Menu

Latest articles

Several security vulnerabilities were found in botan1.10, a C++ library which provides support for many common cryptographic operations, including encryption, authentication, X.509v3 certificates and CRLs. CVE-2015-5726 The BER decoder would crash due to reading from offset 0 of an empty vector if it encountered a BIT STRING which did not contain any data at all. […]

Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-1660 Atte Kettunen discovered an out-of-bounds write issue. CVE-2016-1661 Wadih Matar discovered a memory corruption issue. CVE-2016-1662 Rob Wu discovered a use-after-free issue related to extensions. CVE-2016-1663 A use-after-free issue was discovered in Blink’s bindings to V8. CVE-2016-1664 Wadih Matar discovered a way to spoof […]

Two highly dangerous OpenSSL security bugs have been patched

Posted by Anthony Pell    New mercurial packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. [More Info…] [slackware-security] mercurial (SSA:2016-123-01) New mercurial packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware […]

Git contains multiple vulnerabilities that allow for the remote execution of arbitrary code. – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – Gentoo Linux Security Advisory GLSA 201605-01 […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Slackware: 2016-123-01: mercurial: Security Update Gentoo: 201605-01 Git: Multiple vulnerabilities Ubuntu: 2957-2: Libtasn1 vulnerability Fedora 23 php-5.6.21-1.fc23 Ubuntu: 2958-1: poppler vulnerabilities Ubuntu: 2957-1: Libtasn1 vulnerability Red Hat: 2016:0708-01: java-1.6.0-ibm: Critical […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Slackware: 2016-123-01: mercurial: Security Update Gentoo: 201605-01 Git: Multiple vulnerabilities Ubuntu: 2957-2: Libtasn1 vulnerability Fedora 23 php-5.6.21-1.fc23 Ubuntu: 2958-1: poppler vulnerabilities Ubuntu: 2957-1: Libtasn1 vulnerability Red Hat: 2016:0708-01: java-1.6.0-ibm: Critical […]

poppler could be made to crash or run programs if it opened a speciallycrafted file. ========================================================================== Ubuntu Security Notice USN-2958-1 May 02, 2016 poppler vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 15.10 – Ubuntu 14.04 LTS – Ubuntu 12.04 LTS Summary: poppler could be made to crash […]

Libtasn1 could be made to hang if it processed specially crafted data. ========================================================================== Ubuntu Security Notice USN-2957-1 May 02, 2016 libtasn1-3, libtasn1-6 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 15.10 – Ubuntu 14.04 LTS – Ubuntu 12.04 LTS Summary: Libtasn1 could be made to hang if it […]

New anti-hacking law promises life imprisonment to vehicle hackers
PwnedList Gets Pwned, shutting down service in few days
Third party risks ‘ a serious risk’

��}��8��oWD�LaJm��Q��,y��k���.���c{ I��H�G���؍�}���’�}�y��@��T*��0E�D”3�H$���>{s��׷�ɏ�^�|��h��Pw�W���|�?`c�x�#2�”��0���Ϙ���s�єQkp���f,����>��E_9�܈���n�3���W_��ed`���!��q4�b���W��’ډ7�id��,���̚�|U��X_�����(Szn[Ѵo��d��”�kG6u�Ф�w� Mg�}�BfƁ-tӛs_�Hє�Xh�w�� i�Ρ���;��jy7�C��#��G����YdnGS�F4m��(�#� �p`�тvx�����F( ��^�w�����!��d�h��l�04e��G�`B]�7>�!�Ґ�s��0�� ���G�nT�����l�{��I�ւ��o=����f�pm?96hkb�m����v�]g��=��>h�����f��vh{{k�!�}T���c��m�OY��$$}�Yѐ���Ht������� ?�����8�^t?JK������zq`2���;���B�&����NlaKg!�+k0�2�N�Ao���`��w�~�]c��c�k�m�Zf�s�X ��|Ab�G:�2{�0����@�ٲ�>a7v/���J�R�����ݿo�c�q��� K�”O5��枯����#��u�K�$�3v�D���+&@�^}x����b�����~ko���m���f��j7[�y�hD��e��;̝D�A��G��=@X�= �}�߷��/p�j����[��*��ol6��v�R��54���<6�00���d��[��§�wt�D���DiB�:�}�Z'S۱f� [�&9�q]�?��̇YƂ��&R_pj7��go^�@���� u�5��)�4?g��^Ҍ.`#_����7&y9� h|�S�z~]|i� �,x�(�k(вj���,�5i��4[��,j�FJD5��PC��m�p���Vm.(�VyV�$�Y�Б��)��n��2��I����W����Ǭ���<�R�ܿ?֣�|l`9����T�ټj]ղ���Έ@Mhb�dU�X�ϐb΂E�g���’�F-��5�,��R�bx�dxU�”V�GUbl�T�_�;�b}��;��p������v=�A4`B6����޵/<�A)AI���/�3�ԍ�t�XlLc'J���i|X�N�K/�[��dd!�����` v;�:�8���h�eRn���Eu�F��B�?G��Q@�z�C�f ��j�tL]sR_�g�b,��@����ݿ���è`�M�`Qޒ�%��(�F��Ӵx5K�9�+��x�u��螹��dMϬ�B-�U����i����D� ;K(���]u�/|�v��= pS(�`��F�Jθqq�y�6Cw�φ,�@ɡQ��t�ͥ���uJ����h`N�&�-4�}߀�kC�ň�0�8��؄Z���2� g�5�.�Q;�/8�d�K�F���[���,���&,�’����ES��gQTZ��`�Y��)@5~����rv��@��.Eǧ�!�}GnA>��9� �e�&���t�6�1�0�cx���Q��a9Ì��ШJ�p�F�r �/��Y�<�e�J��K�}Z�(�AG�py��y,��cҸ�ou��GRX�xd�3�SJ���#��N�+&Ԋ��忀��{�0��]��a~6��D�l/x��Y�uw��=T%q�� �}ad�,�IZ3��,Q��d���BO/�k�w�$�V����9R��3���s�q�w;�� �������W3Ek��Yrݦ|���.�J-s�s�Z�!r��)�r�$6�f �?{���~�Ӄ^(��B�6�}e��ܽ�r_P+�� ����9P21;ɟl��+VU,S,'[���f��?�3x��]�Uͥ�bg�W^±�(�Ȑ�#/��84R�� �!?��#�� ��}��8��oWD�LaJm��Q��,y��k���.���c{ I��H�G���؍�}���’�}�y��@��T*��0E�D”3�H$���>{s��׷�ɏ�^�|��h��Pw�W���|�?`c�x�#2�”��0���Ϙ���s�єQkp���f,����>��E_9�܈���n�3���W_��ed`���!��q4�b���W��’ډ7�id��,���̚�|U��X_�����(Szn[Ѵo��d��”�kG6u�Ф�w� Mg�}�BfƁ-tӛs_�Hє�Xh�w�� i�Ρ���;��jy7�C��#��G����YdnGS�F4m��(�#� �p`�тvx�����F( ��^�w�����!��d�h��l�04e��G�`B]�7>�!�Ґ�s��0�� ���G�nT�����l�{��I�ւ��o=����f�pm?96hkb�m����v�]g��=��>h�����f��vh{{k�!�}T���c��m�OY��$$}�Yѐ���Ht������� ?�����8�^t?JK������zq`2���;���B�&����NlaKg!�+k0�2�N�Ao���`��w�~�]c��c�k�m�Zf�s�X ��|Ab�G:�2{�0����@�ٲ�>a7v/���J�R�����ݿo�c�q��� K�”O5��枯����#��u�K�$�3v�D���+&@�^}x����b�����~ko���m���f��j7[�y�hD��e��;̝D�A��G��=@X�= �}�߷��/p�j����[��*��ol6��v�R��54���<6�00���d��[��§�wt�D���DiB�:�}�Z'S۱f� [�&9�q]�?��̇YƂ��&R_pj7��go^�@���� u�5��)�4?g��^Ҍ.`#_����7&y9� h|�S�z~]|i� �,x�(�k(вj���,�5i��4[��,j�FJD5��PC��m�p���Vm.(�VyV�$�Y�Б��)��n��2��I����W����Ǭ���<�R�ܿ?֣�|l`9����T�ټj]ղ���Έ@Mhb�dU�X�ϐb΂E�g���’�F-��5�,��R�bx�dxU�”V�GUbl�T�_�;�b}��;��p������v=�A4`B6����޵/<�A)AI���/�3�ԍ�t�XlLc'J���i|X�N�K/�[��dd!�����` v;�:�8���h�eRn���Eu�F��B�?G��Q@�z�C�f ��j�tL]sR_�g�b,��@����ݿ���è`�M�`Qޒ�%��(�F��Ӵx5K�9�+��x�u��螹��dMϬ�B-�U����i����D� ;K(���]u�/|�v��= pS(�`��F�Jθqq�y�6Cw�φ,�@ɡQ��t�ͥ���uJ����h`N�&�-4�}߀�kC�ň�0�8��؄Z���2� g�5�.�Q;�/8�d�K�F���[���,���&,�’����ES��gQTZ��`�Y��)@5~����rv��@��.Eǧ�!�}GnA>��9� �e�&���t�6�1�0�cx���Q��a9Ì��ШJ�p�F�r �/��Y�<�e�J��K�}Z�(�AG�py��y,��cҸ�ou��GRX�xd�3�SJ���#��N�+&Ԋ��忀��{�0��]��a~6��D�l/x��Y�uw��=T%q�� �}ad�,�IZ3��,Q��d���BO/�k�w�$�V����9R��3���s�q�w;�� �������W3Ek��Yrݦ|���.�J-s�s�Z�!r��)�r�$6�f �?{���~�Ӄ^(��B�6�}e��ܽ�r_P+�� ����9P21;ɟl��+VU,S,'[���f��?�3x��]�Uͥ�bg�W^±�(�Ȑ�#/��84R�� �!?��#��

How to recover from an Alpha ransomware attack
The IoT company behind the curtain
Think that printer in the corner isn’t a threat? Think again
Thousands of taxpayers affected by W-2 Phishing attacks this year
Privacy Activists Cheer Passage of Email Privacy Act, Brace for Senate Battle
Two Tips to Keep Your Phone’s Encrypted Messages Encrypted
Microsoft’s CEO explains why his company sued the U.S. government
Google renews focus on Mediaserver flaws in latest Android Security Bulletin
Tick-tock: Time is running out to move from SHA-1 to SHA-2

Are you ready for the coming SHA-1 deprecation deadline? I suspect most companies aren’t. They don’t know about the issue — and the pending January 1, 2017 deadline. Others are probably aware that there is something called “SHA-1 deprecation” and have gotten some browser certificate errors, but don’t fully appreciate the need to be substantially […]

Edward Snowden – the movie

Several vulnerabilities were discovered in OpenSSL, a Secure Socket Layer toolkit. CVE-2016-2105 Guido Vranken discovered that an overflow can occur in the function EVP_EncodeUpdate(), used for Base64 encoding, if an attacker can supply a large amount of data. This could lead to a heap corruption. CVE-2016-2106 Guido Vranken discovered that an overflow can occur in […]

Anonymous Target Bank of Greece Website with Massive DDoS Attack

It was discovered that a heap overflow in the Poppler PDF library may result in denial of service and potentially the execution of arbitrary code if a malformed PDF file is opened. For the stable distribution (jessie), this problem has been fixed in version 0.26.5-2+deb8u1. For the testing distribution (stretch), this problem has been fixed […]

Microsoft Planning to Use DNA for Data Storage

An update for java-1.6.0-ibm is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Critical: java-1.6.0-ibm security update Advisory ID: RHSA-2016:0708-01 Product: Red Hat Enterprise Linux Supplementary Advisory […]

Posted by Anthony Pell    An update for mercurial is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: mercurial security update Advisory ID: RHSA-2016:0706-01 […]

Posted by Anthony Pell    An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: chromium-browser security update Advisory ID: RHSA-2016:0707-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2016-0707.html […]

An update for rh-mysql56-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Critical: rh-mysql56-mysql security update Advisory ID: RHSA-2016:0705-01 Product: Red Hat Software Collections Advisory URL: https://rhn.redhat.com/errata/RHSA-2016-0705.html Issue date: 2016-05-02 CVE Names: CVE-2015-4792 CVE-2015-4800 CVE-2015-4802 […]

Posted by Anthony Pell    Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3565-1 security@debian.org https://www.debian.org/security/ Sebastien Delafond May 02, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : botan1.10 CVE ID : CVE-2015-5726 CVE-2015-5727 CVE-2015-7827 CVE-2016-2194 CVE-2016-2195 CVE-2016-2849 Debian Bug : 817932 822698 Several security vulnerabilities were found in botan1.10, a C++ library which provides support for […]

Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3564-1 security@debian.org https://www.debian.org/security/ Michael Gilbert May 02, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : chromium-browser CVE ID : CVE-2016-1660 CVE-2016-1661 CVE-2016-1662 CVE-2016-1663 CVE-2016-1664 CVE-2016-1665 CVE-2016-1666 Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-1660 Atte Kettunen discovered an out-of-bounds write issue. CVE-2016-1661 Wadih Matar discovered a […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Red Hat: 2016:0708-01: java-1.6.0-ibm: Critical Advisory Red Hat: 2016:0706-01: mercurial: Important Advisory Red Hat: 2016:0707-01: chromium-browser: Important Advisory Red Hat: 2016:0705-01: rh-mysql56-mysql: Critical Advisory Debian: 3565-1: botan1.10: Summary Debian: 3564-1: […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Red Hat: 2016:0708-01: java-1.6.0-ibm: Critical Advisory Red Hat: 2016:0706-01: mercurial: Important Advisory Red Hat: 2016:0707-01: chromium-browser: Important Advisory Red Hat: 2016:0705-01: rh-mysql56-mysql: Critical Advisory Debian: 3565-1: botan1.10: Summary Debian: 3564-1: […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Red Hat: 2016:0708-01: java-1.6.0-ibm: Critical Advisory Red Hat: 2016:0706-01: mercurial: Important Advisory Red Hat: 2016:0707-01: chromium-browser: Important Advisory Red Hat: 2016:0705-01: rh-mysql56-mysql: Critical Advisory Debian: 3565-1: botan1.10: Summary Debian: 3564-1: […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Red Hat: 2016:0708-01: java-1.6.0-ibm: Critical Advisory Red Hat: 2016:0706-01: mercurial: Important Advisory Red Hat: 2016:0707-01: chromium-browser: Important Advisory Red Hat: 2016:0705-01: rh-mysql56-mysql: Critical Advisory Debian: 3565-1: botan1.10: Summary Debian: 3564-1: […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Red Hat: 2016:0708-01: java-1.6.0-ibm: Critical Advisory Red Hat: 2016:0706-01: mercurial: Important Advisory Red Hat: 2016:0707-01: chromium-browser: Important Advisory Red Hat: 2016:0705-01: rh-mysql56-mysql: Critical Advisory Debian: 3565-1: botan1.10: Summary Debian: 3564-1: […]

Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3563-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff May 01, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : poppler CVE ID : CVE-2015-8868 It was discovered that a heap overflow in the Poppler PDF library may result in denial of service and potentially the execution of arbitrary code if a malformed PDF […]

Consider Selfie Sticks Old-School — Time to use Hover Drones for Selfies
IT leaders pick productivity over security
Microsoft to begin SHA-1 crypto shutoff with Windows 10’s summer upgrade
TrueCrypter ransomware lets you pay with Amazon gift cards
Qatar National Bank Accepts Data Breach while Hackers Release Inside Video

Several vulnerabilities were discovered in tardiff, a tarball comparison tool. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-0857 Rainer Mueller and Florian Weimer discovered that tardiff is prone to shell command injections via shell meta-characters in filenames in tar files or via shell meta-characters in the tar filename itself. CVE-2015-0858 Florian Weimer […]

Lifeboat Hacked, Millions of Minecraft Passwords Stolen
New Android Malware RuMMS Targeting Users through Smishing

APPLE-SA-2016-04-28-1 OS X: Flash Player plug-in blocked Subject: APPLE-SA-2016-04-28-1 OS X: Flash Player plug-in blocked From: Apple Product Security <email@hidden> Date: Thu, 28 Apr 2016 15:05:32 -0700 —–BEGIN PGP SIGNED MESSAGE—– Hash: SHA512 APPLE-SA-2016-04-28-1 OS X: Flash Player plug-in blocked Due to security and stability issues in older versions, Apple has updated the web plug-in […]

Security Bulletin: Steps you should take to fix a Java SE security risk on your computer

Welcome to a very unusual cybersecurity article! Why is it unusual? The title of this Security Bulletin and most of its content was provided by Oracle, the maker of the Java computer programming language. In fact, ESET is publishing this information on We Live Security at the request of Oracle. And Oracle made the request […]

We’re Going HTTPS: Here’s How WIRED Is Tackling a Huge Security Upgrade
Suspect jailed indefinitely for refusing to decrypt hard drives
How to Find the Right Penetration Testing Company
Former Tor developer created malware for the FBI to hack Tor users
Ghost Squad DDoS Black Lives Matter Website Because ‘All Lives Matter’

  Bangladesh Bank Still Attempting to Recover In the months following one of the largest cyber heists in history, the Bangladesh Central Bank is still in the process of retrieving the $81 Million that was stolen from it, and which remains unaccounted for. The latest update comes from SWIFT, the financial transaction co-op, that has […]

Vulnerability allows real-time tracking of 50 million Waze nav app users
Canadian Gold-Mining Company Hacked, 14.8 GB Data Stolen
Pirate Bay hit by malvertising attack, drops Cerber ransomware
FBI Given Powers by Supreme Court To Hack Any Device They Want, How They Want

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Fedora 23 i7z-0.27.2-16.20150629gitec09c4f.fc23 Fedora 22 libtasn1-4.8-1.fc22 Fedora 23 kernel-4.4.8-300.fc23 Debian: 3560-1: php5: Summary Ubuntu: 2952-2: PHP regression Ubuntu: 2950-2: libsoup update Debian: 3559-1: iceweasel: Summary Slackware: 2016-117-01: mozilla-firefox: Security Update […]

Update to 4.8 ——————————————————————————– Fedora Update Notification FEDORA-2016-96bfd9e873 2016-04-27 17:57:40.684989 ——————————————————————————– Name : libtasn1 Product : Fedora 22 Version : 4.8 Release : 1.fc22 URL : http://www.gnu.org/software/libtasn1/ Summary : The ASN.1 library used in GNUTLS Description : A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Fedora 23 i7z-0.27.2-16.20150629gitec09c4f.fc23 Fedora 22 libtasn1-4.8-1.fc22 Fedora 23 kernel-4.4.8-300.fc23 Debian: 3560-1: php5: Summary Ubuntu: 2952-2: PHP regression Ubuntu: 2950-2: libsoup update Debian: 3559-1: iceweasel: Summary Slackware: 2016-117-01: mozilla-firefox: Security Update […]

Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3560-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso April 27, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : php5 CVE ID : CVE-2015-8865 CVE-2016-4070 CVE-2016-4071 CVE-2016-4072 CVE-2016-4073 Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development. The vulnerabilities are addressed by upgrading PHP to the […]

USN-2952-1 caused a regression in PHP. ========================================================================== Ubuntu Security Notice USN-2952-2 April 27, 2016 php5 regression ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 15.10 Summary: USN-2952-1 caused a regression in PHP. Software Description: – php5: HTML-embedded scripting language interpreter Details: USN-2952-1 fixed vulnerabilities in PHP. One of the […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Fedora 23 i7z-0.27.2-16.20150629gitec09c4f.fc23 Fedora 22 libtasn1-4.8-1.fc22 Fedora 23 kernel-4.4.8-300.fc23 Debian: 3560-1: php5: Summary Ubuntu: 2952-2: PHP regression Ubuntu: 2950-2: libsoup update Debian: 3559-1: iceweasel: Summary Slackware: 2016-117-01: mozilla-firefox: Security Update […]

Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3559-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff April 27, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : iceweasel CVE ID : CVE-2016-2805 CVE-2016-2807 CVE-2016-2808 CVE-2016-2814 Multiple security issues have been found in Iceweasel, Debian’s version of the Mozilla Firefox web browser: Multiple memory safety errors and buffer overflows may lead to […]

IBM brings blockchain framework to IBM Cloud
Phishing apps posing as popular payment services infiltrate Google Play
German Nuclear Power Facility Plagued with Malware since 2008
Supreme Court approves rule change that expands FBI computer search powers
Slack security practices could lead to hackers eavesdropping on corporate internal chat systems
Cybercriminals ‘increasingly relying upon ransomware’

��}�r۸���j�a� ��H�Ö;Rn�d��|�83��I�E��D�”8�ɸ����?�V�V�+l�>��}��$� ��!Y��df79g��Fw��h��y����/o���߾|�����Ixc�i~����ٰ}�9�ja�۞��15�-�ѳ������n���|��6����t�|��@�49ij�̜Q�=�&���!�Z��HY�Nid�w�� �ɡ�����1�v�F�G�_����:d���A��a����4�PƷ��������Ðڑ돽9vmO$ �OBۏ�tf������p[��C#�뇬b4��؊�F�’;���Y� �p�B�Č������’�QL����6���>�1vǜ]”�E�45�����,�7�f�k5w��k�#�����2�ƂR���Q����˸�P*Q��@u�8/�v�C�.-�#�����?�8/�6 =�/2�(�'(# “?S��’Dz�ʺr���_�Y��J�<4�s*@m�h4w���A�y��އ��͕��M�Z렽s�� �#@�{s8��ӵVѨI�1ۉ���������XiM�gLÃ�:JkQ2���[R�*!K�ݞ�X��������lj��*�YR���2���,��85[�f�H?{M/���'c4O���é}n��ZJܚ���f��,�Sv��8�Q�H�|�vD=w ���zoE��d��ũ���{�{��}o�/���-��ASP��1�X�v�Q�΀��K�P�i���F��V���o��&hY�]�C�~p�u�є���d���Ќ�a�Fd+ٱ1�Ve����=~”Q�p��աU��;G�sj��%�8j�r�.�z#w���@�� ��/8�뗀���/��ޝ� ������^�8�j�&�K�1l��B����8 ��L�q��C_�6 ���j�,W^/@yPGk�wZ�]QՋ�#%P�Ox���|�m�p��q>h���<+vt,p�@���b����Af���������T����~�F��8���x&kXN��7�,U��/kBW56L�GKtW5�CK�U��A�WP���t�h�zt��?9 ���-ǍϞ���L���8�~�0e��&`������N�;���E��|[�����I��^�#(��,;�P�h�%8´G^ix��� Z0![E����wϙᡔ�$m��O�3w�ls�q��N�8�w�L��o��7D}�R!f��͛`��L@U��=2�2�n��D��6��� T�Ñq�Xšl;tpf �ak��l���b{�����pn��� 5-s���fg�p;� vؘ����-�^����������x5:s��Y4�=�c{��72����N]��=H����-�k���Y��Kp��@���T@���ߍ��HX��9s�$v>J�9b���]�P���z,<�;���������E��b�jZ���4�T�NSʵZf[�/���]c�C�#R<��޶Q���Sn1v�Rt��(94�w���ה��휃R�0?R;N�&�� �ބ��k�ݎ�4�N�$f� T�I-�l)�� n����Z�����l-[���˿t7N��FZ���1�`��hJ� sz*�Z��%,<ƽ��KhT%Z4�c�b�/��i�-H ����#�d4��H���_��Nj��y�~(��#R��oM��G2X�h�3�SJ���#��iCW�P+���u����.��yH�83} �e�x��H?T��!Q���py��U�La�b5Ax`����XHk�J�D��Q����AMj�tX�q/����Do��t��;`Xt蒸��x�Ӿ02�>ˤ���5>-��= �y�;��������F��ca���G#��y^�s;0J (�S0�)��r���H2�`o�Г�s���D�y! *�����t�G����d��9��{1L�^�h�:�;o���ܗ���e��$w�SڢqAKz�~�����+�� @ ���a��F|T�c�Ā����=��*|������}i�y���/�on����8�Y�R��n�����u�_`�E�y.)��4���p�g�=����A�A��G}O�(��X?��Og��Fku�.pB�A�I{��R�Y����*�i|s�W懆��;=}�/������n�����P{=�9N������ � ����}����3Ec��^r�f|�`��c�����,�9������4T�f �?��N��m�:����C(�Cώ��6��sܽ�r_P+�� ��� Vs�)!<��N�fFY���V�F �cc|AB�� �x��JIU�b=����.�D� 4ΉC��/� �ɳ(����d��_��z�:4���d��J����(@ft8�����J`�Ki��W��G�L�����MeV��|�l�%0Ɖ,�ɛ�vʜ�Ir��1p�$��P���Dك�i���0� Z1妠[��0���8��Uŋ�6���p��j�Z^Ui�I&lJ�lS�U�3�hE�Zn��iM�(Fg���V�`��������;MI��$q�|9��V�#’c�+��[���4��”�^��U3d�Ѻr.��ϔ@h0���V�hA_X2@���r�5 �/7��uZ��rz^e������%t(��T��_�ɲ�_uY�.�ް�AM�JR�����%�+X��Lsr�V�4v-�1�;�Y��-Y|G��$��� N)�(K����?O�O��I�-���[�#oXG�mt�*8��-�n�;����%�ah�o{��U�#ZR:�Br�@Sy[�[���S��,�F �3..�r@��zw;�y”Gs�@����~�۪�z�BnY[.�M�^ե΃�r]�6P-B5Eų1��=�iN��i�Q؎D8H�EsS��]�f�v� Yఙ���eV!���´��J;���fa;����I�2L@�����i��>H�ۨ �łg�d�rm���e�w���Ws�:t=Y$���#������9�$�.�hI�ݟ=Rl@����u��Q �@���l����R�ﶛ��tp� H�+4)ox�-���)Y���&�8�����# R��#�UX�a�8�kW�#cqwn �J���t����Wz��O��Yc��ΰ⢓*�Ւ���l�{ )6��~{l��.��to*+A�����Ng s�:��”y�J�^�U�Lx^����҂�QS�z’�5�k ��rU�J��k����a1>C�tD�8 �3���/���WT��ޗ�bT��tYM}-��]�̍�W��V�yn�O`�> o�6�d��)^A,�.��MNZ79b�+`��?}0Gϟ�2_��i’�����r’H��~���+Y����t$�GF0�K���r�9 […]

How to tell if you’ve been hit by fake ransomware
Got ransomware? These tools may help
I’m so glad I don’t have a Filofax
Spammed-out malware campaign contains offensive hidden message for anti-virus CEO
Cop Exploited iPhone App to Secretly Watch Mom Breastfeeding

Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-2167 Daniel Shahaf and James McCoy discovered that an implementation error in the authentication against the Cyrus SASL library would permit a remote user to specify a realm string which is a prefix of the […]

Waze Navigation App Vulnerable, Allow Hackers to Spy on Users

Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development. The vulnerabilities are addressed by upgrading PHP to the new upstream version 5.6.20, which includes additional bug fixes. Please refer to the upstream changelog for more information: For the stable distribution (jessie), these problems have been fixed in version […]

Multiple security issues have been found in Iceweasel, Debian’s version of the Mozilla Firefox web browser: Multiple memory safety errors and buffer overflows may lead to the execution of arbitrary code or denial of service. For the oldstable distribution (wheezy), these problems have been fixed in version 38.8.0esr-1~deb7u1. For the stable distribution (jessie), these problems […]

Ex Tor developer now working for government, responsible for Tor malware
Oliver Stone’s Snowden Movie Trailer Released and it’s Awesome
Ransomware is everywhere, but even black hats make mistakes

��}����o���Q�D����7튫OZɶΑlE�>�c;[ $G;��e������_�J��+�*Op�’�$� �s!�˥d;�α4��Fw����{���������^�<���I�O�ߣ��95�/�sٯ��^,��8��Ɔ�W�������F”�’��8�1��4�{b��Ӏ����A�x��X�z|*�KG�?���3ǎ’}[:CaЏs����4�5��ɞ����3�&8}1x�_��n��Ű{ջ�ja]rױy,�vG{�|��{�dgo碌��}���nw�O�e��yb�` B�=xB�l8���1�”2k��!�|��]oX��Ξ�ޱ�V�u�p”c�%�?=��f �������!SDB?a<'�w}� �l�;GͰ��!wcz��Z=[�?{��^�W��֚��锇�ڒ�x�Y��6ʒ&P��-?RK �O�㭒�%?�,c��������>}�-�d�x&M�hI�ѭ���˷�c(qg�x�?3�g���o�S���w���w��eG�~�”sf���’�H�d �P�dQݟ����~�’�֪ASP��1��$���t<*�C�&�OHA����-���U6`J&0��6z���1��~���#�ֽQ③k�֠5l�K3���.yȆ�IT�]�����6P��l��91Y�W��F�kךG����=x`�#�u����mb���XHs?�����#&�u�+�$�3r����9VL�4Nc����(�'`ş�h���v�Z�{�n+{n�7[�V��������7/M��8��D�y��}���U����}��G�6:{-���4A���?7���:�3��4U��<�Q8�sD��[lUՋ������F }�ZZ5y��:�8��6�c���!'����TL/64LO0�He|A�n��}��

Say goodbye to cyber stresses in the workplace

Are you worried about cybercrime? Does the idea of a data breach keep you up at night? Do you suffer from disquiet at the thought of your employees downloading malicious software? Then you’re not alone. In recent years, as the workplace has become more digital in scope, such concerns have become increasingly commonplace. This is […]

Pirate Bay visitors infected with crypto-ransomware via bad ads
Hackers don’t just want your credit cards, now they want the pattern of your life
U.S. cyberwar against ISIS could use methods and tactics criminals use against enterprises
In rare unanimous move, House passes bill to protect email and cloud privacy
Malware found at a German nuclear power plant

Malware has been found on a computer at Gundremmingen nuclear power plant in Germany, it has been revealed. Reuters reported that RWE, the electric utilities company responsible for operating the plant, does not consider it a threat as the infected computer is not connected to the internet. The malware includes Conficker, which has been described […]

Anonymous Leaks 1TB of Data from Kenya’ Ministry of Foreign Affairs

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in breakouts of the Java sandbox, denial of service or information disclosure. For the stable distribution (jessie), these problems have been fixed in version 7u101-2.6.6-1~deb8u1. We recommend that you upgrade your openjdk-7 packages.

Sextortion, Cyber Stalking: U.S. Embassy Official Facing 4 Years in Prison

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Slackware: 2016-117-01: mozilla-firefox: Security Update Fedora 22 xstream-1.4.9-1.fc22 Gentoo: 201604-04 libksba: Multiple vulnerabilities Gentoo: 201604-05 Wireshark: Multiple vulnerabilities Fedora 23 xstream-1.4.9-1.fc23 Fedora 23 rpm-4.13.0-0.rc1.13.fc23 Red Hat: 2016:0695-01: firefox: Critical Advisory […]

Security fix for CVE-2016-3674 ——————————————————————————– Fedora Update Notification FEDORA-2016-250042b8a6 2016-04-26 16:44:25.072543 ——————————————————————————– Name : xstream Product : Fedora 22 Version : 1.4.9 Release : 1.fc22 URL : http://xstream.codehaus.org/ Summary : Java XML serialization library Description : XStream is a simple library to serialize objects to XML and back again. A high level facade is supplied […]

Welcome! Sign up! EnGarde Community Login Polls What is the most important Linux security technology? SELinux grsecurity CIS Benchmark Bastille Linux iptables LIDS   Advisories Slackware: 2016-117-01: mozilla-firefox: Security Update Fedora 22 xstream-1.4.9-1.fc22 Gentoo: 201604-04 libksba: Multiple vulnerabilities Gentoo: 201604-05 Wireshark: Multiple vulnerabilities Fedora 23 xstream-1.4.9-1.fc23 Fedora 23 rpm-4.13.0-0.rc1.13.fc23 Red Hat: 2016:0695-01: firefox: Critical Advisory […]