An update that fixes one vulnerability is now available.
August 31, 2019
An update that fixes three vulnerabilities is now available.
August 31, 2019
An update that fixes two vulnerabilities is now available.
August 31, 2019
A vulnerability has been discovered in Python, an interactive high-level object-oriented language, that is relevant for cookie handling. By using a malicious server an attacker might steal cookies that are meant for other
August 31, 2019
Multiple vulnerabilities have been found in Dovecot, the worst of which could result in the arbitrary execution of code.
August 31, 2019
A vulnerability in the GNOME desktop library may allow attackers to escape the sandbox.
August 31, 2019
A vulnerability in Nautilus may allow attackers to escape the sandbox.
August 31, 2019
Multiple vulnerabilities have been found in libofx, the worst of which could result in the arbitrary execution of code.
August 31, 2019
The mpg123 package has been updated to version 1.25.12, fixing several issues which could cause it to crash or hang while parsing mp3 files. References: – https://bugs.mageia.org/show_bug.cgi?id=25350
August 31, 2019
Updated webmin package fixes security vulnerability: Webmin before 1.930 allows remote exploits if the option to change expired passwords is enabled (CVE-2019-15107).
August 31, 2019
Updated ghostscript packages fix security vulnerability: It was found that the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript
August 31, 2019
Updated pango package fixes security vulnerability: It was discovered that pango was subject to a heap based buffer overflow vulnerability which could be used to get code execution (CVE-2019-1010238).
August 31, 2019
Updated ansible package fixes security vulnerability: A flaw was discovered in the way Ansible templating was implemented before version 2.7.12, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable
August 31, 2019
Updated vlc packages fixes security vulnerabilities: Multiple security issues were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file/stream is processed (CVE-2019-13602, CVE-2019-13962,
August 31, 2019
AUpdated memcached packages fix security vulnerability: In memcached before 1.5.14, a NULL pointer dereference was found in the “lru mode” and “lru temp_ttl” commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in
August 31, 2019
Updated wavpack packages fixes security vulnerabilities: Rohan Padhye discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to cause a denial of service (CVE-2019-1010315, CVE-2019-1010317, CVE-2019-1010318, CVE-2019-1010319).
August 31, 2019
Updated wavpack packages fixes security vulnerabilities: It was discovered that WavPack incorrectly handled certain DFF files. An attacker could possibly use this issue to cause a denial of service (CVE-2019-11498).
August 31, 2019
A number of potential side channel attacks were discovered in the SAE implementations used by both hostapd (AP) and wpa_supplicant (infrastructure BSS station/mesh station). SAE (Simultaneous Authentication of Equals) is also known as WPA3-Personal. The discovered side channel attacks may be able to leak information about the used
August 31, 2019
Twitter CEO Jack Dorsey’s account hacked with racial slurs
August 31, 2019
Coin-mining malware jumps from Arm IoT gear to Intel servers
August 30, 2019
@jack’s twitter attacked, phone number hacked
August 30, 2019
Google hackers found malicious websites hacking iPhones
August 30, 2019
Risk Level: Very Low. Type: Trojan.
August 30, 2019
Risk Level: Very Low. Type: Trojan.
August 30, 2019
Risk Level: Very Low. Type: Trojan.
August 30, 2019
iPhone Zero-Days Anchored Watering-Hole Attacks
August 30, 2019
Six Hackers Have Now Pocketed $1M From Bug Bounty Programs
August 30, 2019
Google’s bug bounty bid to make big Android apps more secure
August 30, 2019
Sophisticated iPhone hacking went unnoticed for over two years
August 30, 2019
Botnet targets set-top boxes using Android OS
August 30, 2019
Reading Time: ~ 2 min. Cybercriminals use Botnets to Launch Attacks on Social Media According to a new report, more than half of all login attempts on social media sites are fraudulent, and at least 1 in 4 new account creation attempts are also fraudulent. With the sheer number of potential victims these types of […]
August 30, 2019
Hardening Gluster Installations with TLS
August 30, 2019
Hear me speak at “Conversations from the Vault” in London
August 30, 2019
* CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes
August 30, 2019
Rebuilt with newer nghttp2 —- This update includes the latest upstream release of `mod_http2`, version **1.15.3**. Upstream changes include: * fixes Timeout vs. KeepAliveTimeout behaviour, see PR 63534. * Fixes stream cleanup when connection throttling is in place. * Counts stream resets by client on streams initiated by client as cause for connection throttling. * […]
August 30, 2019
Google warns of system-controlling Chrome bug
August 30, 2019
An update that fixes one vulnerability is now available.
August 30, 2019
I just love your accent – please, have a new password
August 30, 2019
TGI Fridays Delivers Customer Indigestion Over Data Exposure
August 29, 2019
New version 3.0.3, Security fix for CVE-2019-13619
August 29, 2019
Update to 2.6.7
August 29, 2019
FIN6 Switches Up PoS Tactics to Target E-Commerce
August 29, 2019
security update
August 29, 2019
An update that solves four vulnerabilities and has three fixes is now available.
August 29, 2019
An update that fixes 8 vulnerabilities is now available.
August 29, 2019
An update that fixes two vulnerabilities is now available.
August 29, 2019
Several security issues were fixed in Apache.
August 29, 2019
Hongxu Chen found several issues in djvulibre, a library and set of tools to handle images in the DjVu format.
August 29, 2019
New version 3.0.3, Security fix for CVE-2019-13619
August 29, 2019
Update to 2.6.7
August 29, 2019
An update that fixes one vulnerability is now available.
August 29, 2019
An update that fixes one vulnerability is now available.
August 29, 2019
Google Targets Data-Abusing Apps with Bug Bounty Launch
August 29, 2019
Which Linux Distros Are Most Focused On Privacy?
August 29, 2019
Venmo’s Public Transactions Policy Stirs Privacy Concerns
August 29, 2019
The package libnghttp2 before version 1.39.2-1 is vulnerable to denial of service.
August 29, 2019
The package go-pie before version 2:1.12.8-1 is vulnerable to multiple issues including denial of service and insufficient validation.
August 29, 2019
The package go before version 2:1.12.8-1 is vulnerable to multiple issues including denial of service and insufficient validation.
August 29, 2019
The package gettext before version 0.20.1-1 is vulnerable to arbitrary code execution.
August 29, 2019
Critical Cisco VM Bug Allows Remote Takeover of Routers
August 29, 2019
Innovation on the Dark Web: How Bad Actors Are Keeping Pace
August 29, 2019
An update for pango is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
August 29, 2019
An update that fixes two vulnerabilities is now available.
August 29, 2019
Ceph could be made to crash if it received specially crafted network traffic.
August 29, 2019
Ways to Help Keep Your Business Systems Secure
August 28, 2019
Ghostscript could be made to access arbitrary files if it opened a specially crafted file.
August 28, 2019
Two security vulnerabilities were found in the Apache HTTP server. CVE-2019-10092
August 28, 2019
TrickBot Targets Verizon, T-Mobile, Sprint Users to Siphon PINs
August 28, 2019
USN-4110-1 introduced a regression in Dovecot.
August 28, 2019
Popular CamScanner app for Android infected with nasty malware
August 28, 2019
Google Squashes High-Severity Blink Browser Engine Flaw
August 28, 2019
Emergency iOS patch fixes jailbreaking flaw for second time
August 28, 2019
Defense Takeaways from Three Adversary Playbooks
August 28, 2019
Magecart Hits 80 Major eCommerce Sites in Card-Skimming Bonanza
August 28, 2019
An update for jenkins is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 28, 2019
An update for pango is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
August 28, 2019
An update is now available for Red Hat Ceph Storage 3.3 on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 28, 2019
An update that contains security fixes can now be installed.
August 28, 2019
An update that fixes 9 vulnerabilities is now available.
August 28, 2019