Type: Vulnerability. Adobe Experience Manager is prone to multiple security vulnerabilities; fixes are available.
October 15, 2019
Type: Vulnerability. Adobe Experience Manager Forms is prone to a cross-site scripting vulnerability; fixes are available.
October 15, 2019
Type: Vulnerability. Juniper Junos is prone to a local authorization-bypass vulnerability; fixes are available.
October 14, 2019
Type: Vulnerability. Google Chrome is prone to multiple security vulnerabilities; fixes are available.
October 14, 2019
Type: Vulnerability. WebKit is prone to multiple cross-site scripting and memory-corruption vulnerabilities; fixes are available.
October 14, 2019
Type: Vulnerability. Apple Swift is prone to an information-disclosure vulnerability; fixes are available.
October 14, 2019
Type: Vulnerability. Apple macOS/iCloud for Windows/iTunes are prone to a buffer overflow vulnerability; fixes are available.
October 14, 2019
Type: Vulnerability. WebKit is prone to an information-disclosure and a security vulnerability; fixes are available.
October 14, 2019
Type: Vulnerability. WebKit is prone to a memory-corruption vulnerability; fixes are available.
October 14, 2019
Type: Vulnerability. Juniper Junos is prone to a local privilege-escalation vulnerability; fixes are available.
October 14, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 14, 2019
Type: Vulnerability. Apple macOS is prone to multiple security vulnerabilities; fixes are available.
October 14, 2019
Apple Shares Some Browsing History with Chinese Company
October 14, 2019
Stalker found pop star by searching eyes’ reflections on Google Maps
October 14, 2019
Computing enthusiast cracks ancient Unix code
October 14, 2019
Hacker wants $300 for 250,000 records stolen from sex worker site
October 14, 2019
Connecting the dots: Exposing the arsenal and methods of the Winnti Group
New ESET white paper released describing updates to the malware arsenal and campaigns of this group known for its supply-chain attacks The post Connecting the dots: Exposing the arsenal and methods of the Winnti Group appeared first on WeLiveSecurity
October 14, 2019
Imperva cloud firewall pwned, D-Link bug uncovered – plus more
October 14, 2019
An update that fixes 5 vulnerabilities is now available.
October 13, 2019
An update that fixes 5 vulnerabilities is now available.
October 13, 2019
This update provides the final 1.3.2 release (previously the package was 1.3.2 beta). It also includes the previously-omitted database schema directory (resolving [#1415753](https://bugzilla.redhat.com/show_bug.cgi?id=1415753)) and rddmarc tools, and backports proposed fixes for a [crasher bug](https://bugzilla.redhat.com/show_bug.cgi?id=1673293) and [security issue
October 13, 2019
Backport security fixes from [PR#145](https://github.com/libming/libming/pull/145) Fixes: CVE-2018-7866, CVE-2018-7873, CVE-2018-7876, CVE-2018-9009, CVE-2018-9132
October 13, 2019
Patch CVE-2019-12412.
October 13, 2019
– Rebase radare2 to 3.9.0 – Rebase cutter-re to 1.9.0 – fix CVE-2019-14745 in radare2 on F30
October 13, 2019
– Rebase radare2 to 3.9.0 – Rebase cutter-re to 1.9.0 – fix CVE-2019-14745 in radare2 on F30
October 13, 2019
– Update jackson-parent to version 2.10. – Update jackson-bom to version 2.10.0. – Update jackson-annotations to version 2.10.0. – Update jackson-core to version 2.10.0. – Update jackson-databind to version 2.10.0. Resolves CVE-2019-14540, CVE-2019-16335, CVE-2019-16942, CVE-2019-16943.
October 13, 2019
– Update jackson-parent to version 2.10. – Update jackson-bom to version 2.10.0. – Update jackson-annotations to version 2.10.0. – Update jackson-core to version 2.10.0. – Update jackson-databind to version 2.10.0. Resolves CVE-2019-14540, CVE-2019-16335, CVE-2019-16942, CVE-2019-16943.
October 13, 2019
– Update jackson-parent to version 2.10. – Update jackson-bom to version 2.10.0. – Update jackson-annotations to version 2.10.0. – Update jackson-core to version 2.10.0. – Update jackson-databind to version 2.10.0. Resolves CVE-2019-14540, CVE-2019-16335, CVE-2019-16942, CVE-2019-16943.
October 13, 2019
The update for openssl released as DSA 4539-1 introduced a regression where AES-CBC-HMAC-SHA ciphers were not enabled. Updated openssl packages are now available to correct this issue.
October 13, 2019
Update to latest upstream version.
October 12, 2019
Software, Supply-Chain Dangers Top List of 5G Cyber Risks
October 11, 2019
Type: Vulnerability. Intel Active System Console is prone to a local privilege-escalation vulnerability; fixes are available.
October 11, 2019
Type: Vulnerability. Intel Smart Connect Technology is prone to a local privilege-escalation vulnerability.
October 11, 2019
Type: Vulnerability. Multiple Intel NUC Products are prone to multiple unspecified local security vulnerabilities; fixes are available
October 11, 2019
Type: Vulnerability. Juniper SBR Carrier is prone to an information-disclosure vulnerability; fixes are available.
October 11, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 11, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 11, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 11, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 11, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 11, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 11, 2019
Imperva: Data Breach Caused by Cloud Misconfiguration
October 11, 2019
A security vulnerability was discovered in lucene-solr, an enterprise search server. The DataImportHandler, an optional but popular module to pull in data
October 11, 2019
An update that fixes one vulnerability is now available.
October 11, 2019
Fin7 Cybergang Retools With New Malicious Code
October 11, 2019
Reading Time: ~ 2 min. E-Scooter Security Vulnerability A security researcher recently found an API vulnerability within the software of Voi e-scooters that allowed him to add over $100,000 in ride credits to his account. The vulnerability stems from a lack of authentication after creating an account which allows users to enter an unlimited number […]
October 11, 2019
Iran-Linked ‘Charming Kitten’ Touts New Spearphishing Tactics
October 11, 2019
ruby-openid performed discovery first, and then verification. This allowed an attacker to change the URL used for discovery and trick the server into connecting to the URL. This server in turn could be a private server not publicly accessible.
October 11, 2019
Most Americans don’t have a clue what https:// means
October 11, 2019
Hackers bypassing some types of 2FA security FBI warns
October 11, 2019
Facebook flags thousands of kids as interested in gambling, booze
October 11, 2019
Apple removes app that tracks Hong Kong police and protestors
October 11, 2019
Type: Vulnerability. Oracle has released an advance notification regarding the October 2019 Critical Patch Update that addresses 240 new vulnerabilities.
October 11, 2019
vBulletin Flaw Exploited in Dutch Sex-Work Forum Breach
October 10, 2019
Reading Time: ~ 4 min. Online games aren’t new. Consumers have been playing them since as early as 1960. However, the market is evolving—games that used to require the computing power of dedicated desktops can now be powered by smartphones, and online gaming participation has skyrocketed. This unfortunately means that the dangers of online gaming […]
October 10, 2019
Risk Level: Very Low.
October 10, 2019
Sophisticated Spy Kit Targets Russians with Rare GSM Plugin
October 10, 2019
China’s Sway Over Tech Companies Tested with Apple, Blizzard
October 10, 2019
Apple iTunes Bug Actively Exploited in BitPaymer/iEncrypt Campaign
October 10, 2019
HP Touchpoint Analytics Opens PCs to Code Execution Attack
October 10, 2019
Fix KDC crash when logging PKINIT enctypes (CVE-2019-14844) This is a purely denial-of-service issue, though it is unauthenticated, and is unlikely to trigger by accident.
October 10, 2019
Update to 2.0.10 to fix security issues.
October 10, 2019
Twitter used 2FA phone numbers for targeted advertising
October 10, 2019
California outlaws facial recognition in police bodycams
October 10, 2019
An update for ovirt-web-ui is now available for Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 10, 2019
An update for ovirt-engine-ui-extensions is now available for Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 10, 2019
An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 10, 2019
Job seekers are scrubbing clean their social media accounts
October 10, 2019
Several security issues were fixed in Python.
October 10, 2019
Octavia could allow unintended access to network services.
October 10, 2019
ESET discovers Attor, a spy platform with curious GSM fingerprinting
ESET researchers discover a previously unreported cyberespionage platform used in targeted attacks against diplomatic missions and governmental institutions, and privacy-concerned users The post ESET discovers Attor, a spy platform with curious GSM fingerprinting appeared first on WeLiveSecurity
October 10, 2019
It was discovered that clamav, the open source antivirus engine, is affected by the following security vulnerabilities: CVE-2019-12625
October 10, 2019
An update is now available for Red Hat Fuse Integration Services. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 10, 2019
Smashing Security #149: Falling in love with fraudsters
October 10, 2019
An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 10, 2019
Red Hat A-MQ Broker 7.5 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 10, 2019
Risk Level: Very Low.
October 10, 2019
It was discovered that there were two vulnerabilities in the rsyslog system/kernel logging daemon in the parsers for AIX and Cisco log messages respectfully.
October 9, 2019
Type: Vulnerability. TIBCO MDM is prone to multiple unspecified cross-site scripting vulnerabilities; fixes are available.
October 9, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
October 9, 2019
Type: Vulnerability. Citrix Application Delivery Management is prone to an unauthorized-access vulnerability; fixes are available.
October 9, 2019
Type: Vulnerability. Xen is prone to a privilege-escalation vulnerability; fixes are available.
October 9, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
October 9, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
October 9, 2019