Menu

Monthly Archives: February 2020

7 best practices for managing a multi-cloud environment
Two Critical Android Bugs Get Patched in February Update
Medtronic Patches Implanted Device, CareLink Programmer Bugs
Oh buoy. Rich yacht bods’ job agency leaves 17,000 sailors’ details exposed in AWS bucket
Israeli government’s Gov.il DNS server found vulnerable
Open-Source Security Projects: Choosing a Brandable .com Domain>
Electric scooters vulnerable to remote hacks

A helmet may not be enough to keep you safe(r) while riding an e-scooter The post Electric scooters vulnerable to remote hacks appeared first on WeLiveSecurity

Twitter API Abused to Uncover User Identities
School’s out as ransomware attack downs IT systems at Scotland’s Dundee and Angus College

An update that fixes three vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

NIST tests methods of recovering data from smashed smartphones
Twitter security hole allowed state-sponsored hackers to match phone numbers to usernames
Use Off-Facebook tool to stop Facebook from tracking your activities
Man admits hacking Nintendo, leaking details of Switch games console
Twitter hands over student’s account to his college

Several security issues were fixed in SpamAssassin.

Google’s Super Bowl ad will make you cry. Or wince.
Facebook privacy settings: Protect your data with these tips

As Facebook turns 16, we look at how to keep your personal information safe from prying eyes The post Facebook privacy settings: Protect your data with these tips appeared first on WeLiveSecurity

Google’s OpenSK lets you BYOSK – burn your own security key

An update that fixes 5 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

Twitter says a certain someone tried to discover the phone numbers used by potentially millions of twits
Your mobile network broke the law by selling location data and may be fined millions… or maybe not, shrugs FCC
AZORult Campaign Adopts Novel Triple-Encryption Technique

security update

Tesla Autopilot Duped By ‘Phantom’ Images
Hackers exploiting vulnerability in smart doors to launch DDoS attacks
Ashley Madison Breach Extortion Scam Targets Hundreds
‘Cyber security incident’ takes its Toll on Aussie delivery giant as box-tracking boxen yanked offline
Man uses 99 smartphones to cause traffic jam on Google Maps
Would you get hooked by a phishing scam? Test yourself

As the tide of phishing attacks rises, improving your scam-spotting skills is never a bad idea The post Would you get hooked by a phishing scam? Test yourself appeared first on WeLiveSecurity

iCloud hacker perv cops nearly 3 years in jail for stealing and sharing people’s private, intimate pics

An update that solves 10 vulnerabilities and has 11 fixes is now available.

Apple proposes simple security upgrade for SMS 2FA codes
Coronavirus – hackers exploit fear of infection to spread malware
FTC warns VoIP providers that help robocallers: we can and will sue
TrickBot Switches to a New Windows 10 UAC Bypass to Evade Detection
Fraudsters posed as art dealer, bilked museum for millions
Cover for ‘cyber’ attacks is risky, complex and people don’t trust us, moan insurers
Google launches open-source security key project, OpenSK

Sudo could allow unintended access to the administrator account.

WannaCry ransomware attack on NHS could have triggered NATO reaction, says German cybergeneral

git: arbitrary code execution via .gitmodules (CVE-2018-17456) SL6 x86_64 git-1.7.1-10.el6_10.x86_64.rpm git-daemon-1.7.1-10.el6_10.x86_64.rpm git-debuginfo-1.7.1-10.el6_10.x86_64.rpm i386 git-1.7.1-10.el6_10.i686.rpm git-daemon-1.7.1-10.el6_10.i686.rpm git-debuginfo-1.7.1-10.el6_10.i686.rpm noarch emacs-git-1.7.1-10.el6_10.noarch.rpm emacs-git-el-1.7.1- [More…]

Several security issues were fixed in the kernel.

Flaws punched holes in Azure cloud, Apple patches pretty much everything, Eurocops cuff Maltese hackers, etc

An update for git is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

security update

Fixes **CVE-2017-18189**.

This update fixes CVE-2020-6851.

This update fixes CVE-2020-6851.

Fix a potential out of bounds write when checking a maliciously corrupted file system. This is probably not exploitable on 64-bit platforms, but may be exploitable on 32-bit binaries depending on how the compiler lays out the stack variables. (Addresses CVE-2019-5188) A maliciously corrupted file systems can trigger buffer overruns in the quota code used […]

security update

January 2020 CPU security update. See http://mail.openjdk.java.net/pipermail/jdk8u-dev/2020-January/010979.html https://openjdk.java.net/groups/vulnerability/advisories/2020-01-14

Update to Samba 4.11.6 —- Update to Samba 4.11.5 – Security fixes for CVE-2019-14902, CVE-2019-14907 and CVE-2019-19344

A stack-based buffer overflow vulnerability in sudo, a program designed to provide limited super user privileges to specific users, triggerable when configured with the pwfeedback option enabled. An unprivileged user

Joe Vennix discovered a stack-based buffer overflow vulnerability in sudo, a program designed to provide limited super user privileges to specific users, triggerable when configured with the “pwfeedback” option enabled. An unprivileged user can take advantage of this flaw to obtain

A heap-based buffer overflow vulnerability was discovered in the idn2_to_ascii_4i() function in libidn2, the GNU library for Internationalized Domain Names (IDNs), which could result in denial of service, or the execution of arbitrary code when processing a long

An issue was found in the IonMonkey JIT compiler of the Mozilla Firefox web browser which could lead to arbitrary code execution. For Debian 8 “Jessie”, this problem has been fixed in version

security update

security update