June 15, 2016
There’s a lot that happens in the security world, with many stories getting lost in the mix. In an effort to keep our readers informed and updated, we present the Webroot Threat Recap, highlighting 5 major security news stories of the week. Human Error Remains Top Security Threat In a study conducted over the course of 3 […]
June 15, 2016
Chinese loan sharks seek salacious selfies as collateral
June 15, 2016
Risk Level: Very Low. Type: Trojan.
June 15, 2016
Risk Level: Very Low. Type: Trojan.
June 15, 2016
Hackers Found Their Way Inside Telegram App
June 14, 2016
Multiple security issues have been found in Icedove, Debian’s version of the Mozilla Thunderbird mail client: Multiple memory safety errors may lead to the execution of arbitrary code or denial of service. Debian follows the extended support releases (ESR) of Thunderbird. Support for the 38.x series has ended, so starting with this update we’re now […]
June 14, 2016
Microsoft June Patch Tuesday Fixes 44 Vulnerabilities
June 14, 2016
Apple quietly launches next-gen encrypted file system
June 14, 2016
DNC Hacked, Research on Trump Stolen
June 14, 2016
Red Hat: 2016:1225-01: kernel: Important Advisory Posted by Anthony Pell An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: kernel security and bug fix update Advisory […]
June 14, 2016
Debian: 3601-1: icedove: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3601-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff June 13, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : icedove CVE ID : CVE-2016-2806 Multiple security issues have been found in Icedove, Debian’s version of the Mozilla Thunderbird mail client: Multiple memory safety errors […]
June 14, 2016
Risk Level: Very Low. Type: Trojan.
June 14, 2016
Fix Coming for Flash Vulnerability Under Attack
June 14, 2016
RAA Ransomware Composed Entirely of JavaScript
June 14, 2016
Meaningful Surveillance Reform Risks Defeat
June 14, 2016
D-Link Patches Weak Crypto in mydlink Devices
June 14, 2016
Quantum Computation: A cryptography armageddon?
Cryptography is a cornerstone of information security. It is used to encode and decode data in order to fulfill the requirement for confidentiality, integrity, authenticity as well as non-repudiation. Together, these are frequently referred to as cryptography services. Advances in cryptanalysis, computer science and engineering are always pushing the limits of what is considered secure. […]
June 14, 2016
Yes, even smart TVs can be hit by Android ransomware
June 14, 2016
Apple looks into the benefits of differential privacy
��}��Ȳ�o��w(Ĺ�,�_�n��9�����=gv.pe�l��%�>��a:��F���7b�`�MΓlfUI֗�n�a� 8g@�����2����*�y����/o��N_�|w��4�9ġ0W��D!~���E_�&�dE��ax_�1� �*P���)���
June 14, 2016
Big data will fix internet security … eventually
I’ve always thought that improved computer security controls would “fix” the internet and stop persistent criminality — turns out it might be big data analytics instead. I’ve long written that only a large-scale improvement of the internet’s authentication mechanisms (that is, pervasive identity) could significantly reduce crime. If everyone on the internet had a default, […]
June 14, 2016
Hack the Pentagon shutters 100 bugs
June 14, 2016
Type: Vulnerability. Microsoft Windows is prone to a remote privilege-escalation vulnerability; fixes are available.
June 14, 2016
Type: Vulnerability. Microsoft Office is prone to an information-disclosure vulnerability; fixes are available.
June 14, 2016
Type: Vulnerability. Microsoft Office is prone to a local privilege-escalation vulnerability; fixes are available.
June 14, 2016
Type: Vulnerability. Microsoft Office is prone to a remote memory-corruption vulnerability; fixes are available.
June 14, 2016
Type: Vulnerability. Microsoft Office is prone to a remote memory-corruption vulnerability; fixes are available.
June 14, 2016
Type: Vulnerability. Microsoft Exchange Server is prone to an information-disclosure vulnerability; fixes are available.
June 14, 2016
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.
June 14, 2016
Risk High Date Discovered June 14, 2016 Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause […]
June 14, 2016
Risk High Date Discovered June 14, 2016 Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause […]
June 14, 2016
Risk High Date Discovered June 14, 2016 Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems Microsoft […]
June 14, 2016
Discovered: June 14, 2016 Updated: June 14, 2016 2:51:29 PM Type: Trojan Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows NT, Windows Vista, Windows XP Trojan.Cryptolocker.AR is a Trojan horse that encrypts files on the compromised computer. Symantec Security Response is currently investigating this threat and will […]
June 14, 2016
Discovered: June 13, 2016 Updated: June 13, 2016 11:42:17 PM Type: Trojan Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP JS.Ransomcrypt.B is a Trojan horse that encrypts files on the compromised server and downloads […]
June 14, 2016
Forget Game of Thrones as Android ransomware infects TVs
June 13, 2016
Let’s Encrypt Accidentally Spills 7,600 User Emails
June 13, 2016
Siemens Firmware Updates Patch SIMATIC Vulnerabilities
June 13, 2016
Risk Level: Very Low. Type: Trojan.
June 13, 2016
51 Million iMesh Accounts Available on Black Market
June 13, 2016
Facebook activates ‘Safety Check’ after Orlando massacre
June 13, 2016
Symantec to acquire Blue Coat for $4.65 billion
June 13, 2016
Discovered: June 13, 2016 Updated: June 13, 2016 2:09:30 PM Type: Trojan Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP PHP.Ransomcrypt.C is a Trojan horse that encrypts files on the compromised server. Antivirus Protection […]
June 13, 2016
Netgear Router Update Removes Hardcoded Crypto Keys
June 11, 2016
10 security TED Talks you can’t miss
June 11, 2016
Discovered: June 10, 2016 Updated: June 10, 2016 11:27:56 PM Type: Trojan Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Trojan.Munidub is a Trojan horse that may download potentially malicious files on the compromised computer. Antivirus Protection […]
June 11, 2016
Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation errors may lead to the execution of arbitrary code or spoofing. Wait, Firefox? No more references to Iceweasel? That’s right, Debian no longer applies a custom branding. Please see these links for further information: […]
June 10, 2016
Marcin Icewall Noga of Cisco Talos discovered an out-of-bound read vulnerability in the CInArchive::ReadFileItem method in p7zip, a 7zr file archiver with high compression ratio. A remote attacker can take advantage of this flaw to cause a denial-of-service or, potentially the execution of arbitrary code with the privileges of the user running p7zip, if a […]
June 10, 2016
Debian: 3600-1: firefox-esr: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3600-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff June 09, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : firefox-esr CVE ID : CVE-2016-2818 CVE-2016-2819 CVE-2016-2821 CVE-2016-2822 CVE-2016-2828 CVE-2016-2831 Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety […]
June 10, 2016
Debian: 3599-1: p7zip: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3599-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso June 09, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : p7zip CVE ID : CVE-2016-2335 Debian Bug : 824160 Marcin ‘Icewall’ Noga of Cisco Talos discovered an out-of-bound read vulnerability in the CInArchive::ReadFileItem method in […]
June 10, 2016
Discovered: June 9, 2016 Updated: June 10, 2016 1:42:34 PM Type: Trojan Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows NT, Windows Vista, Windows XP Trojan.Ransomcrypt.AY is a Trojan horse that encrypts files on the compromised computer and asks the user to pay in order to decrypt […]
June 10, 2016
Risk Level: Very Low. Type: Trojan.
June 10, 2016
Threatpost News Wrap, June 10, 2016
June 10, 2016
Twitter Forces Password Reset on Some Exposed Accounts
June 10, 2016
$90K Windows Zero Day Gets a Price Cut
June 10, 2016
Why you don’t have to fix every vulnerability
June 10, 2016
EMC and VMware both suffer malicious user access messes
June 10, 2016