June 25, 2020
Self-Propagating Lucifer Malware Targets Windows Systems
June 24, 2020
**horde 5.2.23** * [mjr] SECURITY: Fix javascript injection vulnerability in mobile login page. * [mjr] Fix broken cloud search in portal block.
June 24, 2020
security update
June 24, 2020
New Bill Targeting ‘Warrant-Proof’ Encryption Draws Ire
June 24, 2020
An update that fixes three vulnerabilities is now available.
June 24, 2020
An update for candlepin and satellite is now available for Red Hat Satellite 6.5 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 24, 2020
An update that fixes one vulnerability is now available.
June 24, 2020
An update that fixes one vulnerability is now available.
June 24, 2020
An update that fixes two vulnerabilities is now available.
June 24, 2020
An update that fixes one vulnerability is now available.
June 24, 2020
Verizon FiOS Router and Security Issues
June 24, 2020
New ransomware posing as COVID‑19 tracing app targets Canada; ESET offers decryptor
ESET researchers dissect an Android app that masquerades as an official COVID-19 contact-tracing app and encrypts files on the victim’s device The post New ransomware posing as COVID‑19 tracing app targets Canada; ESET offers decryptor appeared first on WeLiveSecurity
June 23, 2020
Sodinokibi Ransomware Now Scans Networks For PoS Systems
June 23, 2020
Majority of new remote employees use their personal laptops for work
And many of them didn’t receive any new security training or tools from their employer to properly secure the devices, a study finds The post Majority of new remote employees use their personal laptops for work appeared first on WeLiveSecurity
June 23, 2020
Work From Home Opens New Remote Insider Threats
June 23, 2020
Reading Time: ~ 3 min. Most major tech blogs have run some variation of the following headline in recent months: Is it worth paying for an antivirus solution anymore? The insinuation, of course, is that built in antivirus solutions for Mac and Windows machines have progressed to such a point that it’s no longer worth […]
June 23, 2020
Scam uses Elon Musk’s name to trick people out of US$2 million in bitcoin
The giveaway scheme uses the tech titan’s name as part of Bitcoin addresses for extra credibility The post Scam uses Elon Musk’s name to trick people out of US$2 million in bitcoin appeared first on WeLiveSecurity
June 23, 2020
Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario (CVE-2020-12888) SL7 x86_64 bpftool-3.10.0-1127.13.1.el7.x86_64.rpm bpftool-debuginfo-3.10.0-1127.13.1.el7.x86_64.rpm kernel-3.10.0-1127.13.1.el7.x86_64.rpm kernel-debug-3.10.0-1127.13.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-1127.13.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-1 [More…]
June 23, 2020
ntp: ntpd using highly predictable transmit timestamps could result in time change or DoS (CVE-2020-13817) * ntp: DoS on client ntpd using server mode packet (CVE-2020-11868) SL7 x86_64 ntp-4.2.6p5-29.el7_8.2.x86_64.rpm ntp-debuginfo-4.2.6p5-29.el7_8.2.x86_64.rpm ntpdate-4.2.6p5-29.el7_8.2.x86_64.rpm sntp-4.2.6p5-29.el7_8.2.x86_64.rpm noarch ntp-doc-4.2.6p5-29.el7_8.2 [More…]
June 23, 2020
An update that solves two vulnerabilities and has 10 fixes is now available.
June 23, 2020
Remote Workers Pose New Security Risks
June 23, 2020
An update that solves two vulnerabilities and has 10 fixes is now available.
June 23, 2020
An update that fixes three vulnerabilities is now available.
June 23, 2020
Updated microcode_ctl packages that fix several security bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact
June 23, 2020
security update
June 22, 2020
AMD: Fixes For High-Severity SMM Callout Flaws Upcoming
June 22, 2020
Several security issues were fixed in Mutt.
June 22, 2020
nfs-utils could be made to overwrite files as the administrator.
June 22, 2020
unbound: amplification of an incoming query into a large number of queries directed to a target (CVE-2020-12662) * unbound: infinite loop via malformed DNS answers received from upstream servers (CVE-2020-12663) SL6 x86_64 unbound-debuginfo-1.4.20-29.el6_10.1.i686.rpm unbound-debuginfo-1.4.20-29.el6_10.1.x86_64.rpm unbound-libs-1.4.20-29.el6_10.1.i686.rpm unbound-libs-1.4.2 [More…]
June 22, 2020
unbound: incomplete fix for CVE-2020-12662 in RHEL7 (CVE-2020-10772) SL7 x86_64 unbound-1.6.6-5.el7_8.x86_64.rpm unbound-debuginfo-1.6.6-5.el7_8.i686.rpm unbound-debuginfo-1.6.6-5.el7_8.x86_64.rpm unbound-libs-1.6.6-5.el7_8.i686.rpm unbound-libs-1.6.6-5.el7_8.x86_64.rpm unbound-devel-1.6.6-5.el7_8.i686.rpm unbound-devel-1.6.6-5.el7_8.x86_64.rpm unbound-python [More…]
June 22, 2020
Mozilla: Security downgrade with IMAP STARTTLS leads to information leakage (CVE-2020-12398) * Mozilla: Use-after-free in SharedWorkerService (CVE-2020-12405) * Mozilla: JavaScript Type confusion with NativeTypes (CVE-2020-12406) * Mozilla: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9 (CVE-2020-12410) SL7 x86_64 thunderbird-68.9.0-1.el7_8.x86_64.rpm thunderbird-deb [More…]
June 22, 2020
An update that solves 5 vulnerabilities and has 22 fixes is now available.
June 22, 2020
What You Need to Know About Linux Rootkits [Updated]>
June 21, 2020
It was discovered that there was an out-of-bounds access vulnerability in the server-server protocol in the ngircd Internet Relay Chat (IRC) server.
June 21, 2020
Updated gnutls packages fix security vulnerability: It was found that GnuTLS 3.6.4 introduced a regression in the TLS protocol implementation. This caused the TLS server to not securely construct a session ticket encryption key considering the application
June 20, 2020
security update
June 20, 2020
Damian Poddebniak and Fabian Ising discovered two security issues in the STARTTLS handling of the Mutt mail client, which could enable MITM attacks.
June 20, 2020
Former DIA Analyst Sentenced to Prison Over Data Leak
June 19, 2020
security update
June 19, 2020
Digging up InvisiMole’s hidden arsenal
ESET researchers reveal the modus operandi of the elusive InvisiMole group, including newly discovered ties with the Gamaredon group The post Digging up InvisiMole’s hidden arsenal appeared first on WeLiveSecurity
June 19, 2020
Two vulnerabilities were found in Ruby on Rails, a MVC ruby-based framework geared for web application development, which could lead to remote code execution and untrusted user input usage, depending on the
June 19, 2020
An update for jaeger-all-in-one-rhel7-container, jaeger-collector-rhel7-container, and jaeger-ingester-rhel7-container is now available for Jaeger-1.17. Red Hat Product Security has rated this update as having a security impact
June 19, 2020
An update that solves 5 vulnerabilities and has 22 fixes is now available.
June 19, 2020
An update that solves 5 vulnerabilities and has 22 fixes is now available.
June 19, 2020
An update that fixes one vulnerability is now available.
June 19, 2020
Reading Time: ~ 2 min. Ransomware Knocks Out Knoxville, TN Knoxville, Tennessee officials have been working over the past week to secure systems and determine if any sensitive information was stolen after a ransomware attack was identified. Fortunately, city IT staff were able to quickly implement security protocols and shut down critical systems before the […]
June 19, 2020
Mozilla: Security downgrade with IMAP STARTTLS leads to information leakage (CVE-2020-12398) * Mozilla: Use-after-free in SharedWorkerService (CVE-2020-12405) * Mozilla: JavaScript Type confusion with NativeTypes (CVE-2020-12406) * Mozilla: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9 (CVE-2020-12410) SL6 x86_64 thunderbird-68.9.0-1.el6_10.x86_64.rpm thunderbird-de [More…]
June 19, 2020