hacking group juiced by Microsoft’s October patch parade
Spam scum ping global blacklists to wreck rep
Dirty COW explained: Get a moooo-ve on and patch Linux root hole
Google pays $100k to anti-malware crusader Giovanni Vigna
DIY website builder Weebly was secured feebly

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Ex-NSA contractor hoarded two decades’ worth of secrets
Dirty COW Linux vulnerability – what you need to know
New Ransomware Asks User to Play Click Me Game while Encrypting Data
Three million debit cards at risk after hackers raid Indian payment systems

security update

ATM Malware Hack: State Bank of India Blocks Millions of debit cards
US DNC hackers blew through SIX zero-days vulns last year alone
iCloud Phishing Campaign Zycode Back From the Dead
3 ways Windows Server 2016 is tackling security

LinuxSecurity.com: Security Report Summary

LinuxSecurity.com: An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…]

Locky Ransomware Learns New Evasive Tricks
FBI arrests Russian hacker behind 117M LinkedIn 2012 Breach
Facial recognition technology is taking over US, says privacy group
Boffins exploit Intel CPU weakness to run rings around code defenses
Poor and/or reused passwords lead to Chinese spam flood on iMessage
Yahoo Asks DNI to De-Classify Email Scanning Order
US Air Force now equipped with DARPA’s Space Surveillance Telescope
Bypassing ASLR in 60 Milliseconds
Mobile Applications Leak Device, Location Data
Facebook privacy settings hoax resurfaces again

A Facebook hoax that has been around since at least 2012 has resurfaced, claiming that private photographs and messages are going to be made public. The post Facebook privacy settings hoax resurfaces again appeared first on WeLiveSecurity.

Ancalog – the document exploit tool that makes cybercrime easy
Electronic Arts (EA) servers are down; Users are angry
New ESET research paper puts Sednit under the microscope

Security researchers at ESET have released their latest research into the notorious and highly experienced Sednit cyberespionage group. The post New ESET research paper puts Sednit under the microscope appeared first on WeLiveSecurity.

Understanding and Securing Linux Namespaces
Murphy’s Law: The security version
A Job In Security Leads To Job Security
FruityArmor APT Group Used Recently Patched Windows Zero Day
Yahoo asks US government for clarity on email scanning controversy
Stupid encryption mistakes criminals make

LinuxSecurity.com: An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 5, Oracle Java for Red Hat Enterprise Linux 6, and Oracle Java for Red Hat Enterprise Linux 7. [More…]