April 26, 2020
Hanno Boeck discovered that it was possible to create a cross site scripting attack on the webarchives of the Mailman mailing list manager, by sending a special type of attachement.
April 26, 2020
Update to WebKitGTK 2.28.1: * Fix position of default option element popup windows under Wayland. * Fix rendering after a cross site navigation with PSON enabled and hardware acceleration forced. * Fix a crash in nested wayland compositor when closing a tab with PSON enabled. * Update Chrome and Firefox versions in user agent quirks. […]
April 25, 2020
Security fix for CVE-2020-5260 From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.5.txt): > With a crafted URL that contains a newline or empty host, or lacks > a scheme, the credential helper machinery can be fooled into > providing credential information that is not appropriate for the > protocol in use and host being
April 25, 2020
Update to WebKitGTK 2.28.1: * Fix position of default option element popup windows under Wayland. * Update Chrome and Firefox versions in user agent quirks. * Fix several crashes and rendering issues. * Security fixes: CVE-2020-11793
April 25, 2020
Update to version 1.26. Resolves CVE-2017-18640.
April 25, 2020
security update
April 25, 2020
It was discovered that python-reportlab, a Python library to create PDF documents, is prone to a code injection vulnerability while parsing a color attribute. An attacker can take advantage of this flaw to execute arbitrary code if a specially crafted document is processed.
April 25, 2020
security update
April 25, 2020
This update fixes the following security vulnerabilities: CVE-2018-20536, CVE-2018-20537, CVE-2018-20539, CVE-2018-20540
April 24, 2020
**PHP version 7.3.17** (16 Apr 2020) **Core:** * Fixed bug php#79364 (When copy empty array, next key is unspecified). (cmb) * Fixed bug php#78210 (Invalid pointer address). (cmb, Nikita) **CURL:** * Fixed bug php#79199 (curl_copy_handle() memory leak). (cmb) **Date:** * Fixed bug php#79396 (DateTime hour incorrect during DST jump forward). (Nate Brunette) **Iconv:**
April 24, 2020
3.2.3 —- New version 3.2.2 Security fix for CVE-2020-7044, CVE-2020-9428, CVE-2020-9430, CVE-2020-9431
April 24, 2020
Fix mistakes in Wayland wrapper change —- Fixes Wayland issue when running from terminal —- Update sound touch library, fixes some known security issues.
April 24, 2020
Security fix for CVE-2015-9541
April 24, 2020
Hackers set up fake NHS website to spread malware
April 24, 2020
An update that fixes one vulnerability is now available.
April 24, 2020
An update that contains security fixes can now be installed.
April 24, 2020
An update that contains security fixes can now be installed.
April 24, 2020
An update that contains security fixes can now be installed.
April 24, 2020
An update that contains security fixes can now be installed.
April 24, 2020
Following ESET’s discovery, a Monero mining botnet is disrupted
ESET researchers discover, and play a key role in the disruption of, a 35,000-strong botnet spreading in Latin America via infected USB drives The post Following ESET’s discovery, a Monero mining botnet is disrupted appeared first on WeLiveSecurity
April 24, 2020
Nintendo Confirms Breach of 160,000 Accounts
April 24, 2020
Apple Pushes Back Against Zero-Day Exploit Claims
April 24, 2020
Reading Time: ~ 2 min. Los Angeles Suburb Hit with Ransomware Last month, the City of Torrance, California fell victim to a ransomware attack that shut down many of their internal systems and demanded 100 Bitcoins to not publish the stolen data. Along with the roughly 200GB of data it stole from the city, the […]
April 24, 2020
Patch now! Microsoft issues unexpected Office fix
April 24, 2020
Shadow Broker leaked NSA files point to unknown APT group
April 24, 2020
Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in denial of service, insecure TLS handshakes, bypass of sandbox restrictions or HTTP response splitting attacks.
April 24, 2020
Reading Time: ~ 4 min. Did you know there are three primary types of hacker—white hats, black hats, and grey hats—and that there are subcategories within each one? Despite what you may have heard, not all hackers have intrinsically evil goals in mind. In fact, there are at least 300,000 hackers throughout the world who […]
April 23, 2020
iOS Mail app flaws may have left iPhone users vulnerable for years
A pair of vulnerabilities in the default email app on iOS devices is believed to have been exploited against high-profile targets The post iOS Mail app flaws may have left iPhone users vulnerable for years appeared first on WeLiveSecurity
April 23, 2020
Valve Confirms CS:GO, Team Fortress 2 Source-Code Leak
April 23, 2020
Buying a secondhand device? Here’s what to keep in mind
If you’re trying to be responsible towards the planet, also be responsible to yourself and take these steps so that the device doesn’t end up costing you more than you’ve saved The post Buying a secondhand device? Here’s what to keep in mind appeared first on WeLiveSecurity
April 23, 2020
Serious flaws found in multiple smart home hubs: Is your device among them?
In worst-case scenarios, some vulnerabilities could even allow attackers to take control over the central units and all peripheral devices connected to them The post Serious flaws found in multiple smart home hubs: Is your device among them? appeared first on WeLiveSecurity
April 23, 2020
iPhone zero day – don’t panic! Here’s what you need to know
April 23, 2020
A Dozen Nation-Backed APTs Tap COVID-19 to Cover Spy Attacks
April 23, 2020
Skype Phishing Attack Targets Remote Workers’ Passwords
April 23, 2020
iOS exploit lets attackers access default iPhone mail app
April 23, 2020
Fake Skype, Signal Apps Used to Spread Surveillanceware
April 23, 2020
Multiple vulnerabilities have been found in Git which might all allow attackers to access sensitive information.
April 23, 2020
Maze ransomware – what you need to know
April 23, 2020
The package lib32-openssl before version 1.1.1.g-1 is vulnerable to denial of service.
April 23, 2020
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code. [More…]
April 23, 2020
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.
April 23, 2020
Multiple vulnerabilities were found in OpenSSL, the worst of which could allow remote attackers to cause a Denial of Service condition.
April 23, 2020
python-twisted: HTTP request smuggling when presented with two Content-Length headers (CVE-2020-10108) * python-twisted: HTTP request smuggling when presented with a Content-Length and a chunked Transfer-Encoding header (CVE-2020-10109) SL7 x86_64 python-twisted-web-12.1.0-7.el7_8.x86_64.rpm – Scientific Linux Development Team
April 23, 2020
Fast-Moving DDoS Botnet Exploits Unpatched ZyXel RCE Bug
April 22, 2020
Apple Patches Two iOS Zero-Days Abused for Years
April 22, 2020
Connected Home Hubs Open Houses to Full Remote Takeover
April 22, 2020
LA County Hit with DoppelPaymer Ransomware Attack
April 22, 2020
How gamification can boost your cybersecurity training
Security is not a game, but learning about it could be – here’s why adding the fun factor can help employees become more cyber-aware The post How gamification can boost your cybersecurity training appeared first on WeLiveSecurity
April 22, 2020
Porn scammers making $100,000 a month from sextortion emails
April 22, 2020
309 million Facebook users’ phone numbers found online
April 22, 2020
Gaming company targeted by Chinese Winnti hackers
April 22, 2020
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 22, 2020
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 22, 2020
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 22, 2020
An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 22, 2020
An update for openshift-enterprise-hyperkube-container is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
April 22, 2020
An update for openshift is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
April 22, 2020
NFL Tackles Cybersecurity Concerns Ahead of 2020 Draft Day
April 21, 2020