July 31, 2020
An integer overflow in the getnum function in lua_struct.c CVE-2020-14147 References: – https://bugs.mageia.org/show_bug.cgi?id=26978
July 31, 2020
Multiple security vulnerabilites in virtualbox allow unauthorized access to critical data or takeover of Oracle VM VirtualBox. See CVE references for details. References:
July 31, 2020
Updated dnsmasq package fix insecure default configuration potentially making it an open resolver (CVE-2020-14312). In its default configuration, dnsmasq listen and answer query from any address even outside of the local subnet. Thus, it may inadvertently
July 31, 2020
Bypass of boundary checks in nio.Buffer via concurrent access. (CVE-2020-14583) Incomplete bounds checks in Affine Transformations. (CVE-2020-14593)
July 31, 2020
The CBC padding operations were not constant time and as a result would leak the length of the plaintext values which were being padded to an attacker running a side channel attack via shared resources such as cache or branch predictor. No information about the contents was leaked, but the length alone might be used […]
July 31, 2020
4 Unpatched Bugs Plague Grandstream ATAs for VoIP Users
July 31, 2020
An update that fixes 10 vulnerabilities is now available.
July 31, 2020
An update that fixes one vulnerability is now available.
July 31, 2020
A flaw in PyCrypto allow remote attackers to obtain sensitive information.
July 31, 2020
Multiple vulnerabilities have been found in SNMP Trap Translator, the worst of which could allow attackers to execute arbitrary shell code.
July 31, 2020
Multiple vulnerabilities have been found in WebKitGTK+, the worst of which could result in the arbitrary execution of code.
July 31, 2020
An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 31, 2020
Reading Time: ~ 3 min. To try to fight the isolation and uncertainty brought on by the COVID-19 outbreak, a few weeks ago we began what we’re referring to as “Office Hours” on the Webroot Community. It’s meant to be a forum where users can come together and pose their COVID/cybersecurity-related questions to some of […]
July 31, 2020
Reading Time: ~ 2 min. Garmin Hit with WastedLocker Ransomware Nearly a week after the company announced they had suffered a system outage, Garmin has finally admitted to falling victim to a ransomware attack, likely from the increasingly popular WastedLocker variant. As is the norm for WastedLocker, the attack was very specific in its targeting […]
July 30, 2020
security update
July 30, 2020
security update
July 30, 2020
Doki Backdoor Infiltrates Docker Servers in the Cloud
July 30, 2020
ESET Threat Report Q2 2020
A view of the Q2 2020 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts The post ESET Threat Report Q2 2020 appeared first on WeLiveSecurity
July 30, 2020
An update that fixes one vulnerability is now available.
July 30, 2020
Tobias Stoeckmann found an integer overflow issue in JSON-C, a C library to manipulate JSON objects, when reading maliciously crafted large files. The issue could be exploited to cause denial of service or possibly execute arbitrary code.
July 30, 2020
chromium-browser: Use after free in ANGLE (CVE-2020-6463) * chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6514) * Mozilla: Potential leak of redirect targets when loading scripts in a worker (CVE-2020-15652) * Mozilla: Memory safety bugs fixed in Firefox 79 and Firefox ESR 68.11 (CVE-2020-15659) SL6 x86_64 firefox-68.11.0-1.el6_10.x86_64.rpm firefox-debuginfo [More…]
July 30, 2020
The updated packages fix security vulnerabilities: A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file. (CVE-2018-12983)
July 30, 2020
An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each
July 30, 2020
It was discovered that there was an issue where kdepim-runtime would default to using unencrypted POP3 communication despite the UI indicating that encryption was in use.
July 30, 2020
Critical Magento Flaws Allow Code Execution
July 29, 2020
Billions of Devices Impacted by Secure Boot Bypass
July 29, 2020
FBI warns of disruptive DDoS amplification attacks
The Bureau expects cybercriminals to increasingly abuse new threat vectors for large-scale DDoS attacks The post FBI warns of disruptive DDoS amplification attacks appeared first on WeLiveSecurity
July 29, 2020
Critical Security Flaw in WordPress Plugin Allows RCE
July 29, 2020
US tax service says, “2FA is a must!”
July 29, 2020
Several vulnerabilities have been discovered in the GRUB2 bootloader. CVE-2020-10713
July 29, 2020
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.
July 29, 2020
An update of the Red Hat OpenShift Container Platform 3.11 and 4.4/4.5 container images is now available for Red Hat AMQ Online. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 29, 2020
An update that fixes one vulnerability is now available.
July 29, 2020
An update that fixes one vulnerability is now available.
July 29, 2020
Top 8 File and Disk Encryption Tools for Linux>
July 29, 2020
An update that fixes one vulnerability is now available.
July 29, 2020
The Case Against Full-Disk Encryption>
July 29, 2020
OkCupid Security Flaw Threatens Intimate Dater Details
July 29, 2020
Japan starts work on global quantum crypto network
July 29, 2020
security update
July 29, 2020
Lazarus Group Brings APT Tactics to Ransomware
July 28, 2020
security update
July 28, 2020
Almost 4,000 databases now wiped in ‘Meow’ attacks
The attackers and their motivations remain unknown; however, the incidents yet again highlight the risks of careless data security The post Almost 4,000 databases now wiped in ‘Meow’ attacks appeared first on WeLiveSecurity
July 28, 2020
An update that fixes 5 vulnerabilities is now available.
July 28, 2020
The Ultimate Guide to Using Data Encryption on Linux>
July 28, 2020
A minor version update (from 7.6 to 7.7) is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact
July 28, 2020
Linux malware could soon be a thing of the past>
July 28, 2020
Several security issues were fixed in MySQL.
July 28, 2020
# July 2020 OpenJDK security update for OpenJDK 11 Full release notes: https://bitly.com/openjdk1108 ## Security fixes – JDK-8230613: Better ASCII conversions – JDK-8231800: Better listing of arrays – JDK-8232014: Expand DTD support – JDK-8233234: Better Zip Naming – JDK-8233239, CVE-2020-14562: Enhance TIFF support – JDK-8233255: Better Swing Buttons –
July 28, 2020
# July 2020 OpenJDK security update for OpenJDK 8. Full release notes: https://bitly.com/oj8u262 ## New features * [JDK-8223147](https://bugs.openjdk.java.net/browse/JDK-8223147): JFR Backport ## Security fixes – JDK-8028431, CVE-2020-14579: NullPointerException in DerValue.equals(DerValue) – JDK-8028591, CVE-2020-14578:
July 28, 2020
ClamAV 0.102.4 is a bug patch release to address the following issues: CVE-2020-3350 Fixed a vulnerability a malicious user could exploit to replace a scan target’s directory with a symlink to another path to trick clamscan, clamdscan, or clamonacc into removing or moving a different file (such as a critical system
July 28, 2020
Garmin staggers back online after ransomware attack
July 27, 2020