Risk High Date Discovered March 8, 2016 Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause […]
An update for firefox is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Critical: firefox security update Advisory ID: RHSA-2016:1217-01 Product: Red Hat Enterprise […]
A while ago, we informed you about a Ray-Ban scam campaign flooding Facebook via hacked profiles. Using fake ads that offered massive discounts, attackers tried to lure users into “buying” branded sunglasses, thus giving up their payment card details via an unsecured channel. Spread mostly via posts disguised as ads for Ray-Bans, the scam also […]
��}��6��oOU���3�b��e�c��;���m=�dslEBg(��e4�3U�;쯭ڭ�Wت}��o�=�v ^��hd’ٵs1E�F���G�99���s��٫��o���K�u�i?�*$�й�*�舌�882�jx���{4��ݻO�G���FM�ˮr�{1�b�lP�X�WW��Ul`����#w�x�(��U��/ڏO���3peP/�w�=��9�]�ҡ��c��Ա�qצ��E5�Aω��”�ti�Ui��#�j�S풆�бߓ �m��ߦ���~�칯��l�����������͟__X��EU���tی��lI`O�������흴w[��������w’O�>iu8,”�L��.HHݮ�3�FcJ�1�_�݊”�L��]%����]E�x:��S�:�4�V:�L��1 4����F|g��`�:����辦���$��� v&�o�&S’F4�i��G����ʏb�#�s~cD�H�A�CdžƁ[�8.�EbDԏ� �����d��4�B'(0����>��C��! iA9Ӎ��b���.j�}��7″&�Դ�ČE�3 ��=��.��Ğ��A�iju����L��@����n��&�{h䨧I����]C�5���|��� ��}�GŐ�G�>����q^��0v,�.,������E ��I�J��AR���G��P�9T�ph��N��U�d�:`��>��a�ք�Z;G�ã���f�� n��`�o��j��@C�h��Ǚ�#�2k%��o�Q��#%N���Hj����nL�#�m��(�L�p�,(�R�}�Y�*��_�\HZb:�2�ZP����”���~xCwq�7�/� �>}��n2r)3�?�u=��:y ����4��|� ���ȓ�M�~~ ]|�D��4|+��)в�ݽ[Bm�1j�o�fEY�6�;pJ�1vV����Ƕ�_vQ삉�Ʈ!!ʊ��:�=9Ų��b��@f������1�%eLk���.,���P��ⱆ�įz�R�z��mU��e���v��
Patrick Coleman discovered that missing input sanitising in the ADPCM decoder of the VLC media player may result in the execution of arbitrary code if a malformed media file is opened. For the stable distribution (jessie), this problem has been fixed in version 2.2.4-1~deb8u1. For the unstable distribution (sid), this problem has been fixed in […]
Two related issues have been discovered in Expat, a C library for parsing XML. CVE-2012-6702 It was introduced when CVE-2012-0876 was addressed. Stefan Sørensen discovered that the use of the function XML_Parse() seeds the random number generator generating repeated outputs for rand() calls. CVE-2016-5300 It is the product of an incomplete solution for CVE-2012-0876. The […]
The University of Calgary has handed over $20,000 CND to cybercriminals, who had launched a ransomware attack on the institution. It revealed that 10 days after its systems were affected, it has been unable to fully restore its systems back to normal. This is despite efforts by its IT department to “isolate the effects of […]
Debian: 3598-1: vlc: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3598-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff June 07, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : vlc CVE ID : CVE-2016-5108 Patrick Coleman discovered that missing input sanitising in the ADPCM decoder of the VLC media player may result in the […]
Debian: 3597-1: expat: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3597-1 security@debian.org https://www.debian.org/security/ Luciano Bello June 07, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : expat CVE ID : CVE-2012-6702 CVE-2016-5300 Two related issues have been discovered in Expat, a C library for parsing XML. CVE-2012-6702 It was introduced when […]
��}ے�F���(Q>”9&^�n�uZ-y�9���=�9���$�Aƥٴ���}ڈ݈��_0�’�%��U �I4%�{$_UYUY�Y�YYYOtn�5t��q�? � 7��a ��{2�}|��’�TT�?’�u�v�{1�b�|��į~-�7�� Yc3�x�O�vPc��b8�U��D;�’�;W��E��#^��ޯ];|�a���:v
��}�۸��o�j��O��Z$u��g,��c�Y�Ϸxf�f?�QQ$$qL�^F��N�y��JUR�WHU��˛�’I7R�E���w{/�H��ht7��ᝧ��Oy��x��������%��M� �N�t��rH�q�? �5��un=�R�܂’����MVT��&�y_9�z�v��B,�����”6��#kj���I�� c� �� ���#�zCTե�&0�ر��4�,�2ǪV�$��$t%��(��?D�p��q�x9� �Σ�U�d�:��!��a�ֆN;��N�s��>l�ׂ��6h�+��v��@� P���33’t㱖4x��iG��?��}O{�’� 0#�,�H�r����?��ЖZ����ʊ�aZ��gV@+ZEa��k~4WRڟ���N�VT��|���Bj�~xE?�~0�/�����k����tf1� %�/8g���*(qk�Ns}8��?sNh;�$”}�I�� ��!��{��s�’� F��a�!}o������~�h ��7�tآ��’:�!+-C���{$��YnbcKg{�*k����g�۳�0oG������v�����a�F-��)�M���tn���tFe���͋hEu�f��[:hzf�_���ɿJ�V�G!���ݻg�c�uO�ӣ��c�’��;����q�8%�npA�`RaƮ9Q��S ���ʼn��q�cߦ�����^kw��me���f��j7[��O�����FSw�7����57����z�V�N�ocw��#�Fg����:MT�����Ct4�5G�˅MM@���:�i|H:t������t}~H�Do�?�ҋqɣ��x���^��3 �ij�� ���b_~y�!_��K,u�bV�c�U?p����Q�0և���j����g�D}(��ȥn� E}3����z�*��;�gn������m}Y�N� �o�^�A�J/G�� qHb�#�u����7�]��Z��lz����ZT .&��e�>0�R�J%�,���w��r��y��f�$č,�s��ՍB��1����?:�Ҽ%�F�v�57�R66�s���ZS��g �!d�s�6Y��1�����~��g+��[J=�߅��g� ���.”�|)���i��/�2����҄��dB#X8?��x��}E���������ƯQ�^�myL������{h�+6[�0��_��Nٲ{��=9!]�M~��.�^E:����BB�0#�g���%4�%Zx�y1���4�Q��2�$Y��>-I ����#g8�J�$]���’ �w����´C࿓��fT/��`N��ˋJ��ixY��>$��3z�N�V��Dg��{�j�5��5���a� [=��.MG�K�4%y�Fb��&���`� V5�w%{�z��cB0�E�m�*5fv��N3e1>{&��d��UC��K�x�x���0�)���-:�]0�� Ƶ�����#]����u]qNY t�(�R�”���� 3″��{���6��J-S=(�H�J1�u�+�!��Z�)|x�”����mh�w�&��u]�Ə�h��X��E��r�:�{�Z���� ��Lw9rwxKR�^�1�b��I�8�S2f~H5�dgl�^��zFs(Fs�@��{�1�&�Ӫ�z�BlY.��^ץރ�s]�f�Q�(�F���0��ʝ����͈�����[67���a�`�)`G��l��ty�UHis�0�f��Υ/�Y��9@(�$U& �K�� �2Cg���6*n� �Y;�L[`lz��{탃�9i��I��`����7����9�ī.�hE����>)6 ��o[�ƺ��(u�OiuI6��s{���u�{�tp� �+4)oXњٟ�����(��K$:�1[���g6d>����̝[�V8vz�z{�#y�R������ev���*W��b����sUT�_G��r�)sc���U�����-lñsA�8��e���|�P��S�9xY�P�TG���,6u~�I��_�6�’��ú,x�L�k4���w[�S_�0�c�!;E2��h�q�����k]�����1@�o+��O��B����{d��Ik�”a��t,m6~_I@q`XА���t�)=��Kx䭈�=””�64m’�I8|���l3J�LV|_!Z��5l�h����{���z�{��� ��f�� a�{�( �ʻJ�V�j���%� ���O�82�0r�#��$�ە�o��qV�w�V���5:��wd��Үޭ��Q!�m���Ap�.L�u�$P���R’Ws�jƙ���D�$bQ��L��tݯ�I��6=����l���+(��g�+��Ͼ����ZW��P;})�[X�>)��C�%�,�@�h�g��*��W*��/r�)@��2�k����”`Q��5″%��5u��z r�#>(��t������=�q+`M�y#���P!�����H�G��c���g�nF�Gc����U���7��?x�{������8�|U�G����$�1^��%�6�;�~���,�x��I �� 8%!���*+֓�s�!�W^n�7��rK
Several vulnerabilities were discovered in spice, a SPICE protocol client and server library. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-0749 Jing Zhao of Red Hat discovered a memory allocation flaw, leading to a heap-based buffer overflow in spice’s smartcard interaction. A user connecting to a guest VM via spice can take […]
Red Hat: 2016:1207-01: glibc: Moderate Advisory Posted by Anthony Pell An update for glibc is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: glibc security update Advisory ID: RHSA-2016:1207-01 Product: […]
Red Hat: 2016:1206-01: jenkins: Moderate Advisory Posted by Anthony Pell An updated Jenkins package and image that includes security fixes are now available for Red Hat OpenShift Enterprise 3.2. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: jenkins security update Advisory […]
Debian: 3596-1: spice: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3596-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso June 06, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : spice CVE ID : CVE-2016-0749 CVE-2016-2150 Several vulnerabilities were discovered in spice, a SPICE protocol client and server library. The Common Vulnerabilities and Exposures project […]
Red Hat: 2016:1205-01: spice: Important Advisory Posted by Anthony Pell An update for spice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: […]
Red Hat: 2016:1204-01: spice-server: Important Advisory Posted by Anthony Pell An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: […]
Discovered: June 6, 2016 Updated: June 6, 2016 6:27:43 PM Type: Trojan Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Backdoor.Steladok is a Trojan horse that opens a back door on the compromised computer, […]
Discovered: June 6, 2016 Updated: June 6, 2016 6:39:22 PM Type: Trojan Infection Length: 140,288 bytes Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Trojan.Hookaberg is a Trojan horse that steals information from the compromised computer. Antivirus […]
Discovered: June 5, 2016 Updated: June 7, 2016 7:15:48 AM Type: Trojan Infection Length: 182,784 bytes Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows NT, Windows Vista, Windows XP Trojan.Ransomcrypt.AX is a Trojan horse that encrypts files on the compromised computer and asks the user to pay in order to […]
��}�r�Ȓ���P�O�d�x�͒I�-ۧ}Ʒ����c{ P$!�Qj�”��i��m�`#6b���~�|�ff@�HQ�v��}1Tee孲����y������Oǯ^���pM�pW}�0?�#�x�}6�”_��M��w�s��V�
Recently, Microsoft published a new password policy recommendation paper containing advice that flies in the face of conventional wisdom on the subject. Some of the contrarian viewpoints include: Eliminate long password requirements Eliminate complexity requirements Do away with password life expirations Along with this unconventional advice comes a bunch of useful suggestions: Ban common passwords […]
