security update
February 29, 2020
An update that fixes one vulnerability is now available.
February 29, 2020
Israeli firm leaks database with addresses of millions of Americans
February 29, 2020
Updated wireshark packages fix security vulnerabilities: LTE RRC dissector memory leak. WiMax DLMAP dissector crash.
February 29, 2020
This update is based on upstream 5.5.6 and fixes atleast the following security vulnerability: A flaw was found in the way KVM hypervisor handled instruction emulation for the L2 guest when nested(=1) virtualization is enabled. In the
February 29, 2020
Updated hiredis packages fix security vulnerability: async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked (CVE-2020-7105).
February 29, 2020
Updated rsync packages fix security vulnerabilities: It was discovered that rsync incorrectly handled pointer arithmetic in zlib. An attacker could use this issue to cause rsync to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2016-9840,
February 29, 2020
Updated zsh packages fix security vulnerability: A privilege escalation vulnerability was discovered in zsh, whereby a user could regain a formerly elevated privelege level even when such an action should not be permitted (CVE-2019-20044).
February 29, 2020
The package chromium before version 80.0.3987.122-1 is vulnerable to multiple issues including arbitrary code execution and information disclosure.
February 29, 2020
Bruce Schneier Proposes ‘Hacking Society’ for a Better Tomorrow
February 28, 2020
Hackers leak up to 4 TB of OnlyFans content for download
February 28, 2020
It was discovered that libusbmuxd incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to expectations.
February 28, 2020
Beware secret lovers spreading Nemty ransomware
February 28, 2020
Israeli firm leaks addresses of millions of Americans & Europeans
February 28, 2020
RSAC 2020: Ransomware a ‘National Crisis,’ CISA Says, Ramps ICS Focus
February 28, 2020
Patrick Wardle: Apple Devices Hit With Recycled macOS Malware
February 28, 2020
Ransomware wipes evidence, lets suspected drug dealers walk free
February 28, 2020
Firefox rolling out DNS-over-HTTPS privacy by default in the US
February 28, 2020
Google has right to censor conservative nonprofit on YouTube
February 28, 2020
An update that fixes 5 vulnerabilities is now available.
February 28, 2020
An update that solves 9 vulnerabilities and has one errata is now available.
February 28, 2020
An update that solves two vulnerabilities and has two fixes is now available.
February 28, 2020
An update that fixes one vulnerability is now available.
February 28, 2020
Police lose evidence to Ryuk ransomware attack; suspects walk free
February 27, 2020
Google’s War on Android App Permissions, 60 Percent Successful
February 27, 2020
RSAC 2020: GM’s Transportation Future Hinges on Cybersecurity
February 27, 2020
security update
February 27, 2020
security update
February 27, 2020
kr00k – Billions of Wi-Fi devices affected by encryption vulnerability
February 27, 2020
An uninitialized pointer vulnerability was discovered in pure-ftpd, a secure and efficient FTP server, which could result in an out-of-bounds memory read and potential information disclosure.
February 27, 2020
How one man could have flooded your phone with Microsoft spam
February 27, 2020
Facial recognition company Clearview AI hit by data theft
The startup came under scrutiny after it emerged that it had amassed 3 billion photos from social media for facial recognition software The post Facial recognition company Clearview AI hit by data theft appeared first on WeLiveSecurity
February 27, 2020
IoT Insecurity: When Your Vacuum Turns on You
February 27, 2020
Slickwraps data breach earns scorn for all
February 27, 2020
RSA 2020 – Hacking humans
What the human battle against biological viruses can teach us about fighting computer infections – and vice versa The post RSA 2020 – Hacking humans appeared first on WeLiveSecurity
February 27, 2020
Brave beats other browsers in privacy study
February 27, 2020
Chrome 80 encryption change blocks AZORult password stealer
February 27, 2020
Facebook bans coronavirus ‘miracle cure’ ads
February 27, 2020
Did someone file your taxes before you?
With tax season – and tax scams – in full swing, here’s how fraudsters can steal your tax refund, and how you can avoid becoming a victim The post Did someone file your taxes before you? appeared first on WeLiveSecurity
February 27, 2020
Billions of Devices Open to Wi-Fi Eavesdropping Attacks
February 27, 2020
RSAC 2020: Smart Baby Monitor Vulnerable to Remote Hackers
February 27, 2020
Smashing Security #167: Coronavirus scams and an exaggerated lion
February 27, 2020
Top 10 worst countries for Internet freedom & censorship
February 26, 2020
RSAC 2020: Lack of Machine Learning Laws Open Doors To Attacks
February 26, 2020
Is bug hunting a viable career choice?
With earnings of top ethical hackers surpassing hundreds of thousands of dollars, some would say yes The post Is bug hunting a viable career choice? appeared first on WeLiveSecurity
February 26, 2020
Exaggerated Lion and Business Email Compromise – Don’t send that check!
February 26, 2020
Hackers Cashing In On Healthcare Industry Security Weaknesses
February 26, 2020
Departing MI5 chief: Break chat app crypto for us, kthxbai
February 26, 2020
Apple’s iOS pasteboard leaks location data to spy apps
February 26, 2020
LTE vulnerability allows impersonation of other mobile devices
February 26, 2020
KrØØk: Serious vulnerability affected encryption of billion+ Wi‑Fi devices
ESET researchers uncover a previously unknown security flaw allowing an adversary to decrypt some wireless network packets transmitted by vulnerable devices The post KrØØk: Serious vulnerability affected encryption of billion+ Wi‑Fi devices appeared first on WeLiveSecurity
February 26, 2020
Iranian APT Targets Govs With New Malware
February 26, 2020
Unpatched Security Flaws Open Connected Vacuum to Takeover
February 26, 2020
Stalkerware Attacks Increased 50 Percent Last Year, Report
February 26, 2020
Switch to Signal for encrypted messaging, EC tells staff
February 26, 2020
Taking a GPS tracker off your car isn’t ‘theft,’ court rules
February 26, 2020
An update that fixes one vulnerability is now available.
February 26, 2020
An update that fixes four vulnerabilities is now available.
February 26, 2020
An update that fixes three vulnerabilities is now available.
February 26, 2020
An update that fixes one vulnerability is now available.
February 26, 2020
It was discovered that pysaml2, a Python implementation of SAML to be used in a WSGI environment, was susceptible to XML signature wrapping attacks, which could result in a bypass of signature verification.
February 26, 2020
Updated squid packages fix security vulnerabilities: Jeriko One discovered that Squid incorrectly handled memory when connected to an FTP server. A remote attacker could possibly use this issue to obtain sensitive information from Squid memory (CVE-2019-12528).
February 26, 2020
Mystery zero-day in Chrome – update now!
February 25, 2020
RSAC 2020: Blockchain is ‘Garbage In’, Voting Needs Paper Ballots
February 25, 2020
security update
February 25, 2020
Google Patches Chrome Browser Zero-Day Bug, Under Attack
February 25, 2020
Android 11 to clamp down on background location access
February 25, 2020
Sen. Schumer Pushes for TSA Employee Ban on TikTok App at Work
February 25, 2020
Free Download: The Ultimate Security Pros’ Checklist
February 25, 2020
The “Cloud Snooper” malware that sneaks into your Linux servers
February 25, 2020
An update that solves one vulnerability and has two fixes is now available.
February 25, 2020
An update that fixes one vulnerability is now available.
February 25, 2020
An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 6, 7, and 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 25, 2020
An update is now available for Red Hat JBoss Enterprise Application Platform 7.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 25, 2020
Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 (CVE-2020-6800) Mozilla: Out-of-bounds read when processing certain email messages (CVE-2020-6793) Mozilla: Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords (CVE-2020-6794) Mozilla: Crash processing S/MIME messages with multiple signatures (CVE-2020-6795) Mozilla: Incorrect p [More…]
February 25, 2020
python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c (CVE-2020-5312) python-pillow: reading specially crafted image files leads to allocation of large amounts of memory and denial of service (CVE-2019-16865) SL7 x86_64 python-pillow-2.0.0-20.gitd1c6db8.el7_7.x86_64.rpm python-pillow-debuginfo-2.0.0-20.gitd1c6db8.el7_7.x86_64.rpm python-pillow- [More…]
February 25, 2020
Smart speakers mistakenly eavesdrop up to 19 times a day
February 25, 2020
Google denies illegally slurping data off free student Chromebooks
February 25, 2020
Apple Takes Heat Over ‘Vulnerable’ iOS Cut-and-Paste Data
February 24, 2020
Open-Source AI Projects For Linux>
February 24, 2020