Menu

Monthly Archives: December 2019

EFF Talks the Corporate Surveillance of Consumers
Dutch Politician Could Get Three Years in Prison for Hacking iCloud Accounts
Steam players – beware of fake skins as phishers try to hijack accounts
Facebook made to ‘correct’ user’s post as Singapore flexes fake-news muscle
Microsoft looks to Rust language to beat memory vulnerabilities
10 Key Tips for Hiring a Web Design Company
FBI: Russia-based FaceApp is a ‘potential counterintelligence threat’
Mozilla locks nosy Avast, AVG extensions out of Firefox store amid row over web privacy
This Smartwatch is exposing real-time location data of thousands of kids
DHS Plans to Expand Facial Recognition Border Checks

Reading Time: ~ 2 min. Have you noticed a decrease in your child’s happiness or an increase in their anxiety? Cyberbullying might be the cause to these behavioral changes. Bullying is no longer confined to school playgrounds and neighborhood alleys. It has long moved into the online world, thanks to the easy access to technology. […]

ThreatList: A Third of Biometric Systems Targeted by Malware in Q3

Type: Vulnerability. Qualcomm Closed-Source Components are prone to multiple unspecified vulnerabilities; fixes are available.

Type: Vulnerability. IBM Cloud Pak System is prone to an unspecified cross-site scripting vulnerability; fixes are available.

Type: Vulnerability. Moodle is prone to a remote security vulnerability; fixes are available.

Type: Vulnerability. Multiple Kaspersky Products are prone to an arbitrary code-execution vulnerability; fixes are available.

Type: Vulnerability. Linux kernel is prone to a denial-of-service vulnerability.

Type: Vulnerability. Apache cordova-plugin-inappbrowser is prone to a privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Redhat KeyCloak is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Multiple Trend Micro Products are prone to multiple security vulnerabilities; fixes are available.

Type: Vulnerability. Django is prone to a privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Excel 2016 is prone to an information-disclosure vulnerability.

Android Ups the Mobile Security Ante with Default TLS Encryption
Critical Android Flaw Leads to ‘Permanent DoS’
Notorious spy tool taken down in global operation

IM-RAT, which could be had for as little as US$25, was bought by nearly 15,000 people The post Notorious spy tool taken down in global operation appeared first on WeLiveSecurity

SMS and personal data of millions of Americans leaked online
Supply Chain Account Takeover: How Criminals Exploit Third-Party Access
‘StrandHogg’ Vulnerability Allows Malware to Pose as Legitimate Android Apps
Step-by-Step Guide to Creating the Best Web Pages
AWS has new tool for those leaky S3 buckets so, yeah, you might need to reconfigure a few things
SMS company exposes millions of text messages, credentials online
Mixcloud user accounts up for sale on dark web
IM RAT spy tool seller raided, busted, kicked offline
Ad fraud: Fake local news sites are rolling in the dough
Jail for bomb hoaxer who targeted Super Bowl, Houses of Parliament, and schools for Jewish children
UK parcel firm Yodel plugs tracking app’s random yaps about where on map to snap up strangers’ tat
Russian FaceApp selfie-slurper poses ‘potential counterintelligence threat’, FBI warns
Welcome back from the holiday, Americans! Here’s who leaked data while you were away
Microsoft OAuth Flaw Opens Azure Accounts to Takeover
Europol wipes out 30,000+ piracy sites, three suspects cuffed to walk the legal plank

Type: Vulnerability. Linux kernel is prone to a denial-of-service vulnerability.

Type: Vulnerability. Multiple F5 BIG-IP Products are prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. PHP is prone to a denial-of-service vulnerability; fixes are available.

Type: Vulnerability. PHP is prone to a denial-of-service vulnerability; fixes are available.

Type: Vulnerability. PHP is prone to a denial-of-service vulnerability; fixes are available.

Type: Vulnerability. PHP is prone to a heap-based memory-corruption vulnerability; fixes are available.

Type: Vulnerability. PHP is prone to a memory-corruption vulnerability; fixes are available.

Type: Vulnerability. PHP is prone to a denial-of-service vulnerability; fixes are available.

Type: Vulnerability. PHP is prone to a denial-of-service vulnerability; fixes are available.

Type: Vulnerability. PHP is prone to a denial-of-service vulnerability; fixes are available.

Type: Vulnerability. PHP is prone to a denial-of-service vulnerability; fixes are available.

Type: Vulnerability. PHP is prone to a remote stack-based buffer-overflow vulnerability; fixes are available.

Type: Vulnerability. PHP is prone to a denial-of-service vulnerability; fixes are available.

Authorities Break Up Imminent Monitor Spyware Organization
CISA Pushing U.S. Agencies to Adopt Vulnerability Disclosure Policies
Smart TVs: The Cyberthreat Lurking in Your Living Room, Feds Warn
Judge to interview Assange over claims Spanish security firm snooped on him during Ecuador embassy stint
Insecure Database Exposes Millions of Private SMS Messages

A security update is now available for Red Hat Single Sign-On 7.3 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

New Red Hat Single Sign-On 7.3.5 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

New Red Hat Single Sign-On 7.3.5 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

New Red Hat Single Sign-On 7.3.5 packages are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Fake Android apps uploaded to Play store by notorious Sandworm hackers
Uncle Sam opens arms to friendly hackers
Convicted murderer wins ‘right to be forgotten’ case
5 personal (and cheap) data privacy tools that scale for business

Smart selections when starting small can ease the pain as you scale up your company’s privacy infrastructure The post 5 personal (and cheap) data privacy tools that scale for business appeared first on WeLiveSecurity

TikTok owner to separate company over US national security worries
Cryptocurrency exchange locks its cold wallet as CEO “goes missing”

389-ds-base: Read permission check bypass via the deref plugin (CVE-2019-14824) SL7 x86_64 389-ds-base-1.3.9.1-12.el7_7.x86_64.rpm 389-ds-base-debuginfo-1.3.9.1-12.el7_7.x86_64.rpm 389-ds-base-devel-1.3.9.1-12.el7_7.x86_64.rpm 389-ds-base-libs-1.3.9.1-12.el7_7.x86_64.rpm 389-ds-base-snmp-1.3.9.1-12.el7_7.x86_64.rpm – Scientific Linux Development Team

Challenge yourself and level up your IT security skills at this SANS London training event
The blame game: When hackers steal your data, is it a corporate failure – or the attackers’ fault?

The backport of the CVE-2019-13161 fix caused a regression and has been reverted. For Debian 8 “Jessie”, this problem has been fixed in version

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes 5 vulnerabilities is now available.

An update that solves two vulnerabilities and has one errata is now available.