Andrew Carpenter of Critical Juncture discovered a cross-site scripting vulnerability affecting Action View in rails, a web application framework written in Ruby. Text declared as HTML safe will not have quotes escaped when used as attribute values in tag helpers. For the stable distribution (jessie), this problem has been fixed in version 2:4.1.8-1+deb8u4. For the […]
This week’s Threat Recap covers everything from, ‘Fantom’, the new ransomware that disguises itself as a Windows update, to hackers using Facebook photos to trick facial-recognition logins. Decryption Keys Released for Wildfire Ransomware Recently, researchers have announced the public availability of decryption keys for users affected by the Wildfire ransomware variant. This particular variant did focused […]
Debian: 3654-1: quagga: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3654-1 security@debian.org https://www.debian.org/security/ Sebastien Delafond August 26, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : quagga CVE ID : CVE-2016-4036 CVE-2016-4049 Debian Bug : 822787 835223 Two vulnerabilities were discovered in quagga, a BGP/OSPF/RIP routing daemon. CVE-2016-4036 Tamás Németh discovered […]
Debian: 3653-1: flex: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3653-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff August 25, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : flex CVE ID : CVE-2016-6354 Debian Bug : 832768 Alexander Sulfrian discovered a buffer overflow in the yy_get_next_buffer() function generated by Flex, which may result […]
Debian: 3652-1: imagemagick: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3652-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff August 25, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : imagemagick CVE ID : CVE-2016-4562 CVE-2016-4563 CVE-2016-4564 CVE-2016-5010 CVE-2016-5687 CVE-2016-5688 CVE-2016-5689 CVE-2016-5690 CVE-2016-5691 CVE-2016-5841 CVE-2016-5842 CVE-2016-6491 Debian Bugs : 832885 832887 832888 832968 833003 832474 […]
Debian: 3651-1: rails: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3651-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso August 25, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : rails CVE ID : CVE-2016-6316 Debian Bug : 834155 Andrew Carpenter of Critical Juncture discovered a cross-site scripting vulnerability affecting Action View in rails, a […]
��}ے�F���(AsD�”^�n�u��d�n��;+k;�@��`�M�1��/;���_0�OΗlfV@�M�i�ޕf,�@UVV�*++��ᝧoN����3��W/����p�]�ro�ӄ��� 粧��C6����4�a`���Ew5�s��Hp�� ���#���d6�N���p�=�FI�fZ1H���>��B��Q�u�w������n�~�u�j-7�m��ˡ���;K�!O4�7���P��ݜ%M��v�1
Two vulnerabilities were discovered in quagga, a BGP/OSPF/RIP routing daemon. CVE-2016-4036 Tamás Németh discovered that sensitive configuration files in /etc/quagga were world-readable despite containing sensitive information. CVE-2016-4049 Evgeny Uskov discovered that a bgpd instance handling many peers could be crashed by a malicious user when requesting a route dump. For the stable distribution (jessie), these […]
Risk Level: Very Low. Type: Trojan.
Discovered: August 26, 2016 Updated: August 26, 2016 2:51:12 PM Type: Trojan Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Ransom.Fantom is a Trojan horse that may perform malicious activities on the compromised computer. Symantec Security Response […]
Discovered: August 25, 2016 Updated: August 26, 2016 11:37:57 AM Type: Trojan Infection Length: 98,816 bytes Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Ransom.Tearhide is a Trojan horse that encrypts files on the compromised computer. Antivirus […]
Red Hat: 2016:1763-01: qemu-kvm-rhev: Moderate Advisory Posted by Anthony Pell An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 9.0 (Mitaka). Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: qemu-kvm-rhev security update Advisory ID: RHSA-2016:1763-01 Product: Red Hat […]
Risk Level: Very Low. Type: Trojan.
Discovered: August 24, 2016 Updated: August 25, 2016 10:16:22 AM Type: Trojan Infection Length: 266,240 bytes Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Ransom.Purugef is a Trojan horse that encrypts files on the compromised computer. Antivirus […]
Red Hat: 2016:1756-01: qemu-kvm-rhev: Moderate Advisory Posted by Anthony Pell An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 8.0 (Liberty). Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: qemu-kvm-rhev security and bug fix update Advisory ID: RHSA-2016:1756-01 […]
Slackware: 2016-236-03: Linux kernel: Security Update Posted by Anthony Pell New Linux kernel packages are available for Slackware 14.2 and -current to fix a security issue. [More Info…] [slackware-security] Linux kernel (SSA:2016-236-03) New Linux kernel packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the […]
Slackware: 2016-236-02: libgcrypt: Security Update Posted by Anthony Pell New libgcrypt packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. [More Info…] [slackware-security] libgcrypt (SSA:2016-236-02) New libgcrypt packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. […]
Slackware: 2016-236-01: gnupg: Security Update Posted by Anthony Pell New gnupg packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. [More Info…] [slackware-security] gnupg (SSA:2016-236-01) New gnupg packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. […]
An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: kernel security and bug fix update Advisory ID: RHSA-2016:1664-01 Product: Red […]
Red Hat: 2016:1657-01: kernel: Important Advisory Posted by Anthony Pell An update for kernel is now available for Red Hat Enterprise Linux 7.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2016:1657-01 Product: […]
Risk Level: Very Low.
Avid Life Media (ALM), recently rebranded as Ruby Corp, has been heavily criticized for its lax cybersecurity measures, which contributed to the Ashley Madison data breach. According to a joint investigation by the Office of the Privacy Commissioner of Canada and the Office of the Australian Information Commissioner, ALM had “inadequate security safeguards and policies” […]
Risk Level: Very Low. Type: Trojan.
Red Hat: 2016:1654-01: qemu-kvm-rhev: Moderate Advisory Posted by Anthony Pell An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: qemu-kvm-rhev security update Advisory […]
Red Hat: 2016:1655-01: qemu-kvm-rhev: Moderate Advisory Posted by Anthony Pell An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: qemu-kvm-rhev security update Advisory […]
Red Hat: 2016:1652-01: qemu-kvm-rhev: Moderate Advisory Posted by Anthony Pell An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: qemu-kvm-rhev security update Advisory […]
Red Hat: 2016:1653-01: qemu-kvm-rhev: Moderate Advisory Posted by Anthony Pell An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: qemu-kvm-rhev security update Advisory […]
Discovered: August 22, 2016 Updated: August 23, 2016 4:45:21 PM Infection Length: Varies Systems Affected: Linux Hacktool.Equation is a detection for hacking tools allegedly used by the Equation group and released to the public by an attack group calling itself the Shadow Brokers. For more information, see our blogs: Antivirus Protection Dates Initial Rapid Release […]
Growing up before the age of the internet and social networks has left many older users unprepared for risks looming in the virtual world. From that perspective, today’s kids are lucky, as the best cybersecurity practices, such as good password hygiene, are at hand. So, if you are not exactly the most security savvy of […]