An update that fixes one vulnerability is now available.
September 10, 2019
An update that fixes one vulnerability is now available.
September 10, 2019
An update that fixes one vulnerability is now available.
September 10, 2019
U.S. Manufacturer Most Recent Target of LokiBot Malspam Campaign
September 10, 2019
An update is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
September 10, 2019
Vulnerabilities in D-Link, Comba Routers Can Leak Credentials
September 10, 2019
An update that fixes one vulnerability is now available.
September 10, 2019
An update that fixes one vulnerability is now available.
September 10, 2019
An update that fixes one vulnerability is now available.
September 10, 2019
Mozilla increases browser privacy with encrypted DNS
September 10, 2019
Google & Apple pushed to reveal gun scope app users’ names to feds
September 10, 2019
Chrome bumps ineffective EV certificates off the omnibar
September 10, 2019
Critical TLS flaw opens Exim servers to remote compromise
September 10, 2019
Several security issues were fixed in Python.
September 10, 2019
An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 10, 2019
An update for polkit is now available for Red Hat Enterprise Linux 7.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 10, 2019
PsiXBot Adds PornModule, Google DNS Service to Its Arsenal
September 9, 2019
Stealth Falcon Targets Middle East with Windows BITS Feature
September 9, 2019
It was discovered that the code fixes for LibreOffice to address CVE-2019-9852 were not complete. Additional information can be found at https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9854/
September 9, 2019
Telnet Backdoor Opens More Than 1M IoT Radios to Hijack
September 9, 2019
Wikipedia, World of Warcraft Downed By Weekend DDoS Attacks
September 9, 2019
Wikipedia and World of Warcraft Classic targeted by DDoS attacks
September 9, 2019
An update that fixes 8 vulnerabilities is now available.
September 9, 2019
Critical Exim Flaw Opens Millions of Servers to Takeover
September 9, 2019
Cloud security: Inside the shared responsibility model
September 9, 2019
Memcached could be made to expose sensitive information if it received a specially crafted UNIX socket.
September 9, 2019
Apple Claims Google is Spreading FUD Over Patched iPhone Bugs
September 9, 2019
Symantec shares up as private equity suitors sniff consumer tentacle
September 9, 2019
An update that fixes two vulnerabilities is now available.
September 9, 2019
An update that fixes three vulnerabilities is now available.
September 9, 2019
An update that fixes four vulnerabilities is now available.
September 9, 2019
WordPress 5.2.3 fixes new clutch of security vulnerabilities
September 9, 2019
Brave accuses Google of sidestepping GDPR
September 9, 2019
Facebook launches $10m deepfake detection project
September 9, 2019
US city balks at paying $5.3 million ransomware demand
September 9, 2019
ESET discovered an undocumented backdoor used by the infamous Stealth Falcon group
ESET researchers discovered a backdoor linked to malware used by the Stealth Falcon group, an operator of targeted spyware attacks against journalists, activists and dissidents in the Middle East The post ESET discovered an undocumented backdoor used by the infamous Stealth Falcon group appeared first on WeLiveSecurity
September 9, 2019
An update for go-toolset-1.11 and go-toolset-1.11-golang is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 9, 2019
Update to 2.0.16
September 9, 2019
Update to 2.0.16
September 9, 2019
Chromium update to 76.0.3809.132.
September 9, 2019
Wikipedia suffers DDoS attack causing worldwide service disruption
September 8, 2019
An update that fixes one vulnerability is now available.
September 8, 2019
An update that fixes one vulnerability is now available.
September 8, 2019
An update that fixes one vulnerability is now available.
September 8, 2019
An authentication bypass was discovered in D-Bus.
September 8, 2019
Multiple vulnerabilities have been found in Simple DirectMedia Layer, the worst of which could result in the arbitrary execution of code.
September 8, 2019
Updated dovecot packages fix security vulnerability: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes.
September 8, 2019
Updated tomcat packages fix security vulnerabilities: The HTTP/2 implementation accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open without reading/writing request/response data. By keeping streams open for
September 8, 2019
This release fixes a heap buffer over-read in BlitNtoN() function when processing an invalid BMP image. It also updates a URL in the RPM metadata.
September 7, 2019
**Version 1.3.10** – Managesieve: Fix so “Create filter” option does not show up when Filters menu is disabled (#6723) – Enigma: Fix bug where revoked users/keys were not greyed out in key info – Enigma: Fix error message when trying to encrypt with a revoked key (#6607) – Enigma: Fix “decryption oracle” bug [CVE-2019-10740] (#6638) […]
September 7, 2019
Security fix for CVE-2019-15043
September 7, 2019
Resolves: rhbz#1609774 nsd-4.2.2 is available
September 7, 2019
Fixes for CVE-2019-6472, CVE-2019-6473 and CVE-2019-6474
September 7, 2019
This release fixes a heap buffer over-read in BlitNtoN() function when processing an invalid BMP image. It also updates a URL in the RPM metadata.
September 7, 2019
Security fix for CVE-2019-15043
September 7, 2019
An update that fixes one vulnerability is now available.
September 7, 2019
It was discovered that various procedures in Ghostscript, the GPL PostScript/PDF interpreter, do not properly restrict privileged calls, which could result in bypass of file system restrictions of the dSAFER sandbox.
September 7, 2019
An update that solves one vulnerability and has one errata is now available.
September 7, 2019
An update that solves one vulnerability and has one errata is now available.
September 7, 2019
It was discovered that there was a stack-based buffer over-read in memcached, the in-memory object caching system. For Debian 8 “Jessie”, this issue has been fixed in memcached version
September 7, 2019
Multiple vulnerabilities have been found in Exim, the worst of which allows remote attackers to execute arbitrary code.
September 6, 2019
Week in security
This week, we present an introduction to the MITRE ATT&CK framework, the review of the mobile threats and vulnerabilities detected for mobile during the first half of 2019, and Firefox 69 new features. The post Week in security appeared first on WeLiveSecurity
September 6, 2019
security update
September 6, 2019
An update that fixes one vulnerability is now available.
September 6, 2019
China’s APT3 Pilfers Cyberweapons from the NSA
September 6, 2019
Back-to-School Scams Target Students with Library-Themed Emails
September 6, 2019
News Wrap: Deepfake CEO Voice Scam, Facebook Phone Data Exposed
September 6, 2019
Exim could be made to run programs as an administrator if it received specially crafted network traffic.
September 6, 2019
Hackers can break into Android devices by sending a text
September 6, 2019
Semi‑annual balance of mobile security 2019
Malware detections for iOS increased, as did the number of vulnerabilities detected in this operating system, while in the case of Android, the number of reported vulnerabilities decreased, although the number of highly critical bugs reported increased. The post Semi‑annual balance of mobile security 2019 appeared first on WeLiveSecurity
September 6, 2019
Multiple vulnerabilities have been found in WebkitGTK+, the worst of which could result in the arbitrary execution of code.
September 6, 2019
Multiple vulnerabilities have been found in Apache, the worst of which could result in a Denial of Service condition.
September 6, 2019
A buffer overflow in Pango might allow an attacker to execute arbitrary code.
September 6, 2019
Multiple vulnerabilities have been found in VLC, the worst of which could result in the arbitrary execution of code.
September 6, 2019
Multiple vulnerabilities have been found in Perl, the worst of which could result in the arbitrary execution of code.
September 6, 2019
Database exposed 133 million US Facebook users’ phone numbers
September 6, 2019
YouTube fined $170m for covertly tracking kids online
September 6, 2019
Facebook expands use of face recognition
September 6, 2019
Reading Time: ~ 2 min. Deepfake BEC Scam A new variant of the well-known BEC scam has implemented a feature that has yet to be used in an email scam: voice fraud. Using an extremely accurate deepfake voice of a company’s CEO, scammers were able to successfully convince another company to wire $250,000 with the promise of a quick return. Unfortunately, that transfer was […]
September 6, 2019
Facebook, Microsoft Challenge Industry to Detect, Prevent ‘Deepfakes’
September 6, 2019
An update that fixes one vulnerability is now available.
September 6, 2019
An update that fixes two vulnerabilities is now available.
September 6, 2019
It was discovered that there was a heap-based buffer overread vulnerability in expat, an XML parsing library. A specially-crafted XML input could fool the parser into changing
September 6, 2019
7 Tips to Increase Your WordPress Security
September 6, 2019
Twitter turns off SMS texting after @Jack hijacking
September 6, 2019
Firefox 69: Third‑Party Tracking Cookies and Cryptomining Now Blocked by Default
Firefox new Enhanced Tracking Protection (ETP) feature launched to all users of the browser to offer better privacy and protection from cryptojacjing. The post Firefox 69: Third‑Party Tracking Cookies and Cryptomining Now Blocked by Default appeared first on WeLiveSecurity
September 6, 2019
* Security fix for CVE-2019-14267 * Security fix for CVE-2019-14934
September 6, 2019
Update to 1.8.6 release which fixes a bug in 1.8.5. 1.8.5 is a security release to address various buffer overflow and overrun issues in the rdesktop protocol handling.
September 6, 2019
Update LXC to version 3.0.4. The release announcement can be found [here](https://discuss.linuxcontainers.org/t/lxc-3-0-4-has-been-released/5080).
September 6, 2019
security update
September 6, 2019