November 5, 2019
Office for Mac 2011 users warned about SYLK file format
Android keyboard app caught red‑handed trying to make sneaky purchases
The virtual keyboard app ai.type, which has racked up 40 million downloads, has been found to sign up users to premium services without their consent The post Android keyboard app caught red‑handed trying to make sneaky purchases appeared first on WeLiveSecurity
November 5, 2019
Trump, Putin and Politics Name-Dropped to Peddle Malware
November 5, 2019
Florida city sends $742K to fraudsters as it bites the BEC hook
November 5, 2019
Eye Clinic Breach Reveals Data of 20,000 Patients
November 5, 2019
Five ways to strengthen employee cybersecurity awareness
How can organizations foster a workplace environment that enables employees to acquire the skills needed to keep cyber-threats at bay? The post Five ways to strengthen employee cybersecurity awareness appeared first on WeLiveSecurity
November 5, 2019
Police interrogate Alexa for clues in fatal spear-stabbing
November 5, 2019
Magecart Groups Attack Simultaneous Sites in Card-Theft Frenzy
November 4, 2019
Alexa, Siri, Google Smart Speakers Hacked Via Laser Beam
November 4, 2019
Apple developers – get this update to protect the rest of us!
November 4, 2019
Type: Vulnerability. Xen is prone to a privilege-escalation vulnerability; fixes are available.
November 4, 2019
Type: Vulnerability. Xen is prone to a security vulnerability; fixes are available.
November 4, 2019
Type: Vulnerability. OpenAFS is prone to a denial-of-service vulnerability; fixes are available.
November 4, 2019
Type: Vulnerability. Microsoft Office for Mac is prone to a remote code-execution vulnerability.
November 4, 2019
Type: Vulnerability. Apple Xcode is prone to multiple memory corruption vulnerabilities; fixes are available.
November 4, 2019
Type: Vulnerability. Honeywell equIP and Performance Series IP Cameras and Recorders is prone to a remote authentication-bypass vulnerability; fixes are available.
November 4, 2019
Type: Vulnerability. Multiple Honeywell Products are prone to an unauthorized-access vulnerability; fixes are available.
November 4, 2019
Type: Vulnerability. Advantech WISE-PaaS/RMM is prone to multiple security vulnerabilities; fixes are available.
November 4, 2019
Type: Vulnerability. Multiple IBM Products are prone to an unauthorized-access vulnerability; fixes are available.
November 4, 2019
Type: Vulnerability. Apache Commons Beanutils is prone to a remote security vulnerability; fixes are available.
November 4, 2019
Type: Vulnerability. LibGD is prone to a heap-based buffer-overflow vulnerability; fixes are available.
November 4, 2019
Wizard Spider Upgrades Ryuk Ransomware to Reach Deep into LANs
November 4, 2019
Risk Level: Very Low. Type: Trojan.
November 4, 2019
BEC Scam Costs Media Giant Nikkei $29 Million
November 4, 2019
Russia’s sovereign internet law comes into force
November 4, 2019
Pentagon publishes AI guidelines
November 4, 2019
Undercover reporter tells all after working for a Polish troll farm
November 4, 2019
BlueKeep Attacks Have Arrived, Are Initially Underwhelming
November 4, 2019
Emerging Technology and Privacy: What You Need to Know
November 4, 2019
US grounds Chinese-made drones as part of security review
November 4, 2019
Risk Level: Very Low.
November 4, 2019
The package qt5-webengine before version 5.13.2-2 is vulnerable to arbitrary code execution.
November 3, 2019
Antimalware Day 2019: Building a culture of cybersecurity awareness
The introduction to a series of articles marking this year’s Antimalware Day and highlighting the importance of cyber-readiness The post Antimalware Day 2019: Building a culture of cybersecurity awareness appeared first on WeLiveSecurity
November 3, 2019
An update that fixes 21 vulnerabilities is now available.
November 3, 2019
An update that fixes 21 vulnerabilities is now available.
November 2, 2019
An update that fixes two vulnerabilities is now available.
November 2, 2019
Rebasing to 2.26.x For release info please see https://www.webkitgtk.org/2019/09/09/webkitgtk2.26.0-released.html and https://www.webkitgtk.org/2019/09/23/webkitgtk2.26.1-released.html CVE fixes: CVE-2019-8625, CVE-2019-8720, CVE-2019-8769, CVE-2019-8771
November 2, 2019
– fix heap-based buffer overflow in cdf_read_property_info() (CVE-2019-18218)
November 2, 2019
Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes – https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
November 2, 2019
Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes – https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
November 2, 2019
**PHP version 7.3.11** (24 Oct 2019) **Core:** * Fixed bug php#78535 (auto_detect_line_endings value not parsed as bool). (bugreportuser) * Fixed bug php#78620 (Out of memory error). (cmb, Nikita) **Exif :** * Fixed bug php#78442 (‘Illegal component’ on exif_read_data since PHP7) (Kalle) **FPM:** * Fixed bug php#78599 (env_path_info underflow in fpm_main.c can lead to RCE).
November 2, 2019
Updated libxslt package fixes security vulnerabilities: * In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains
November 2, 2019
Updated libsoup package fixes security vulnerability: It was discovered that libsoup incorrectly handled parsing certain NTLM messages. If a user or automated system were tricked into connecting to a malicious server, a remote attacker could possibly use this issue to
November 2, 2019
Updated aspell packages fix security vulnerability: libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated character (CVE-2019-17544).
November 2, 2019
Updated golang packages fix security vulnerability: Daniel Mandragona discovered that invalid DSA public keys can cause a panic in dsa.Verify(), resulting in denial of service (CVE-2019-17596).
November 2, 2019
Updated ansible package fixes security vulnerabilities: ansible-playbook -k and ansible cli tools prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them
November 2, 2019
An update that fixes 21 vulnerabilities is now available.
November 1, 2019
Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes – https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
November 1, 2019
Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes – https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
November 1, 2019
Office for Mac Users Warned of Malicious SYLK Files
November 1, 2019
**PHP version 7.2.24** (24 Oct 2019) **Core:** * Fixed bug php#78535 (auto_detect_line_endings value not parsed as bool). (bugreportuser) * Fixed bug php#78620 (Out of memory error). (cmb, Nikita) **Exif:** * Fixed bug php#78442 (‘Illegal component’ on exif_read_data since PHP7) (Kalle) **FPM:** * Fixed bug php#78599 (env_path_info underflow in fpm_main.c can lead to RCE).
November 1, 2019
Solar, Wind Power Utility Disrupted in Rare Cyberattack
November 1, 2019
security update
November 1, 2019
security update
November 1, 2019
Type: Vulnerability. Xen is prone to a privilege-escalation vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Honeywell equIP Series IP Cameras is prone to a denial-of-service vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Foxit PhantomPDF is prone to multiple security vulnerabilities; fixes are available.
November 1, 2019
Type: Vulnerability. Elasticsearch Logstash is prone to a denial-of-service vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Magento CMS is prone to multiple security vulnerabilities; fixes are available.
November 1, 2019
Type: Vulnerability. Google Chrome is prone to multiple security vulnerabilities; fixes are available.
November 1, 2019
Type: Vulnerability. Multiple IBM Products are prone to an HTTP response-splitting vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Cisco Video Communications Server is prone to a remote command-execution vulnerability; fixes are available.
November 1, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3287
November 1, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3281
November 1, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3286
November 1, 2019
Global Crime Ring Bilks U.S. Military Members, Vets Out of Millions
November 1, 2019
Stubborn Malware Targets QNAP NAS Hardware Specifically
November 1, 2019
S2 Ep15: City under attack! VPN hacked, floppies nixed
November 1, 2019
Google Discloses Chrome Flaw Exploited in the Wild
November 1, 2019
A guest appearance on the IT Pro podcast…
November 1, 2019
Apple props up macOS Catalina with 10.15.1 update
November 1, 2019
Happy Birthday, CVE!
November 1, 2019
Android Keyboard App Could Swindle 40M Users Out of Millions
November 1, 2019
Reading Time: ~ 2 min. Bed, Bath, & Beyond Data Breach An official announcement made earlier this week acknowledged illicit access to customer data used in online accounts for Bed, Bath, & Beyond. While the breach didn’t affect payment card information, the retailer quickly began contacting affected customers and took steps to safeguard against future […]
November 1, 2019
Twitter bans political ads
November 1, 2019
Hackers plead guilty to breach that Uber covered up
November 1, 2019
Type: Vulnerability. Symantec Endpoint Protection is prone to a security-bypass vulnerability; fixes are available.
November 1, 2019