security update
April 21, 2020
RCE Exploit Released for IBM Data Risk Manager
April 21, 2020
Work from home: Should your digital assistant be on or off?
Being at your beck and call is central to the “personality” of your digital friend, but there are situations when the device could use some time off The post Work from home: Should your digital assistant be on or off? appeared first on WeLiveSecurity
April 21, 2020
Hey there! Are you using WhatsApp? Your account may be hackable
Can someone take control of your WhatsApp account by just knowing your phone number? We ran a small test to find out. The post Hey there! Are you using WhatsApp? Your account may be hackable appeared first on WeLiveSecurity
April 21, 2020
Hacker returns $25 million after their IP address is exposed
April 21, 2020
Oil and Gas Firms Targeted With Agent Tesla Spyware
April 21, 2020
Deepfakes and AI: Fighting Cybersecurity Fire with Fire
April 21, 2020
An update for git is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 21, 2020
Cyberattackers Ramp Up to 1.5M COVID-19 Emails Per Day
April 21, 2020
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 21, 2020
Reading Time: ~ 4 min. “One of the things about working in internet technology is nothing lasts forever… [Students] come to me and they say, ‘I want to do something that has an impact 20, 50, or 100 years from now.’ I say well maybe you should compose music because none of this technology stuff […]
April 21, 2020
The package webkit2gtk before version 2.28.1-1 is vulnerable to arbitrary code execution.
April 21, 2020
An update that fixes one vulnerability is now available.
April 21, 2020
An update that fixes two vulnerabilities is now available.
April 21, 2020
Bernd Edlinger discovered that malformed data passed to the SSL_check_chain() function during or after a TLS 1.3 handshake could cause a NULL dereference, resulting in denial of service.
April 21, 2020
security update
April 21, 2020
security update
April 21, 2020
Mootbot Botnet Targets Fiber Routers with Dual Zero-Days
April 20, 2020
Maze Ransomware Attack Hits Cognizant
April 20, 2020
Foxit PDF Reader, PhantomPDF Open to Remote Code Execution
April 20, 2020
The package openvpn before version 2.4.9-1 is vulnerable to denial of service.
April 20, 2020
What Type of Home Security System Should You Get?
April 20, 2020
Bitcoin Stealers Hide in 700+ Ruby Developer Libraries
April 20, 2020
Maze ransomware hits US giant Cognizant
April 20, 2020
Hackers drain $25 million in assets from dForce
April 20, 2020
IT services giant Cognizant hit by Maze ransomware attack
April 20, 2020
Monday review – the hot 13 stories of the week
April 20, 2020
An update that fixes one vulnerability is now available.
April 20, 2020
Hackers selling 267 million Facebook records on hacker forum
April 19, 2020
It was discovered that there was a path-traversal issue in Apache Shiro, a security framework for the Java programming language. A specially-crafted request could cause an authentication bypass.
April 19, 2020
An update that fixes 26 vulnerabilities is now available.
April 18, 2020
An update that fixes two vulnerabilities is now available.
April 18, 2020
Fraud & hacking guides are the most sold item on dark web
April 18, 2020
Busted: Man streamed “worst child abuse content ever seen”
April 18, 2020
fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file’s parent is a symlink to a directory outside of the
April 18, 2020
Following CVEs were reported against the jackson-databind source package :
April 18, 2020
Following CVEs were reported against the awl source package: CVE-2020-11728
April 18, 2020
DHS Urges Pulse Secure VPN Users To Update Passwords
April 17, 2020
security update
April 17, 2020
Fixes CVE-2020-1730
April 17, 2020
Security fix for CVE-2020-5260 From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.4.txt): > With a crafted URL that contains a newline in it, the credential > helper machinery can be fooled to give credential information for > a wrong host. The attack has been made impossible by forbidding > a newline character in any value
April 17, 2020
Bugfix release from Google for 80.0.3987.162. —- Update to 80.0.3987.162. Fixes the following CVEs: * CVE-2020-6450 * CVE-2020-6451 * CVE-2020-6452
April 17, 2020
Attacks on Linksys Routers Trigger Mass Password Reset
April 17, 2020
Critical bug in Google Chrome – get your update now
April 17, 2020
Reading Time: ~ 2 min. Florida City Sees Lasting Effects of Ransomware Attack Nearly three weeks after the City of Jupiter, Florida suffered a ransomware attack that took many of their internal systems offline, the city has yet to return to normal. City officials announced they would be working to rebuild their systems from backups, […]
April 17, 2020
Zoom Bombing Attack Hits U.S. Government Meeting
April 17, 2020
Hackers Update Age-Old Excel 4.0 Macro Attack
April 17, 2020
I’ve sent my worst enemies to Earworm Island
April 17, 2020
GitHub users targeted by Sawfish phishing campaign
April 17, 2020
An update that solves two vulnerabilities and has one errata is now available.
April 17, 2020
New openvpn packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
April 17, 2020
Poorly Secured Docker Image Comes Under Rapid Attack
April 16, 2020
New PoetRAT Hits Energy Sector With Data-Stealing Tools
April 16, 2020
With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host. The attack has been made impossible by forbidding a newline character in any value passed via the credential protocol (CVE-2020-5260).
April 16, 2020
Chromium-browser 81.0.4044.92 fixes security issues: Multiple flaws were found in the way Chromium 80.0.3987.149 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code,
April 16, 2020
– New Firefox and NSS upstream update – More info at https://www.mozilla.org/en- US/firefox/75.0/releasenotes/
April 16, 2020
– New Firefox and NSS upstream update – More info at https://www.mozilla.org/en- US/firefox/75.0/releasenotes/
April 16, 2020
Cisco IP Phone Harbors Critical RCE Flaw
April 16, 2020
Govt minister’s Zoom webinar hijacked to display porn
April 16, 2020
A Zoom zero-day exploit is up for sale for $500,000
April 16, 2020
Alleged Zoom Zero-Days for Windows, MacOS for Sale, Report
April 16, 2020
Reading Time: ~ 3 min. One of the most notable findings to come from the Webroot 2020 Threat Report was the significant rise in the number of active phishing sites over 2019—a 640% rise, to be exact. This reflects a year-over-year rise in active phishing sites, but it’s important to keep this (dangerous) threat in […]
April 16, 2020
‘Double Extortion’ Ransomware Attacks Spike
April 16, 2020
Update now! Windows zero-day flaws fixed in Patch Tuesday
April 16, 2020