June 10, 2016
Risk High Date Discovered March 8, 2016 Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause […]
June 9, 2016
uTorrent Forums User List Stolen
June 9, 2016
An update for firefox is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Critical: firefox security update Advisory ID: RHSA-2016:1217-01 Product: Red Hat Enterprise […]
June 9, 2016
Stolen Twitter Credentials Latest Dataset For Sale
June 9, 2016
VIDEO: The best video security blog? Thank you!
June 9, 2016
Latest Intelligence for May 2016
Our latest intelligence reveals Angler responsible for over 51 percent of exploit kit attacks, and one email in every 134 is now malicious. Read More
June 9, 2016
Hitting emails and Facebook: Ray-Ban scam is back
A while ago, we informed you about a Ray-Ban scam campaign flooding Facebook via hacked profiles. Using fake ads that offered massive discounts, attackers tried to lure users into “buying” branded sunglasses, thus giving up their payment card details via an unsecured channel. Spread mostly via posts disguised as ads for Ray-Bans, the scam also […]
June 9, 2016
Most organizations unconfident in ability to protect data after breach
��}��6��oOU���3�b��e�c��;���m=�dslEBg(��e4�3U�;쯭ڭ�Wت}��o�=�v ^��hd’ٵs1E�F���G�99���s��٫��o���K�u�i?�*$�й�*�舌�882�jx���{4��ݻO�G���FM�ˮr�{1�b�lP�X�WW��Ul`����#w�x�(��U��/ڏO���3peP/�w�=��9�]�ҡ��c��Ա�qצ��E5�Aω��”�ti�Ui��#�j�S풆�бߓ �m��ߦ���~�칯��l�����������͟__X��EU���tی��lI`O�������흴w[��������w’O�>iu8,”�L��.HHݮ�3�FcJ�1�_�݊”�L��]%����]E�x:��S�:�4�V:�L��1 4����F|g��`�:����辦���$��� v&�o�&S’F4�i��G����ʏb�#�s~cD�H�A�CdžƁ[�8.�EbDԏ� �����d��4�B'(0����>��C��! iA9Ӎ��b���.j�}��7″&�Դ�ČE�3 ��=��.��Ğ��A�iju����L��@����n��&�{h䨧I����]C�5���|��� ��}�GŐ�G�>����q^��0v,�.,������E ��I�J��AR���G��P�9T�ph��N��U�d�:`��>��a�ք�Z;G�ã���f�� n��`�o��j��@C�h��Ǚ�#�2k%��o�Q��#%N���Hj����nL�#�m��(�L�p�,(�R�}�Y�*��_�\HZb:�2�ZP����”���~xCwq�7�/� �>}��n2r)3�?�u=��:y ����4��|� ���ȓ�M�~~ ]|�D��4|+��)в�ݽ[Bm�1j�o�fEY�6�;pJ�1vV����Ƕ�_vQ삉�Ʈ!!ʊ��:�=9Ų��b��@f������1�%eLk���.,���P��ⱆ�įz�R�z��mU��e���v��
June 9, 2016
Do it now! From SHA-1 to SHA-2 in 8 steps
June 9, 2016
Google IMAP losing old security protocols this month
June 9, 2016
Robot lung probe wins licence from US authorities
June 9, 2016
Patrick Coleman discovered that missing input sanitising in the ADPCM decoder of the VLC media player may result in the execution of arbitrary code if a malformed media file is opened. For the stable distribution (jessie), this problem has been fixed in version 2.2.4-1~deb8u1. For the unstable distribution (sid), this problem has been fixed in […]
June 8, 2016
Two related issues have been discovered in Expat, a C library for parsing XML. CVE-2012-6702 It was introduced when CVE-2012-0876 was addressed. Stefan Sørensen discovered that the use of the function XML_Parse() seeds the random number generator generating repeated outputs for rand() calls. CVE-2016-5300 It is the product of an incomplete solution for CVE-2012-0876. The […]
June 8, 2016
University of Calgary bows down to ransomware demands
The University of Calgary has handed over $20,000 CND to cybercriminals, who had launched a ransomware attack on the institution. It revealed that 10 days after its systems were affected, it has been unable to fully restore its systems back to normal. This is despite efforts by its IT department to “isolate the effects of […]
June 8, 2016
Debian: 3598-1: vlc: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3598-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff June 07, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : vlc CVE ID : CVE-2016-5108 Patrick Coleman discovered that missing input sanitising in the ADPCM decoder of the VLC media player may result in the […]
June 8, 2016
Debian: 3597-1: expat: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3597-1 security@debian.org https://www.debian.org/security/ Luciano Bello June 07, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : expat CVE ID : CVE-2012-6702 CVE-2016-5300 Two related issues have been discovered in Expat, a C library for parsing XML. CVE-2012-6702 It was introduced when […]
June 8, 2016
No, Acunetix Website was NOT hacked
June 8, 2016
No Simple Fix for Password Reuse
June 8, 2016
Password Autocorrect Without Compromising Security
June 8, 2016
100M ‘Russian Facebook’ Credentials For Sale
June 8, 2016
New Angler Exploits Bypass EMET Mitigations
June 8, 2016
Crimeware: Malware and massive campaigns around the world
��}ے�F���(Q>”9&^�n�uZ-y�9���=�9���$�Aƥٴ���}ڈ݈��_0�’�%��U �I4%�{$_UYUY�Y�YYYOtn�5t��q�? � 7��a ��{2�}|��’�TT�?’�u�v�{1�b�|��į~-�7�� Yc3�x�O�vPc��b8�U��D;�’�;W��E��#^��ޯ];|�a���:v
June 8, 2016
IRS’s new Get Transcript online service benefits from enhanced cybersecurity
��}�۸��o�j��O��Z$u��g,��c�Y�Ϸxf�f?�QQ$$qL�^F��N�y��JUR�WHU��˛�’I7R�E���w{/�H��ht7��ᝧ��Oy��x��������%��M� �N�t��rH�q�? �5��un=�R�܂’����MVT��&�y_9�z�v��B,�����”6��#kj���I�� c� �� ���#�zCTե�&0�ر��4�,�2ǪV�$��$t%��(��?D�p��q�x9� �Σ�U�d�:��!��a�ֆN;��N�s��>l�ׂ��6h�+��v��@� P���33’t㱖4x��iG��?��}O{�’� 0#�,�H�r����?��ЖZ����ʊ�aZ��gV@+ZEa��k~4WRڟ���N�VT��|���Bj�~xE?�~0�/�����k����tf1� %�/8g���*(qk�Ns}8��?sNh;�$”}�I�� ��!��{��s�’� F��a�!}o������~�h ��7�tآ��’:�!+-C���{$��YnbcKg{�*k����g�۳�0oG������v�����a�F-��)�M���tn���tFe���͋hEu�f��[:hzf�_���ɿJ�V�G!���ݻg�c�uO�ӣ��c�’��;����q�8%�npA�`RaƮ9Q��S ���ʼn��q�cߦ�����^kw��me���f��j7[��O�����FSw�7����57����z�V�N�ocw��#�Fg����:MT�����Ct4�5G�˅MM@���:�i|H:t������t}~H�Do�?�ҋqɣ��x���^��3 �ij�� ���b_~y�!_��K,u�bV�c�U?p����Q�0և���j����g�D}(��ȥn� E}3����z�*��;�gn������m}Y�N� �o�^�A�J/G�� qHb�#�u����7�]��Z��lz����ZT .&��e�>0�R�J%�,���w��r��y��f�$č,�s��ՍB��1����?:�Ҽ%�F�v�57�R66�s���ZS��g �!d�s�6Y��1�����~��g+��[J=�߅��g� ���.”�|)���i��/�2����҄��dB#X8?��x��}E���������ƯQ�^�myL������{h�+6[�0��_��Nٲ{��=9!]�M~��.�^E:����BB�0#�g���%4�%Zx�y1���4�Q��2�$Y��>-I ����#g8�J�$]���’ �w����´C࿓��fT/��`N��ˋJ��ixY��>$��3z�N�V��Dg��{�j�5��5���a� [=��.MG�K�4%y�Fb��&���`� V5�w%{�z��cB0�E�m�*5fv��N3e1>{&��d��UC��K�x�x���0�)���-:�]0�� Ƶ�����#]����u]qNY t�(�R�”���� 3″��{���6��J-S=(�H�J1�u�+�!��Z�)|x�”����mh�w�&��u]�Ə�h��X��E��r�:�{�Z���� ��Lw9rwxKR�^�1�b��I�8�S2f~H5�dgl�^��zFs(Fs�@��{�1�&�Ӫ�z�BlY.��^ץރ�s]�f�Q�(�F���0��ʝ����͈�����[67���a�`�)`G��l��ty�UHis�0�f��Υ/�Y��9@(�$U& �K�� �2Cg���6*n� �Y;�L[`lz��{탃�9i��I��`����7����9�ī.�hE����>)6 ��o[�ƺ��(u�OiuI6��s{���u�{�tp� �+4)oXњٟ�����(��K$:�1[���g6d>����̝[�V8vz�z{�#y�R������ev���*W��b����sUT�_G��r�)sc���U�����-lñsA�8��e���|�P��S�9xY�P�TG���,6u~�I��_�6�’��ú,x�L�k4���w[�S_�0�c�!;E2��h�q�����k]�����1@�o+��O��B����{d��Ik�”a��t,m6~_I@q`XА���t�)=��Kx䭈�=””�64m’�I8|���l3J�LV|_!Z��5l�h����{���z�{��� ��f�� a�{�( �ʻJ�V�j���%� ���O�82�0r�#��$�ە�o��qV�w�V���5:��wd��Үޭ��Q!�m���Ap�.L�u�$P���R’Ws�jƙ���D�$bQ��L��tݯ�I��6=����l���+(��g�+��Ͼ����ZW��P;})�[X�>)��C�%�,�@�h�g��*��W*��/r�)@��2�k����”`Q��5″%��5u��z r�#>(��t������=�q+`M�y#���P!�����H�G��c���g�nF�Gc����U���7��?x�{������8�|U�G����$�1^��%�6�;�~���,�x��I �� 8%!���*+֓�s�!�W^n�7��rK
June 8, 2016
Beware fake white hats peddling bugs
June 8, 2016
Several vulnerabilities were discovered in spice, a SPICE protocol client and server library. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-0749 Jing Zhao of Red Hat discovered a memory allocation flaw, leading to a heap-based buffer overflow in spice’s smartcard interaction. A user connecting to a guest VM via spice can take […]
June 7, 2016
Red Hat: 2016:1207-01: glibc: Moderate Advisory Posted by Anthony Pell An update for glibc is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: glibc security update Advisory ID: RHSA-2016:1207-01 Product: […]
June 7, 2016
Red Hat: 2016:1206-01: jenkins: Moderate Advisory Posted by Anthony Pell An updated Jenkins package and image that includes security fixes are now available for Red Hat OpenShift Enterprise 3.2. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: jenkins security update Advisory […]
June 7, 2016
Debian: 3596-1: spice: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3596-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso June 06, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : spice CVE ID : CVE-2016-0749 CVE-2016-2150 Several vulnerabilities were discovered in spice, a SPICE protocol client and server library. The Common Vulnerabilities and Exposures project […]
June 7, 2016
Red Hat: 2016:1205-01: spice: Important Advisory Posted by Anthony Pell An update for spice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: […]
June 7, 2016
Red Hat: 2016:1204-01: spice-server: Important Advisory Posted by Anthony Pell An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: […]
June 7, 2016
Discovered: June 6, 2016 Updated: June 6, 2016 6:27:43 PM Type: Trojan Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Backdoor.Steladok is a Trojan horse that opens a back door on the compromised computer, […]
June 7, 2016
Discovered: June 6, 2016 Updated: June 6, 2016 6:39:22 PM Type: Trojan Infection Length: 140,288 bytes Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Trojan.Hookaberg is a Trojan horse that steals information from the compromised computer. Antivirus […]
June 7, 2016
Discovered: June 5, 2016 Updated: June 7, 2016 7:15:48 AM Type: Trojan Infection Length: 182,784 bytes Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows NT, Windows Vista, Windows XP Trojan.Ransomcrypt.AX is a Trojan horse that encrypts files on the compromised computer and asks the user to pay in order to […]
June 7, 2016
The Illusion Of An Encrypted Internet
June 7, 2016
Uber Pays Researcher $10K for Login Bypass Exploit
June 7, 2016
FBI Wants to Identify ‘Criminals’ By Their Tattoos
June 7, 2016
Facebook Messenger Vulnerability Patched
June 7, 2016
Beyond TeslaCrypt: Crysis family lays claim to parts of its territory
��}�r�Ȓ���P�O�d�x�͒I�-ۧ}Ʒ����c{ P$!�Qj�”��i��m�`#6b���~�|�ff@�HQ�v��}1Tee孲����y������Oǯ^���pM�pW}�0?�#�x�}6�”_��M��w�s��V�
June 7, 2016
NTP Patches Flaws That Enable DDoS
June 7, 2016
The days of long, complicated passwords are over
Recently, Microsoft published a new password policy recommendation paper containing advice that flies in the face of conventional wisdom on the subject. Some of the contrarian viewpoints include: Eliminate long password requirements Eliminate complexity requirements Do away with password life expirations Along with this unconventional advice comes a bunch of useful suggestions: Ban common passwords […]
June 7, 2016
Risk Level: Very Low. Type: Trojan.
June 7, 2016
Risk Level: Very Low. Type: Trojan.
June 7, 2016
Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.25. Please see the MariaDB 10.0 Release Notes for further details: For the stable distribution (jessie), these problems have been fixed in version 10.0.25-0+deb8u1. We recommend that you upgrade your mariadb-10.0 packages.
June 6, 2016
Risk High Date Discovered March 8, 2016 Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft […]
June 6, 2016
Gentoo: 201606-04 GnuPG: Multiple vulnerabilities Posted by Anthony Pell Multiple vulnerabilities have been found in GnuPG and libgcrypt, the worst of which may allow a local attacker to obtain confidential key information. – – – – – – – – – – – – – – – – – – – – – – […]
June 6, 2016
Gentoo: 201606-03 libjpeg-turbo: Multiple vulnerabilities Posted by Anthony Pell Two vulnerabilities have been discovered in libjpeg-turbo, the worse of which could allow remote attackers access to sensitive information. – – – – – – – – – – – – – – – – – – – – – – – – – – […]
June 6, 2016
Debian: 3595-1: mariadb-10.0: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3595-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : mariadb-10.0 CVE ID : CVE-2016-0640 CVE-2016-0641 CVE-2016-0643 CVE-2016-0644 CVE-2016-0646 CVE-2016-0647 CVE-2016-0648 CVE-2016-0649 CVE-2016-0650 CVE-2016-0655 CVE-2016-0666 CVE-2016-0668 Debian Bug : 823325 Several issues have been discovered […]
June 6, 2016
Gentoo: 201606-02 Puppet Server and Agent: Multiple vulnerabilities Posted by Anthony Pell Multiple vulnerabilities have been found in Puppet Server and Agent, the worst of which could lead to arbitrary code execution. – – – – – – – – – – – – – – – – – – – – – – […]
June 6, 2016
Gentoo: 201606-01 PuTTY: Multiple vulnerabilities Posted by Anthony Pell Multiple vulnerabilities have been found in PuTTY, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. – – – – – – – – – – – – – – – – – – – – – […]
June 6, 2016
Debian: 3548-3: samba: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3548-3 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : samba Debian Bug : 821002 822937 The upgrade to Samba 4.2 issued as DSA-3548-1 introduced several upstream regressions and as well a packaging regression causing […]
June 6, 2016
Debian: 3594-1: chromium-browser: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3594-1 security@debian.org https://www.debian.org/security/ Michael Gilbert June 04, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : chromium-browser CVE ID : CVE-2016-1696 CVE-2016-1697 CVE-2016-1698 CVE-2016-1699 CVE-2016-1700 CVE-2016-1701 CVE-2016-1702 Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-1696 A cross-origin bypass […]
June 6, 2016
Slackware: 2016-155-01: ntp: Security Update Posted by Anthony Pell New ntp packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. [More Info…] [slackware-security] ntp (SSA:2016-155-01) New ntp packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details […]
June 6, 2016
Debian: 3593-1: libxml2: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3593-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso June 02, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : libxml2 CVE ID : CVE-2015-8806 CVE-2016-1762 CVE-2016-1833 CVE-2016-1834 CVE-2016-1835 CVE-2016-1836 CVE-2016-1837 CVE-2016-1838 CVE-2016-1839 CVE-2016-1840 CVE-2016-2073 CVE-2016-3627 CVE-2016-3705 CVE-2016-4447 CVE-2016-4449 CVE-2016-4483 Debian Bug : 812807 813613 […]
June 6, 2016