February 13, 2020
Cosmetic giant Estée Lauder exposed 440 million records online
Gaza Cybergang targeting Palestinian authority figures
February 13, 2020
Privacy Experts Skeptical of Proposed Data Protection Agency
February 13, 2020
Puerto Rico government falls for $2.6 million email scam
February 13, 2020
Almost 2 billion malware installs thwarted by Google Play Protect in 2019
That’s for apps from third-party marketplaces; another 790,000 policy-breaking apps were stopped from reaching Google Play The post Almost 2 billion malware installs thwarted by Google Play Protect in 2019 appeared first on WeLiveSecurity
February 13, 2020
Puerto Rico Gov Hit By $2.6M Phishing Scam
February 13, 2020
Firefox six-weekly security fixes are out – get them now!
February 13, 2020
Dell fixes privilege elevation bug in support software
February 13, 2020
IE zero day and heap of RDP flaws fixed in February Patch Tuesday
February 13, 2020
FBI: Cybercrime tore a $3.5b hole in victims’ pockets last year
February 13, 2020
Smashing Security #165: Cheapfakes, deepfakes, and Ashley Madison
February 13, 2020
Google: Efforts Against Bad Android Apps on Play Store Are Working
February 13, 2020
Google to force Nest users to turn on 2FA
February 13, 2020
Digital addiction: How to get your children off their screens
What are some of the common signs that your child may be a screen addict and what can you do to limit their screen time? The post Digital addiction: How to get your children off their screens appeared first on WeLiveSecurity
February 13, 2020
An update is now available for Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 13, 2020
An update of the Red Hat OpenShift Container Platform 3.11 and 4.1 container images is now available for Red Hat AMQ Online. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 13, 2020
Updated flash-player-plugin package fixes a security vulnerability: Type confusion that leads to arbitrary code execution in the context of the current user. (CVE-2020-3757)
February 13, 2020
The updated packages fix a security vulnerability: In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service
February 13, 2020
Updated python-waitress packages fix security vulnerabilities: If a front-end server does not parse header fields with an LF the same way as it does those with a CRLF it can lead to the front-end and the back-end server parsing the same HTTP message in two different ways.
February 13, 2020
Updated vim and neovim package fixes security vulnerability: It was discovered that Vim before 8.1.1365 and Neovim before 0.3.6 did not restrict the `:source!` command when executed in a sandbox. This allows remote attackers to take advantage of the modeline feature to
February 13, 2020
Jailcore database leaks PII of inmates & correctional officers across US
February 12, 2020
Mozilla Firefox 73 Browser Update Fixes High-Severity RCE Bugs
February 12, 2020
SoundCloud Tackles DoS, Account Takeover Issues
February 12, 2020
Mozilla issues final warning to websites using TLS 1.0
February 12, 2020
Watch as virtual reality helps mom meet her deceased daughter
February 12, 2020
Katie Moussouris: The Bug Bounty Conflict of Interest
February 12, 2020
FBI: $3.5B Lost in 2019 to Known Cyberscams, Ransomware
February 12, 2020
US charges four Chinese military members with Equifax hack
February 12, 2020
An update is now available for Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 12, 2020
An denial of service via an algorithmic complexity attack on email address parsing have been identified in libemail-address-list-perl.
February 12, 2020
Data about inmates and jail staff spilled by leaky prison app
February 12, 2020
An update that fixes 38 vulnerabilities is now available.
February 12, 2020
An update for ose-baremetal-installer-container and ose-cli-artifacts-container is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact
February 12, 2020
An update for ose-installer-container is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which
February 12, 2020
New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues.
February 12, 2020
Microsoft Patch Tuesday fixes IE zero‑day and 98 other flaws
February may be the shortest month of the year, but it brings a bumper crop of patches The post Microsoft Patch Tuesday fixes IE zero‑day and 98 other flaws appeared first on WeLiveSecurity
February 11, 2020
Emotet Trojan now exploits WiFi networks to infect nearby devices
February 11, 2020
Microsoft Addresses Active Attacks, Air-Gap Danger with 99 Patches
February 11, 2020
Intel Patches High-Severity Flaw in Security Engine
February 11, 2020
Estée Lauder Exposes 440M Records, with Email Addresses, Network Info
February 11, 2020
U.S. FDA: No link between smartphone radiation & cancer
February 11, 2020
Adobe Addresses Critical Flash, Framemaker Flaws
February 11, 2020
5 tips for you and your family on Safer Internet Day
February 11, 2020
5 tips for businesses on Safer Internet Day
February 11, 2020
Prison inmates’ sensitive data left exposed on leaky cloud bucket
February 11, 2020
Graham Cluley on Tripwire’s Talking Cybersecurity Podcast
February 11, 2020
Dell Patches SupportAssist Flaw That Allows Arbitrary Code Execution
February 11, 2020
Freedom Hosting owner pleads guilty to distributing child abuse images
February 11, 2020
Officials raise alarm about Chinese hacking
February 11, 2020
Facebook’s Twitter and Instagram accounts hijacked
February 11, 2020
Dashlane password manager’s Chrome extension has disappeared
February 11, 2020
Yubico PIV Tool could be made to crash or run programs as an administrator if it received specially crafted input.
February 11, 2020
Competing in esports: 3 things to watch out for
If you’re looking to become a pro gamer, there are risks you shouldn’t play down The post Competing in esports: 3 things to watch out for appeared first on WeLiveSecurity
February 11, 2020
spice-client: Insufficient encoding checks for LZ can cause different integer/buffer overflows (CVE-2018-10893) SL6 x86_64 spice-glib-0.26-8.el6_10.2.i686.rpm spice-glib-0.26-8.el6_10.2.x86_64.rpm spice-gtk-0.26-8.el6_10.2.i686.rpm spice-gtk-0.26-8.el6_10.2.x86_64.rpm spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm spice-gtk-debuginfo-0.26-8.el6_10.2.x86_64.rpm spic [More…]
February 11, 2020
An update for spice-gtk is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 11, 2020
An update for nss-softokn is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 11, 2020
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 11, 2020
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 11, 2020
US charges 4 Chinese military hackers over 2017 Equifax breach
February 11, 2020
Five Open-Source Projects AI Enthusiasts Might Want to Know About>
February 10, 2020
BYO-Bug Tactic Attacks Windows Kernel with Outdated Driver
February 10, 2020
Active PayPal Phishing Scam Targets SSNs, Passport Photos
February 10, 2020
Hackers caught using CNET website to spread nasty malware
February 10, 2020
The updated packages fix a security vulnerability: In Sudo before 1.8.31, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however,
February 10, 2020
Equifax Breach: Four Members of Chinese Military Charged with Hacking
February 10, 2020
Docker Registries Expose Hundreds of Orgs to Malware, Data Theft
February 10, 2020
Emotet Now Hacks Nearby Wi-Fi Networks to Spread Like a Worm
February 10, 2020
Google Chrome to start blocking downloads served via HTTP
February 10, 2020
Security researchers from Snyk discovered that the fix for CVE-2019-9658 was incomplete. Checkstyle, a development tool to help programmers write Java code that adheres to a coding standard, was still vulnerable to XML External Entity (XXE) injection.
February 10, 2020
Facebook encrypted messaging will ‘create hiding places for child abuse’
February 10, 2020
FBI director warns of sustained Russian disinformation threat
February 10, 2020
Frustrated author cybersquats novelist’s website
February 10, 2020
How to bring security into agile development and CI/CD
February 10, 2020
an out-of-bounds write vulnerability due to an integer overflow was reported in libexif, a library to parse exif files. This flaw might be leveraged by remote attackers to cause denial of service, or potentially execute arbitrary code via crafted image files.
February 10, 2020
Several security issues were fixed in libxml2.
February 10, 2020
Several security issues were fixed in Qt.
February 10, 2020
Add patch for CVE-2020-6750 and related issues.
February 9, 2020
An update that fixes 38 vulnerabilities is now available.
February 9, 2020
Update to Node.js 12.15.0
February 8, 2020
Update to Node.js 12.15.0
February 8, 2020