Menu

Latest articles

Microsoft rethinks Windows 10 upgrade push following complaints
Unwanted Windows 10 update wins woman $10,000 from Microsoft
Meet the grin reaper: Password manager now snaps login SELFIES
Botnet Powered by 25,000 CCTV Devices Uncovered
SWIFT hackers nick $10m from Ukraine bank

Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3607-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso June 28, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : linux CVE ID : CVE-2015-7515 CVE-2016-0821 CVE-2016-1237 CVE-2016-1583 CVE-2016-2117 CVE-2016-2143 CVE-2016-2184 CVE-2016-2185 CVE-2016-2186 CVE-2016-2187 CVE-2016-3070 CVE-2016-3134 CVE-2016-3136 CVE-2016-3137 CVE-2016-3138 CVE-2016-3140 CVE-2016-3156 CVE-2016-3157 CVE-2016-3672 CVE-2016-3951 CVE-2016-3955 CVE-2016-3961 CVE-2016-4470 CVE-2016-4482 CVE-2016-4485 CVE-2016-4486 CVE-2016-4565 CVE-2016-4569 CVE-2016-4578 CVE-2016-4580 […]

Ubuntu: 3021-1: Linux kernel vulnerabilities Posted by Anthony Pell    Several security issues were fixed in the kernel. ========================================================================== Ubuntu Security Notice USN-3021-1 June 27, 2016 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 12.04 LTS Summary: Several security issues were fixed in the kernel. Software Description: […]

Ubuntu: 3021-2: Linux kernel (OMAP4) vulnerabilities Posted by Anthony Pell    Several security issues were fixed in the kernel. ========================================================================== Ubuntu Security Notice USN-3021-2 June 27, 2016 linux-ti-omap4 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 12.04 LTS Summary: Several security issues were fixed in the kernel. Software […]

Gentoo: 201606-19 kwalletd: Information disclosure Posted by Anthony Pell    Kwalletd password stores are vulnerable to codebook attacks. – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – Gentoo […]

Multiple vulnerabilities have been found in IcedTea allowing remote attackers to affect confidentiality, integrity, and availability through various vectors. – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – […]

Ubuntu: 3018-1: Linux kernel vulnerabilities Posted by Anthony Pell    Several security issues were fixed in the kernel. ========================================================================== Ubuntu Security Notice USN-3018-1 June 27, 2016 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 14.04 LTS Summary: Several security issues were fixed in the kernel. Software Description: […]

Ubuntu: 3020-1: Linux kernel (Vivid HWE) vulnerabilities Posted by Anthony Pell    Several security issues were fixed in the kernel. ========================================================================== Ubuntu Security Notice USN-3020-1 June 27, 2016 linux-lts-vivid vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 14.04 LTS Summary: Several security issues were fixed in the kernel. […]

Ubuntu: 3019-1: Linux kernel (Utopic HWE) vulnerabilities Posted by Anthony Pell    Several security issues were fixed in the kernel. ========================================================================== Ubuntu Security Notice USN-3019-1 June 27, 2016 linux-lts-utopic vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 14.04 LTS Summary: Several security issues were fixed in the kernel. […]

Ubuntu: 3018-2: Linux kernel (Trusty HWE) vulnerabilities Posted by Anthony Pell    Several security issues were fixed in the kernel. ========================================================================== Ubuntu Security Notice USN-3018-2 June 27, 2016 linux-lts-trusty vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 12.04 LTS Summary: Several security issues were fixed in the kernel. […]

Ubuntu: 3016-4: Linux kernel (Xenial HWE) vulnerabilities Posted by Anthony Pell    Several security issues were fixed in the kernel. ========================================================================== Ubuntu Security Notice USN-3016-4 June 27, 2016 linux-lts-xenial vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 14.04 LTS Summary: Several security issues were fixed in the kernel. […]

Ubuntu: 3017-1: Linux kernel vulnerabilities Posted by Anthony Pell    Several security issues were fixed in the kernel. ========================================================================== Ubuntu Security Notice USN-3017-1 June 27, 2016 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 15.10 Summary: Several security issues were fixed in the kernel. Software Description: – […]

Ubuntu: 3017-3: Linux kernel (Wily HWE) vulnerabilities Posted by Anthony Pell    Several security issues were fixed in the kernel. ========================================================================== Ubuntu Security Notice USN-3017-3 June 27, 2016 linux-lts-wily vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 14.04 LTS Summary: Several security issues were fixed in the kernel. […]

Multiple US Healthcare Insurance Database (655,000 Patients) for sale

Risk Level: Very Low. Type: Trojan.

Cerber ransomware targets enterprises via Office 365
Google Play Hit with Rash of Auto-Rooting Malware
You know how that data breach happened? Three words: eBay, hard drives
Pandora tells some users to reset their passwords
Malware on Google Play steals Viber photos and videos
655,000 Healthcare Records Being Sold on Dark Web
Bart ransomware takes files hostage by hiding them in password-protected ZIP files
VASCO explains how to secure data access within the Healthcare industry
Study: Encryption use increase largest in 11 years
FBI expansion of surveillance powers meets obstacle
(Update) 800-pound Comodo tries to trademark upstart rival’s “Let’s Encrypt” name
Not so fast: Some security defaults shouldn’t change
3 ways to screw up data security in the cloud
<div>Not so fast: Some security defaults shouldn't change</div>

There’s an old security mantra that says “always change the defaults!” Although this seems like a good general rule, in fact it’s true only for certain kinds of settings. Changing the defaults in other cases will just end up biting you in the end with little increased security to show for it. A few months […]

Nuclear goes boom
US hospitals hacked with ancient exploits
Eat my reports! Bart ransomware slips into PCs via .zip’d JavaScript
Ransomware scum target corporate Office 365 users in 0-day campaign
Riverbed’s NetProfiler, NetExpress virty appliances patched
Google’s Widevine DRM doesn’t quite manage
25,000 malware-riddled CCTV cameras form network-crashing botnet

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2015-7515, CVE-2016-2184, CVE-2016-2185, CVE-2016-2186, CVE-2016-2187, CVE-2016-3136, CVE-2016-3137, CVE-2016-3138, CVE-2016-3140 Ralf Spenneberg of OpenSource Security reported that various USB drivers do not sufficiently validate USB descriptors. This allowed a physically present user with a […]

Risk Level: Very Low. Type: Trojan.

With the sheer amount of available pornographic images of child abuse – often called child porn – available online, it may seem that there is little you can do to protect your children, or yourself, from this type of content. This isn’t true. Here are eight key tools and tactics to eliminate – or significantly reduce […]

It was only a matter of time before phone hacking rose to the top of the media-driven hysteria list Thanks to the rapid growth of mobile device adoption and the subsequent rapid growth in mobile threats, phone hacking prevention is a hot topic. A headache reserved for celebrities in the past, smartphone-infiltration concerns have crossed the VIP vs. […]

Apple Leaves iOS 10 Beta Kernel Unencrypted: Pros and Cons
Visiting America? US border agents want your Twitter, Facebook URLs
Woman Sues Microsoft for Automatic Windows 10 Upgrades and Wins

Discovered: June 25, 2016 Updated: June 27, 2016 8:35:56 AM Type: Trojan Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows NT, Windows Vista, Windows XP Trojan.Ranscrypt.BA!gm is a heuristic detection used to detect threats associated with the Trojan.Ransomcrypt.BA family. Antivirus Protection Dates Initial Rapid Release version June […]

Discovered: June 25, 2016 Updated: June 27, 2016 11:46:39 AM Type: Trojan Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows NT, Windows Vista, Windows XP Trojan.Ransomcrypt.BA is a Trojan horse that encrypts files on the compromised computer and asks the user to pay in order to decrypt […]

Google CEO Sundar Pichai’s Quora and Twitter Accounts Hacked
Google’s CEO Sundar Pichai hit by hackers
Crooks abusing Facebook to offer credit card samples
New CryptXXX Can Evade Detection, Outsmart Decryption Tools
Intel mulls sale of Intel Security – reports
Automated bots bombard EU referendum petition with fake signatures
Comodo stands down from trademark tussle with Let’s Encrypt
Botnet-powered ballot stuffing suspected in 2nd referendum petition
Anime site redirects to Neutrino exploit kit, CryptXXX ransomware
Swagger stumbles: Flaw enables remote code execution
Inside the World of the Dark DDoS
Scam victim sues TalkTalk
Hackers peer into Uber passenger privates, find and plot trips on maps
Lenovo Solution Center portal patched to shutter hacker god mode hole
Medicos could be world’s best security bypassers, study finds
Facebook ‘Comment Tagging Malware’ Spreading via Google Chrome
IRS kills off PINs citing increasing suspicious activity
Intel to quit the security business (again), and jettison McAfee?
South Yorkshire (UK) Police Websites Hacked
Hacker Selling 1.1 million Lookbook.nu Emails and Plain Text Passwords
Chrome Bug Allows Netflix or Amazon Prime Video Download for Free

It was discovered that pdfbox, a PDF library for Java, was susceptible to XML External Entity attacks. For the stable distribution (jessie), this problem has been fixed in version 1:1.8.7+dfsg-1+deb8u1. For the testing distribution (stretch), this problem has been fixed in version 1:1.8.12-1. For the unstable distribution (sid), this problem has been fixed in version […]

YouTube’s Popular Channels WatchMojo and Redmercy Hacked
A Bug in Chrome Makes It Easy to Pirate Movies
Let’s Encrypt accuses Comodo of trying to swipe its brand
Malware Museum’s top 10 blasts from the past
NASCAR team red-flagged by ransomware attack

There’s a lot that happens in the security world, with many stories getting lost in the mix. In an effort to keep our readers informed and updated, we present the Webroot Threat Recap, highlighting 5 major security news stories of the week. First ‘Hack the Pentagon’ Event a Major Success Several months ago, the Department of Defense […]

Medical Study Blasts Hospitals’ Security Practices

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: kernel-rt security, bug fix, and enhancement update Advisory ID: RHSA-2016:1301-01 Product: […]

An update for ocaml is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: ocaml security update Advisory ID: RHSA-2016:1296-01 Product: Red Hat Enterprise Linux Advisory […]

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: kernel security and bug fix update Advisory ID: RHSA-2016:1277-01 Product: Red […]

Selfrando Technique Mitigates Attacks Unmasking Tor Users
How malware could steal data from an air-gapped PC – via its fan
Voter Database Leak Exposes 154 Million Sensitive Records
Cyberattacks should be included in international humanitarian law

��}�۶��o�*��gM)I]��K�챓�|�mfr��l�DBg(��e4g��c�V�>�V���y��@ �H���N�e��”�F���h4���=�$S�x��5�?i$��Ƚ�k�x�L�$ܷ�`�Sf��} ��ysƬXէS���]6�(QJ�’��v����?Z���ĥ���c�N�q�=f�nŒs�#�D_�|2�������> �t�{�}�P�� �^��w��?�9�������9��&�lw��/vw�{O�vv�۝�w;;�vg���g;Ϟvz����g$b^_��K��ƀ �_�ݎc�L��ҾF�_’0�}M�l63g�s�Y��4r�K���,4$RV2aS[�C�xC�er�{������Oܘ ����;uc��Ʉ0b��}������C�$��T���!��m/u������|�G&���ȥ>0��%�U��؎ܰ4h��x����b�mDl�yD;�I�7Y���y�L(�L`�S���x��|`,o��;;V{��nY*�F��Q@�P�2-�I�(���E�%u/@9P�����`�(qm�-,��r�m�zQC��^�ky �̠�p���(����+h�Ij���,K�~�f��*a:��O� (�a���1�[ǝ���^�a���n/7 ���A�n�ou�@��Q ��;�c���*�5 ��:q>د�Y�N��Cz��i8V��-] �o��Q����F�ڂ�J)Y���Uǂ�P�v��8VIL��/��?’�,b���$���$N��%�qB�^�%���]��S5/�uT�┞S�V@�;3�w��y2�48u�X���8&}�IҘ��o�w8��`}�bsf���i�� b,^�۽��~���mA=3���#��f��’ zV/-�r����-����l�l�=s �=������2�ͮvuu��7J}���5l��O�o�4h��9���rZ�5�MNl����O8���fk��c�p�”y�@��к��0���( ��`(;pG�{����]�;��͈%i����0��16�3�X8:A���|�c �#�u��$��Z�� %��G�ھE�����vo{����׆����N��n������iB��U�iz�’�A��8T���S�@�v� �/�l������:M�2m9}�}��C���N���z[�ZȐ��m�Vm�]ۚs��g�� !(��=�E��e�m���uhYN�.���[N���@_els��/��ʹR���Gv��l�^�[ClY֋�]���? �ZZ6i2�9���Ӱ�W��5nMZ��(�n�i��FFЖ`�֜-��`�8 q”����L& 6��ڭ�6�����jL��_&6�P޻�’?����7���o��~���hKe�z�����)’K���|l`9����T�ټj�i��v��Z0�6q�zl !���e���;|#���l��t��ơG/��©���Ѧ~ЇA�yA`[�ra� h�}�0w�uծϽ,:q������3f��Yu”�����0�b+ltN�������P�[���4��37Yt1�z6������:�V� �_�;���:3����T�ňE��I���U��9�}�

Threatpost News Wrap, June 24, 2016
Privacy, risk and trolls: Dealing with the security challenges of YouTube fame
Look into our network, not around our network… you’re under
US court rules that FBI can hack into a computer without a warrant
Let’s Encrypt and Comodo in trademark tussle
Over half of world’s top domains weak against email spoofing
Updating code can mean fewer security headaches
Popular Anime Site Infected, Redirecting to Exploit Kit, Ransomware
Godless mobile malware can root 90% of Android devices
It’s time to lock the door on backdoors
Sorry, but there’s no universal cloud security solution
Swagger staggered as hacker drops dapper code execution cracker
Australia’s Defence Department tips AU$12M to seat spies with students
Israeli researcher fans fears: here’s another way to cross the airgap
Necurs Botnet is Back, Updated With Smarter Locky Variant