Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. CVE-2018-11805
December 14, 2019
70% of the entire US population is now on Facebook
December 14, 2019
Multiple cross-site scripting and cross-site request forgery issues were discovered in the DAViCal CalDAV Server.
December 14, 2019
A vulnerability has been found in php-horde, the Horde Application Framework, which may result in information disclosure via cross-site scripting.
December 13, 2019
GitLab Doles Out Half a Million Bucks to White Hats
December 13, 2019
This update provides an update to 5.4 series kernels, currently based on upstream 5.4.2, adding support for new hardware and features, and fixing atleast the following security issue: KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID
December 13, 2019
Updated ncurses packages fix security vulnerabilities: Heap-based buffer over-read in the _nc_find_entry function (CVE-2019-17594).
December 13, 2019
Updated signing-party package fixes security vulnerability: The gpg-key2ps tool in signing-party contained an unsafe shell call enabling shell injection via a User ID (CVE-2019-11627).
December 13, 2019
Pairing Privacy and Security with Digital Identities in Retail
December 13, 2019
Reading Time: ~ 4 min. The holiday shopping season is prime time for digital purchases and cybercriminals are cashing in on the merriment. With online shopping officially becoming more popular than traditional in-store visits this year, all signs point to an increase in cyberattacks. It’s more important than ever to be mindful of potential dangers […]
December 13, 2019
Type: Vulnerability. OpenBSD is prone to a local privilege escalation vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. Atlassian FishEye and Crucible are prone to a cross-site scripting vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. Redhat 3scale API Management is prone to an information-disclosure vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. McAfee TechCheck is prone to an arbitrary code-execution vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. IBM Cloud Pak System is prone to multiple security vulnerabilities; fixes are available.
December 13, 2019
Type: Vulnerability. Linux Kernel is prone to an information disclosure vulnerability.
December 13, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. Xen is prone to a local privilege-escalation vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. IBM Spectrum Scale is prone to a cross-site scripting vulnerability; fixes are available.
December 13, 2019
Elegant sLoad Carries Out Spying, Payload Delivery in BITS
December 13, 2019
Critical Bug in WordPress Plugins Open Sites to Hacker Takeovers
December 13, 2019
Hundreds of counterfeit branded shoe stores hacked with web skimmer
December 13, 2019
An update that fixes one vulnerability is now available.
December 13, 2019
An update that fixes one vulnerability is now available.
December 13, 2019
Risk Level: Very Low. Type: Trojan.
December 13, 2019
FIN8 Targets Card Data at Fuel Pumps
December 13, 2019
Reading Time: ~ 2 min. Zeppelin Ransomware Spreading Over the last month, researchers have been monitoring the spread of a new ransomware variant, Zeppelin. This is the latest version of the ransomware-as-a-service that started life as VegaLocker/Buran and has differentiated itself by focusing on healthcare and IT organizations in both the U.S. and Europe. This […]
December 13, 2019
Facebook will target ads based on your Oculus VR data
December 13, 2019
YouTube bans malicious insults, veiled threats, harassment
December 13, 2019
Jack Dorsey wants a decentralised Twitter
December 13, 2019
Weak account checks earn company $10.5 million privacy fine
December 13, 2019
RHEL package updates and live kernel patching with Red Hat Satellite
December 13, 2019
NGINX office in Moscow raided by police
December 13, 2019
Type: Vulnerability. Atlassian FishEye and Crucible are prone to an unauthorized-access vulnerability; fixes are available.
December 13, 2019
Critical Remote Code-Execution Bugs Threaten Global Power Plants
December 12, 2019
How to identify malware on your phone with these 7 signs
December 12, 2019
– update to upstream version 4.3.0 – fixes CVE-2019-19331 – root.keys is moved to /var/lib/knot-resolver – knot-resolver no longer requires write permission to /etc/knot-resolver/
December 12, 2019
Device quarantine for alternate pci assignment methods [XSA-306]
December 12, 2019
– update to upstream version 4.3.0 – fixes CVE-2019-19331 – root.keys is moved to /var/lib/knot-resolver – knot-resolver no longer requires write permission to /etc/knot-resolver/
December 12, 2019
Type: Vulnerability. Webform Module of Drupal is prone to multiple vulnerabilities; fixes are available.
December 12, 2019
Type: Vulnerability. OpenStack Keystone is prone to an information-disclosure vulnerability; fixes are available.
December 12, 2019
Type: Vulnerability. Siemens SCALANCE W700 and W1700 is prone to an information disclosure vulnerability; fixes are available.
December 12, 2019
An update is now available for CloudForms Management Engine 5.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 12, 2019
All in the (Ransomware) Family: 10 Ways to Take Action
December 12, 2019
Iran says it staved off cyber attack but doesn’t blame US
December 12, 2019
This update upgrades Thunderbird to version 68.3.0. * Mozilla: Use-after-free in worker destruction (CVE-2019-17008) * Mozilla: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3 (CVE-2019-17012) * Mozilla: Buffer overflow in plain text serializer (CVE-2019-17005) * Mozilla: Use-after-free when performing device orientation checks (CVE-2019-17010) * Mozilla: Use-after-free when ret [More…]
December 12, 2019
Red Hat OpenShift Service Mesh 1.0.3. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 12, 2019
An update that fixes 118 vulnerabilities is now available.
December 12, 2019
RabbitMQ could be made to execute arbitrary code if it received a specially crafted input.
December 12, 2019
Facebook refuses to break end-to-end encryption
December 12, 2019
Chrome 79 includes anti-phishing and hacked password protection
December 12, 2019
Maze Ransomware Behind Pensacola Attack, Data Breach Looms
December 12, 2019
“The Smartest Lock Ever” KeyWe is Vulnerable to Hacking
December 12, 2019
Brexit – even cybercriminals want to have their say…
December 12, 2019
S2 Ep20: Why don’t they send ransomware on floppies anymore?
December 12, 2019
Waco water bill attack just the latest in a wave of Click2Gov breaches
December 12, 2019
Your Smart Christmas Lights Are Safer Than They Were Last Year
December 12, 2019
Disgrace of Base: Scammy hordes force Keybase to end cryptocoin giveaway
December 12, 2019
Chrome now warns you if your password has been stolen
The browser’s latest version also aims to up the ante in phishing protection The post Chrome now warns you if your password has been stolen appeared first on WeLiveSecurity
December 12, 2019
Retail Cyberattacks Set to Soar 20% in 2019 Holiday Season
December 12, 2019
December Patch Tuesday blunts WizardOpium attack chain
December 12, 2019
Apple iOS 13.3 is here, bringing support for keyfobby authentication
December 12, 2019
Smashing Security #158: The man behind The Missing Cryptoqueen
December 12, 2019
Plundervolt: A new attack on Intel processors threatening SGX data
December 11, 2019
Smart Krampus-3PC Malware Targets iPhone Users
December 11, 2019
Update to Samba 4.11.3 – Security fixes for CVE-2019-14861, CVE-2019-14870 —- Restart winbindd on samba-winbind package upgrade
December 11, 2019
Serious Security Flaws Found in Children’s Connected Toys
December 11, 2019
security update
December 11, 2019
Apple Fixes ‘AirDoS’ Bug That Cripples Nearby iPhones, iPads
December 11, 2019
Type: Vulnerability. WebKit is prone to an arbitrary-code execution vulnerability; fixes are available.
December 11, 2019
Type: Vulnerability. Broadcom CA Nolio is prone to a remote code-execution vulnerability; fixes are available.
December 11, 2019
Type: Vulnerability. Apple iOS and iPadOS are prone to a security bypass vulnerability; fixes are available.
December 11, 2019
Type: Vulnerability. Apple iOS and iPadOS are prone to an arbitrary code execution vulnerability; fixes are available.
December 11, 2019
Type: Vulnerability. Apple Xcode is prone to an arbitrary code-execution vulnerability; fixes are available.
December 11, 2019
Signal Tests Upgraded Cryptography for Groups Function
December 11, 2019
Risk Level: Very Low. Type: Virus.
December 11, 2019
Risk Level: Very Low. Type: Trojan.
December 11, 2019
Bad news: KeyWe Smart Lock is easily bypassed and can’t be fixed
December 11, 2019
Modern Intel CPUs Plagued By Plundervolt Attack
December 11, 2019
2.7 billion email addresses & plain-text passwords exposed online
December 11, 2019
Lazarus APT Collaborates with Trickbot’s Anchor Project
December 11, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4152
December 11, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4108
December 11, 2019
Several security issues were fixed in Samba.
December 11, 2019
Windows 10 Mobile receives its last security patches
December 11, 2019
DoItForState domain name thief gets 14 years for pistol-whipping plot
December 11, 2019
FTC warns Christmas buyers that smart toys are a security risk
December 11, 2019