Menu

Latest articles

Samsung’s default mobile browser now supports ad blocking

Type: Vulnerability. Microsoft Internet Explorer is prone to a security-bypass vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a security-bypass vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a security-bypass vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to an information disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Oracle's Java plug-in move no surprise, but is JavaWS the answer?

LinuxSecurity.com: Breaking encryption technology used by terrorists and criminals poses a frustrating dilemma for intelligence agencies and, most recently, congressional lawmakers.

LinuxSecurity.com: The NSA is publicly moving away from cryptographic algorithms vulnerable to cryptanalysis using a quantum computer. It just published a FAQ about the process: Q: Is there a quantum resistant public-key algorithm that commercial vendors should adopt?

LinuxSecurity.com: Malwarebytes says it could take three to four weeks to fix security flaws found by Google in its popular anti-malware product .

LinuxSecurity.com: Several security issues were fixed in QEMU.

Where do US presidential candidates stand on privacy and surveillance?

LinuxSecurity.com: There is a big problem brewing in the Internet. You may have noticed that big attacks that disrupt networks or servers’ ability to deliver traffic, called Distributed Denial of Service (DDoS), are showing up in the news more often. You may not know that, officially, documented attacks are happening at the scale of several […]

LinuxSecurity.com: Security fix for CVE-2016-0738

LinuxSecurity.com: Backport of the patch for CVE-2015-5295

Android has some critical remotely-exploitable security holes. But can you get the patch?

Remote code execution vulnerabilities have been found in the Android operating system, and patches released for Nexus devices. But what about your smartphone? Is there a patch for you, and can you get your hands on it? The post Android has some critical remotely-exploitable security holes. But can you get the patch? appeared first on […]

You need these critical Android updates – but will you get them?
Goodbye and good riddance: Oracle finally ditches Java browser plug-in
Apple’s Siri finally stops sending abortion seekers to adoption centers
Average successful hack nets less than $15,000
Decrypt SSL traffic to detect hidden threats
Police train birds of prey to take out drones
UK council ‘thwarts ransomware attack’

Lincolnshire County Council has successfully thwarted attempts by cybercriminals to extort money out them and brought most of its systems back online, almost one week on from the ransomware attack. The post UK council ‘thwarts ransomware attack’ appeared first on We Live Security.

5 steps to make threat intelligence work for you
Ruby on Rails fixes multiple input validation vulnerabilities
Latest Nginx updates address three security flaws

LinuxSecurity.com: Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 Supplementary. Red Hat Product Security has rated this update as having Critical security [More…]

LinuxSecurity.com: Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security [More…]

LinuxSecurity.com: Updated java-1.8.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having Critical security [More…]

LinuxSecurity.com: Updated java-1.7.1-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 6 and 7 Supplementary. Red Hat Product Security has rated this update as having Critical security [More…]

LinuxSecurity.com: The government’s use of a controversial invasive technology for tracking phones just got a little more controversial.

LinuxSecurity.com: Meet Adam. He’s a mid-level engineer at a mid-level software company in a cookie-cutter California office park. He can code a handful of languages, has a penchant for computer vision and enjoys soccer and skiing. In short, Adam has little to distinguish him from legions of other programmers in the Bay Area.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a security-bypass vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote privilege-escalation vulnerability; fixes are available.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Risk Level: Very Low. Type: Trojan, Virus, Worm.

The security review: BlackEnergy, CES 2016 and Windows 10

Highlights from the last seven days in information security include the return of the BlackEnergy trojan and security insights from CES 2016. The post The security review: BlackEnergy, CES 2016 and Windows 10 appeared first on We Live Security.

CES 2016: Day 2 – making smarter cars

Car security is rising to the fore here at CES 2016, which is not altogether surprising as 2015 was the year when car hacking really crossed over into the mainstream. The post CES 2016: Day 2 – making smarter cars appeared first on We Live Security.

Ransom32, a new Filecoder in sight

A new ransomware named Ransom32 poses as Google Chrome and is distinguished from similar threats by its weight. The post Ransom32, a new Filecoder in sight appeared first on We Live Security.

Uber agrees to $20,000 penalty over poor data security practices

The app-based taxi company Uber has agreed to pay a $20,000 penalty for poor data security practices and to reform its privacy policies. The post Uber agrees to $20,000 penalty over poor data security practices appeared first on We Live Security.

Should I stay or should I go … to Windows 10?

It has been almost half a year since Microsoft released Windows 10, and the decision whether or not to migrate computers to this latest release of Microsoft’s flagship operating system is going to be on the minds of administrators for 2016, says ESET’s Aryeh Goretsky. The post Should I stay or should I go … […]

CES 2016: Day 1 – surviving the swarm

As ever, ESET is once again in attendance at CES in Las Vegas, offering you expert insight into all the security aspects of this year’s show, which, from what have seen so far, is a key focus for CES in 2016. The post CES 2016: Day 1 – surviving the swarm appeared first on We […]

Time Warner Cable: Customer data ‘may have been compromised’

Time Warner Cable, one of the biggest cable telecommunications companies in the US, has revealed that some of its customer data ‘may have been compromised’. The post Time Warner Cable: Customer data ‘may have been compromised’ appeared first on We Live Security.

5 of the most devastating data breaches of 2015

Data breaches got bigger, brasher and more devastating in 2015. In this feature, we look at how some of the biggest came about and the impact they had. The post 5 of the most devastating data breaches of 2015 appeared first on We Live Security.

UK police force hire ‘Britain’s greatest fraudster’ to help tackle cybercrime

Once described as ‘Britain’s greatest online fraudster’, reformed Tony Sales has been hired by West Midlands Police in the UK to help tackle ongoing cybercrime. The post UK police force hire ‘Britain’s greatest fraudster’ to help tackle cybercrime appeared first on We Live Security.

Gozi trojan coder free after being sentenced to time served

Deniss Calovskis, one of the men found to be responsible for the Gozi trojan, is free to return home to Latvia after being sentenced to time served. The post Gozi trojan coder free after being sentenced to time served appeared first on We Live Security.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low.

Risk Level: Very Low. Type: Trojan.

Type: Vulnerability. Microsoft VBScript is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Oracle Java SE is prone to a remote security vulnerability; fixes are available.

Type: Vulnerability. Adobe Flash Player is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. GNU Bash is prone to remote code execution vulnerability; fixes are available.

Type: Vulnerability. Adobe Flash Player is prone to an unspecified remote code-execution vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

7 easy steps to Internet street smarts

Whether or not you were born in a big city, you quickly learn the rules of walking in congested public areas, full of people who want your money. You learn what areas and which people to avoid. You learn to walk like you know where you’re going and to ignore strangers trying to get your […]

Waste of time or wise investment? Two sides of user security training

I often get in arguments with computer security experts who declare such-and-such computer defense is worthless because it isn’t perfect. No topic exemplifies these types of debates better than the value of user education. On one side, you have people who believe that user education is a crucial part of any computer security defense. The […]

Evil conspiracy? Nope, everyday cyber insecurity

Last Wednesday, the world’s largest stock exchange went down for half a day, the world’s fifth-largest airline grounded its planes for a few hours, and The Wall Street Journal’s home page went missing, all within a few hours of each other. No wonder speculation was rife that a large-scale cyber attack was under way. But […]