Upstream details at : https://access.redhat.com/errata/RHSA-2020:0120
January 18, 2020
New JhoneRAT Malware Targets Middle East
January 17, 2020
Mobile Carrier Customer Service Ushers in SIM-Swap Fraud
January 17, 2020
Keep Your Home Protected: 5 Best Indoor Home Security Cameras
January 17, 2020
Feds seize WeLeakInfo.com for selling stolen databases
January 17, 2020
Threatpost Poll: Are Published PoC Exploits a Good or Bad Idea?
January 17, 2020
News Wrap: PoC Exploits, Cable Haunt and Joker Malware
January 17, 2020
5 tips to avoid spear-phishing attacks
January 17, 2020
FBI Plans to Inform States of Election Breaches
January 17, 2020
Travelex won’t say if it has paid a ransom to its attackers
January 17, 2020
“Hello dear slave”
January 17, 2020
An update that solves 17 vulnerabilities and has one errata is now available.
January 17, 2020
Reading Time: ~ 2 min. Ryuk Adds New Features to Increase Devastation The latest variant of the devastating Ryuk ransomware has been spotted with a new feature that allows it to turn on devices connected to the infected network. By taking advantage of Wake-on-Lan functionality, Ryuk can is able to mount additional remote devices to […]
January 17, 2020
Oracle’s January 2020 update patches 334 security flaws
January 17, 2020
Google will now accept your iPhone as an authentication key
January 17, 2020
EDRi’s guidelines call for more ethical websites
January 17, 2020
Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement (CVE-2019-17026) * Mozilla: Bypass of @namespace CSS sanitization during pasting (CVE-2019-17016) * Mozilla: Type Confusion in XPCVariant.cpp (CVE-2019-17017) * Mozilla: Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4 (CVE-2019-17024) * Mozilla: CSS sanitization does not escape HTML tags (CVE-2019- [More…]
January 17, 2020
Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement (CVE-2019-17026) * Mozilla: Bypass of @namespace CSS sanitization during pasting (CVE-2019-17016) * Mozilla: Type Confusion in XPCVariant.cpp (CVE-2019-17017) * Mozilla: Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4 (CVE-2019-17024) * Mozilla: CSS sanitization does not escape HTML tags (CVE-2019- [More…]
January 17, 2020
An update that solves one vulnerability and has two fixes is now available.
January 17, 2020
This update is based on upstream 5.4.12 and fixes atleast the following security vulnerabilities: Intel GPU Hardware prior to Gen11 does not clear EU state during a context switch. This can result in information leakage between
January 17, 2020
The updated packages fix security vulnerabilities: A signed integer overflow and subsequent segfault that occurred when attempting to decompress images with more than 715827882 pixels using the 64-bit C version of TJBench.
January 17, 2020
Hacker uses NSA-reported Windows 10 vulnerability to troll NSA
January 17, 2020
Critical Cisco Flaws Now Have PoC Exploit
January 16, 2020
Google Account Security Keys Launch for iPhone
January 16, 2020
Satan Ransomware Reborn to Torment Businesses
January 16, 2020
How to Secure Your VPS and Dedicated Servers from Hackers
January 16, 2020
NSA and Github ‘rickrolled’ using Windows CryptoAPI bug
January 16, 2020
Smart Cars: Increasing Comfort — Reducing Security
January 16, 2020
PoC Exploits Published For Microsoft Crypto Bug
January 16, 2020
‘Fleeceware’ Apps Downloaded 600M Times from Google Play
January 16, 2020
Update now! Popular WordPress plugins have password bypass flaws
January 16, 2020
Google to kill third-party Chrome cookies in two years
January 16, 2020
College students call for ban on facial recognition on campus
January 16, 2020
git: Remote code execution in recursive clones with nested submodules (CVE-2019-1387) SL7 x86_64 git-1.8.3.1-21.el7_7.x86_64.rpm git-daemon-1.8.3.1-21.el7_7.x86_64.rpm git-debuginfo-1.8.3.1-21.el7_7.x86_64.rpm git-gnome-keyring-1.8.3.1-21.el7_7.x86_64.rpm git-svn-1.8.3.1-21.el7_7.x86_64.rpm noarch emacs-git-1.8.3.1-21.el7_7.noarch.rpm emacs-git-el-1.8.3.1-21.el [More…]
January 16, 2020
OpenJDK: Use of unsafe RSA-MD5 checkum in Kerberos TGS (Security, 8229951) (CVE-2020-2601) * OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422) (CVE-2020-2604) * OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352) (CVE-2020-2590) * OpenJDK: Incorrect isBuiltinStreamHandler causing URL normalization iss [More…]
January 16, 2020
Hackers jailed for hacking National Lottery & withdrawing £13
January 16, 2020
An update for rh-dotnet30-dotnet and rh-dotnet31-dotnet is now available for .NET Core on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
January 16, 2020
How RHEL 8 is designed for FIPS 140-2 requirements
January 16, 2020
An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
January 16, 2020
An update is now available for Red Hat Decision Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
January 16, 2020
Cyberawareness in Australia: The good and the bad
An ESET-commissioned survey sheds light on the browsing habits of Australians and how they protect themselves online The post Cyberawareness in Australia: The good and the bad appeared first on WeLiveSecurity
January 16, 2020
An update that solves three vulnerabilities and has three fixes is now available.
January 16, 2020
Spanking the pirates of corporate security? Try a Plimsoll
January 16, 2020
Smashing Security #161: Love, lucky dips, and 23andMe
January 16, 2020
Critical WordPress Bug Leaves 320,000 Sites Open to Attack
January 15, 2020
A Practical Guide to Zero-Trust Security
January 15, 2020
Podcast: NSA Reports Major Crypto-Spoofing Bug to Microsoft
January 15, 2020
U.N. Weathers Storm of Emotet-TrickBot Malware
January 15, 2020
Equifax Settles Class-Action Breach Lawsuit for $380.5M
January 15, 2020
Trump Slams Apple for Refusing to Unlock Suspected Shooter’s iPhones
January 15, 2020
Google to end support for third‑party cookies in Chrome
The company will also soon launch anti-fingerprinting measures aimed at detecting and mitigating covert tracking and workarounds The post Google to end support for third‑party cookies in Chrome appeared first on WeLiveSecurity
January 15, 2020
Faketoken malware sends expensive & offensive texts at your expense
January 15, 2020
An update that solves one vulnerability and has three fixes is now available.
January 15, 2020
Microsoft fixes critical bugs in CryptoAPI, RD Gateway and .NET
January 15, 2020
Applications using libpcap could be made to crash if given specially crafted data.
January 15, 2020
Malicious npm package taken down after Microsoft warning
January 15, 2020
Peekaboo Moments baby-recording app has a bad database booboo
January 15, 2020
Oski Data-Stealing Malware Emerges to Target North America, China
January 15, 2020
Apple says no to unlocking shooter’s phone; AG and Trump lash back
January 15, 2020
An update that fixes three vulnerabilities is now available.
January 15, 2020
An update that fixes 7 vulnerabilities is now available.
January 15, 2020
Upstream details at : https://access.redhat.com/errata/RHSA-2020:0085
January 15, 2020
Several security issues were fixed in PHP.
January 15, 2020
Oracle Ties Previous All-Time Patch High with January Updates
January 14, 2020
Microsoft patches severe Windows flaw after tip‑off from NSA
The US intelligence agency expects attackers to waste no time in developing tools aimed at exploiting the vulnerability The post Microsoft patches severe Windows flaw after tip‑off from NSA appeared first on WeLiveSecurity
January 14, 2020
Serious Microsoft crypto vulnerability – patch right now
January 14, 2020
Microsoft’s new tool detects & reports pedophiles from online chats
January 14, 2020
Intel Fixes High-Severity Flaw in Performance Analysis Tool
January 14, 2020
Card Skimmer Hits Australian Bushfire Donation Site
January 14, 2020
Microsoft Patches Major Crypto Spoofing Bug
January 14, 2020
security update
January 14, 2020
Google to Nix Chrome Support for Third-Party Cookies by 2022
January 14, 2020
LastPass releases its 3rd Annual Global Password Security report
January 14, 2020
Public Bug Bounty Takes Aim at Kubernetes Container Project
January 14, 2020
Millions of modems at risk of remote hijacking
Multiple cable modem models from various manufacturers found vulnerable to takeover attacks The post Millions of modems at risk of remote hijacking appeared first on WeLiveSecurity
January 14, 2020
Windows 7 computers will no longer be patched after today
January 14, 2020