An update that fixes one vulnerability is now available.
January 9, 2020
An update that fixes one vulnerability is now available.
January 9, 2020
Smashing Security #160: SNAFUs! MS Word, Amazon Ring, and TikTok
January 9, 2020
security update
January 9, 2020
Drake Lyrics Used as Calling Card in Malware Attack
January 8, 2020
security update
January 8, 2020
Man Sentenced in ATM Skimming Conspiracy
January 8, 2020
Why small business corporations fall easy prey to hackers
January 8, 2020
CES – Taking a smart city for a test drive
No one has a road map for securing a connected city – but there should be a whole atlas of such maps The post CES – Taking a smart city for a test drive appeared first on WeLiveSecurity
January 8, 2020
Liverpool Voyeur Used IM-RAT to Video Women at Home
January 8, 2020
TikTok vulnerability allowed hackers to send SMS with malware
January 8, 2020
TikTok Riddled With Security Flaws
January 8, 2020
Get Ready for the Microsoft Windows 7 EOL on January 14th
January 8, 2020
City of Las Vegas wakes up to a cyber attack
January 8, 2020
An update that solves 9 vulnerabilities and has two fixes is now available.
January 8, 2020
An update that fixes three vulnerabilities is now available.
January 8, 2020
An update that fixes 11 vulnerabilities is now available.
January 8, 2020
REvil ransomware exploiting VPN flaws made public last April
January 8, 2020
YouTube to treat all kid-aimed videos like they’re COPPA-liable
January 8, 2020
US warns of Iranian cyber threat
January 8, 2020
The package firefox before version 72.0-1 is vulnerable to multiple issues including arbitrary code execution, insufficient validation, access restriction bypass and denial of service.
January 8, 2020
Facebook bans deepfakes, but not cheapfakes or shallowfakes
January 8, 2020
What if everyone just said ‘Nah’ to tracking?
January 8, 2020
ClamAV could be made to crash if it opened a specially crafted file.
January 8, 2020
Several security issues were fixed in the kernel.
January 8, 2020
security update
January 8, 2020
Google Fixes Critical Android RCE Flaw
January 7, 2020
Sodinokibi Ransomware Behind Travelex Fiasco: Report
January 7, 2020
Facebook bans deepfakes but not all altered content
Footage defined as parody or satire will be permitted, as the social network isn’t slamming the door on all types of manipulated media The post Facebook bans deepfakes but not all altered content appeared first on WeLiveSecurity
January 7, 2020
FBI Taps Apple to Unlock Pensacola Shooter’s iPhone
January 7, 2020
Facebook Cracks Down on Deepfake Videos
January 7, 2020
An update that fixes one vulnerability is now available.
January 7, 2020
An update that fixes one vulnerability is now available.
January 7, 2020
An update that fixes 17 vulnerabilities is now available.
January 7, 2020
An update that fixes 16 vulnerabilities is now available.
January 7, 2020
An update that solves one vulnerability and has one errata is now available.
January 7, 2020
Google suspends Xiaomi from Home Hub over camera privacy glitch
January 7, 2020
‘Maze’ ransomware threatens data exposure unless $6m ransom paid
January 7, 2020
IT exec sets up fake biz to scam his employer out of $6m
January 7, 2020
US military branches ban TikTok following Pentagon’s warning
January 7, 2020
An update that fixes four vulnerabilities is now available.
January 7, 2020
ToTok Returned to Google Play Despite ‘Spy Tool’ Claims
January 6, 2020
Magecart Hits Parents and Students via Blue Bear Attack
January 6, 2020
Risk Level: Very Low. Type: Trojan.
January 6, 2020
DeathRansom Campaign Linked to Malware Cornucopia
January 6, 2020
Don’t fall for the “Start your 2020 with a gift from us” scam…
January 6, 2020
Hackers Deface U.S. Gov Website With Pro-Iran Messages
January 6, 2020
It was discovered that there were three vulnerabilities in Pillow, an imaging library for the Python programming language: * CVE-2019-19911: Prevent a denial-of-service vulnerability caused
January 6, 2020
Monday review – the hot stories of the holidays
January 6, 2020
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 6, 2020
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 6, 2020
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 6, 2020
Iranian hackers deface US government & African bank website
January 6, 2020
Updated compat-openssl10 and openssl packages fix security vulnerability: There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536,
January 5, 2020
Updated dia package fixes security vulnerability: An endless loop on filenames with invalid encoding (CVE-2019-19451). References:
January 5, 2020
Updated mediawiki packages fix security vulnerability: MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1
January 5, 2020
The updated packages fix a security vulnerability: xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs. (CVE-2019-19956)
January 5, 2020
The updated packages fix security vulnerabilities: When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered,
January 5, 2020
Updated jss packages fix security vulnerability: A flaw was found in the “Leaf and Chain” OCSP policy implementation in JSS CryptoManager, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly
January 5, 2020
Authorities lost track of suspect after WhatsApp hacking warning
January 4, 2020
Update to NetHack 3.6.4 – fixes security issue with privilege escalation: http://nethack.org/security/index.html
January 4, 2020
**PHP version 7.3.13** (18 Dec 2019) **Bcmath:** * Fixed bug php#78878 (Buffer underflow in bc_shift_addsub). (**CVE-2019-11046**). (cmb) **Core:** * Fixed bug php#78862 (link() silently truncates after a null byte on Windows). (**CVE-2019-11044**). (cmb) * Fixed bug php#78863 (DirectoryIterator class silently truncates after a null byte). (**CVE-2019-11045**). (cmb) * Fixed bug
January 4, 2020
denial of service in find_next_bit() [XSA-307, CVE-2019-19581, CVE-2019-19582] (#1782211) denial of service in HVM/PVH guest userspace code [XSA-308, CVE-2019-19583] (#1782206) privilege escalation due to malicious PV guest [XSA-309, CVE-2019-19578] (#1782210) Further issues with restartable PV type change operations [XSA-310, CVE-2019-19580] (#1782207) vulnerability in dynamic
January 4, 2020
Update to version 0.9.3 to address CVE-2019-14889
January 4, 2020
Update to Samba 4.10.11, Security fixes for CVE-2019-14861 and CVE-2019-14870
January 4, 2020
BusKill USB cable switches off your laptop in the event of theft
January 3, 2020
Reading Time: ~ 2 min. US Coast Guard Facility Hit with Ransomware During the last week of December a US Coast Guard facility was the target of a Ryuk ransomware attack that shut down operations for over 30 hours. Though the Coast Guard has implemented multiple cybersecurity regulations in just the last six months or […]
January 3, 2020
3 Critical Bugs Allow Remote Attacks on Cisco NX-OS and Switches
January 3, 2020
Cryptocurrency exchange Poloniex issues password reset warning
January 3, 2020
Travelex Knocked Offline by System-Wide Malware Attack
January 3, 2020