An update that solves two vulnerabilities and has one errata is now available.
November 15, 2019
An update that solves two vulnerabilities and has one errata is now available.
November 15, 2019
An update that solves two vulnerabilities and has one errata is now available.
November 15, 2019
Reading Time: ~ 2 min. Orvis Internal Credentials Leaked A database containing login credentials for numerous internal systems belonging to Orvis, one of America’s oldest retailers, was found to be publicly available for an unknown amount of time. Why the database was publicly accessible at all is still unclear, but the retailer has determined that […]
November 15, 2019
Data thieves blew cover after maxing out victim’s hard drive
November 15, 2019
Brave 1.0 launches, extends ad-watching payouts to iOS
November 15, 2019
Apple fires employee after he texts customer’s pic to his own phone
November 15, 2019
An update that contains security fixes can now be installed.
November 15, 2019
An update that fixes one vulnerability is now available.
November 15, 2019
An update that fixes one vulnerability is now available.
November 15, 2019
An update that solves 49 vulnerabilities and has two fixes is now available.
November 15, 2019
Tim Brown discovered a shared memory permissions vulnerability in the Mesa 3D graphics library. Some Mesa X11 drivers use shared-memory XImages to implement back buffers for improved performance, but Mesa
November 15, 2019
An update that fixes one vulnerability is now available.
November 15, 2019
An update that fixes 11 vulnerabilities is now available.
November 15, 2019
Double Vision: Stealthy Malware Dropper Delivers Dual RATs
November 14, 2019
Type: Vulnerability. Google Pixel is prone to a privilege-escalation vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Magento CMS is prone to a remote code-execution vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Lenovo ThinkPad is prone to a remote code-execution vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Drupal Open Social is prone to a session-fixation vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. IBM Spectrum Protect Plus is prone to insecure file-permission vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. systemd is prone to an security-bypass vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Lenovo is prone to a remote code-execution vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. IBM QRadar SIEM is prone to an unspecified cross-site scripting vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. TIBCO EBX Add-on is prone to a cross-site scripting vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. TIBCO EBX is prone to multiple unspecified cross-site scripting vulnerabilities; fixes are available.
November 14, 2019
Type: Vulnerability. Intel Xeon Scalable Processors are prone to a denial-of-service vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Envoy is prone to a remote denial-of-service vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. TIBCO EBX Add-on is prone to a cross-site scripting vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Istio is prone to a remote denial-of-service vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Multiple Intel Processors are prone to a denial of service vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. VMware Workstation and Fusion are prone to multiple security vulnerabilities; fixes are available
November 14, 2019
Type: Vulnerability. Trusted Platform Module is prone to an unspecified security vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Multiple Intel Products are prone to a denial-of-service vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Intel Software Guard Extensions is prone to a local information-disclosure vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Multiple Intel Products are prone to a local privilege-escalation vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. SAP Netweaver Application Server Java is prone to a remote privilege-escalation vulnerability; a fix is available.
November 14, 2019
Type: Vulnerability. SAP Treasury and Risk Management is prone to an authorization-bypass vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Multiple Cisco Products are prone to a remote code-execution vulnerability.
November 14, 2019
Type: Vulnerability. Multiple Intel Processors are prone to a local information-disclosure vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. SAP ERP Sales and S/4HANA Sales are prone to an authorization-bypass vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Microsoft Excel is prone to an information-disclosure vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Microsoft Windows is prone to a local information-disclosure vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Microsoft Excel is prone to a remote code-execution vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Microsoft SharePoint is prone to an information-disclosure vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Microsoft Visual Studio is prone to a remote privilege-escalation vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Microsoft Azure Stack is prone to a security vulnerability that may allow attackers to conduct spoofing attacks; fixes are available.
November 14, 2019
Just-Released Checkra1n iPhone Jailbreak Stirs Security Concerns
November 14, 2019
California’s Domino Effect on U.S. Privacy Regulation
November 14, 2019
Website, Know Thyself: What Code Are You Serving?
November 14, 2019
Threat Actor Impersonates USPS to Deliver Backdoor Malware
November 14, 2019
Download: The Comprehensive Compliance Guide
November 14, 2019
Microsoft issues patch for Internet Explorer zero‑day
The critical vulnerability could also be exploited via a malicious Microsoft Office document The post Microsoft issues patch for Internet Explorer zero‑day appeared first on WeLiveSecurity
November 14, 2019
Updated libapreq2 packages fix security vulnerability: Max Kellermann reported a NULL pointer dereference flaw in libapreq2, allowing a remote attacker to cause a denial of service against an application using the library (application crash) if an invalid nested
November 14, 2019
in cpio 2.11, when using the –no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive (CVE-2015-1197). Thomas Habets discovered that GNU cpio incorrectly handled certain
November 14, 2019
Updated fribidi packages fix security vulnerability: A stack buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi 1.0.0 through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary
November 14, 2019
Updated webkit2 packages fix security vulnerabilities: Processing maliciously crafted web content may lead to universal cross site scripting (CVE-2019-8625, CVE-2019-8674, CVE-2019-8719, CVE-2019-8813)
November 14, 2019
A security vulnerability has been reported in libzmq/zeromq. a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary
November 14, 2019
Updated python-numpy packages fix security vulnerability: An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call
November 14, 2019
An update for kernel is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 14, 2019
An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
November 14, 2019
Facebook fixes iPhone camera bug
November 14, 2019
About the “easy to hack” EU Exit: ID Document Check app
November 14, 2019
Innovative PureLocker Ransomware Emerges in Targeted Attacks
November 14, 2019
Warrantless searches of devices at US borders ruled unconstitutional
November 14, 2019
Alleged mastermind behind $20m stolen-card site extradited to US
November 14, 2019
Getting into cybersecurity: Self‑taught vs. university‑educated?
Are you considering a career in cybersecurity? What learning path(s) should you take? Does formal education matter? ESET experts share their insights. The post Getting into cybersecurity: Self‑taught vs. university‑educated? appeared first on WeLiveSecurity
November 14, 2019
An update that solves 8 vulnerabilities and has 29 fixes is now available.
November 14, 2019
An update that fixes one vulnerability is now available.
November 14, 2019
An update that fixes one vulnerability is now available.
November 14, 2019
An update that fixes four vulnerabilities is now available.
November 14, 2019
Smashing Security #154: A buttock of biometrics
November 14, 2019
Type: Vulnerability. Symantec Endpoint Protection is prone to an local privilege escalation vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Multiple Symantec Products are prone to an local privilege escalation vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Symantec Endpoint Protection is prone to a local code-execution vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Symantec Endpoint Protection is prone to an local privilege escalation vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Symantec Endpoint Protection is prone to a local security-bypass vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Symantec Endpoint Protection Manager is prone to a local privilege-escalation vulnerability; fixes are available.
November 14, 2019
Risk Level: Very Low. Type: Trojan.
November 14, 2019
Risk Level: Very Low. Type: Trojan.
November 14, 2019
Risk Level: Very Low. Type: Trojan.
November 14, 2019
Consumer Data Privacy Rights: Emerging Tech Blurs Lines
November 13, 2019
Donation details “leak” from the Labour Party website
November 13, 2019
security update
November 13, 2019
security update
November 13, 2019
security update
November 13, 2019
security update
November 13, 2019
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
November 13, 2019