August 31, 2020
Charming Kitten Returns with WhatsApp, LinkedIn Effort
August 31, 2020
Stolen Fortnite Accounts Earn Hackers Millions Per Year
August 31, 2020
An update that fixes two vulnerabilities is now available.
August 31, 2020
– New upstream version (80.0)
August 31, 2020
New F32 selinux-policy build
August 31, 2020
This release includes the latest stable version of Apache **httpd**, version **2.4.46**. A security issue is addressed in this update: * **CVE-2020-11984** mod_proxy_uwsgi: Malicious request may result in information disclosure or RCE of existing file on the server running under a malicious process environment. For the full list of changes in this release, see
August 31, 2020
Updates to the latest upstream release of Eclipse. See the upstream release notes for details: https://www.eclipse.org/eclipseide/2020-06/noteworthy/ Also contains security fixes for CVE-2019-17566 and CVE-2019-17638.
August 31, 2020
Updates to the latest upstream release of Eclipse. See the upstream release notes for details: https://www.eclipse.org/eclipseide/2020-06/noteworthy/ Also contains security fixes for CVE-2019-17566 and CVE-2019-17638.
August 31, 2020
The five best Kubernetes security practices
August 31, 2020
security update
August 30, 2020
security update
August 30, 2020
security update
August 30, 2020
security update
August 30, 2020
Use of unsafe yaml load was fixed in ros-actionlib, the Robot OS actionlib library. For Debian 9 stretch, this problem has been fixed in version
August 30, 2020
Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code. An attacker must have check-in privileges on the repository (CVE-2020-24614). The fossil package has been updated to version 2.10.2, containing fixes for
August 30, 2020
An update that fixes one vulnerability is now available.
August 30, 2020
An update that fixes three vulnerabilities is now available.
August 30, 2020
An update that fixes one vulnerability is now available.
August 30, 2020
Several vulnerabilites have been reported against FreeRDP, an Open Source server and client implementation of the Microsoft RDP protocol. CVE-2014-0791
August 29, 2020
An update that solves one vulnerability and has one errata is now available.
August 29, 2020
An update that solves three vulnerabilities and has one errata is now available.
August 29, 2020
An update that solves one vulnerability and has one errata is now available.
August 29, 2020
Faidon Liambotis discovered that Lilypond, a program for typesetting sheet music, did not restrict the inclusion of Postscript and SVG commands when operating in safe mode, which could result in the execution of arbitrary code when rendering a typesheet file with
August 29, 2020
Multiple security issues were found in the OpenEXR image library, which could result in denial of service and potentially the execution of arbitrary code when processing malformed EXR image files.
August 29, 2020
Multiple security issues have been found in Thunderbird which could result in the execution of arbitrary code or the unintended installation of extensions.
August 29, 2020
Reading Time: ~ 3 min. If you’ve landed on this blog, then there’s a good chance you’re already aware that DNS is undergoing a major overhaul. DNS 2.0—aka encrypted DNS, DNS over HTTPS, or DoH—is a method for encrypting DNS requests with the same HTTPS standard used by numerous websites, such as online banking, to […]
August 29, 2020
Linux Server Security: A Getting Started Guide>
August 28, 2020
security update
August 28, 2020
Instagram ‘Help Center’ Phishing Scam Pilfers Credentials
August 28, 2020
DDoS extortion campaign targets financial firms, retailers
The extortionists attempt to scare the targets into paying by claiming to represent some of the world’s most notorious APT groups The post DDoS extortion campaign targets financial firms, retailers appeared first on WeLiveSecurity
August 28, 2020
Elon Musk Confirms, Tesla Factory a Target of Foiled Cyberattack
August 28, 2020
Reading Time: ~ 2 min. Thousands of Android Users fall Victim to Giveaway Fraud Upwards of 65,000 Android users were potentially compromised after installing a malicious app promising free giveaways. Over the year the scam was in effect, roughly 5,000 apps were spoofed to lure victims into downloading in exchange for a phony giveaway. In […]
August 28, 2020
An update that solves one vulnerability and has 36 fixes is now available.
August 28, 2020
An update that solves one vulnerability and has 35 fixes is now available.
August 28, 2020
DoJ Aims to Seize 280 Cryptocurrency Accounts Used by Hackers
August 28, 2020
By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed (CVE-2020-15664).
August 28, 2020
evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a “begin TLS” response, eds reads additional data and evaluates it in a TLS context, aka “response injection”. (CVE-2020-14928)
August 28, 2020
An update that fixes one vulnerability is now available.
August 28, 2020
* The `readUvarint` function would run infinitely given specific input. The function is now terminating if more than 10 bytes of input have been read. Fixes [issue #35](https://github.com/ulikunitz/xz/issues/35) (CVE-2020-16845). * Supports the check-ID None and fixes “Checksum None is invalid” [issue #27](https://github.com/ulikunitz/xz/issues/27).
August 28, 2020
security update
August 27, 2020
New Chrome, Firefox versions fix security bugs, bring productivity features
Chrome gets a new way of managing tabs while Firefox now features a new add-ons blocklist The post New Chrome, Firefox versions fix security bugs, bring productivity features appeared first on WeLiveSecurity
August 27, 2020
Facebook Hits Back At Apple’s iOS 14 Privacy Update
August 27, 2020
The handler for the XkbSetNames request does not validate the request length before accessing its contents (CVE-2020-14345). An integer underflow exists in the handler for the XIChangeHierarchy request (CVE-2020-14346).
August 27, 2020
There is an integer overflow and a double free vulnerability in the way LibX11 handles locales. The integer overflow is a necessary precursor to the double free (CVE-2020-14363). References:
August 27, 2020
By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed (CVE-2020-15664).
August 27, 2020
The read_xbm_body function in gui/image/qxbmhandler.cpp has a buffer over-read (CVE-2020-17507). References: – https://bugs.mageia.org/show_bug.cgi?id=27173
August 27, 2020
NSS could be made to expose sensitive information if it received a specially crafted input.
August 27, 2020
Russian cybercrime suspect arrested in $1m ransomware conspiracy
August 27, 2020
An update is now available for CloudForms Management Engine 5.10. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
August 27, 2020
Revamped Qbot Trojan Packs New Punch: Hijacks Email Threads
August 27, 2020
DDoS downs New Zealand stock exchange for third consecutive day
August 27, 2020
security update
August 27, 2020
security update
August 26, 2020
“Chrome considered harmful” – the Law of Unintended Consequences
August 26, 2020
Hackers Exploit Autodesk Flaw in Recent Cyberespionage Attack
August 26, 2020
Disinformation Spurs a Thriving Industry as U.S. Election Looms
August 26, 2020
An update that fixes one vulnerability is now available.
August 26, 2020
Medical Data Leaked on GitHub Due to Developer Errors
August 26, 2020
It was reported that the Lua module for Nginx, a high-performance web and reverse proxy server, is prone to a HTTP request smuggling vulnerability.
August 26, 2020
Mozilla: Attacker-induced prompt for extension installation (CVE-2020-15664) * Mozilla: Use-After-Free when aborting an operation (CVE-2020-15669) SL6 x86_64 firefox-68.12.0-1.el6_10.x86_64.rpm firefox-debuginfo-68.12.0-1.el6_10.x86_64.rpm firefox-68.12.0-1.el6_10.i686.rpm firefox-debuginfo-68.12.0-1.el6_10.i686.rpm i386 firefox-68.12.0-1.el6_10.i686.rpm firefox-d [More…]
August 26, 2020
How to Write a Cybersecurity Playbook During a Pandemic
August 26, 2020
Several security issues were fixed in libmysofa.
August 26, 2020
An update that fixes three vulnerabilities is now available.
August 26, 2020
– New upstream version (80.0)
August 26, 2020
security update
August 26, 2020
Four More Bugs Patched in Microsoft’s Azure Sphere IoT Platform
August 25, 2020
FBI, CISA warn of spike in vishing attacks
Cybercriminals increasingly take aim at teleworkers, setting up malicious duplicates of companies’ internal VPN login pages The post FBI, CISA warn of spike in vishing attacks appeared first on WeLiveSecurity
August 25, 2020
Cyber attacks: Several Canadian government services disrupted
Several services from the Canadian government, including the national revenue agency, had to be shut down following a series of credential stuffing cyberattacks. The post Cyber attacks: Several Canadian government services disrupted appeared first on WeLiveSecurity
August 25, 2020
How to secure your TikTok account
From keeping your account safe to curating who can view your liked content, we look at how you can increase your security and privacy on TikTok The post How to secure your TikTok account appeared first on WeLiveSecurity
August 25, 2020
Safari Bug Revealed After Apple Takes Nearly a Year to Patch
August 25, 2020
Lazarus Group Targets Cryptocurrency Firms Via LinkedIn Messages
August 25, 2020
An update that solves one vulnerability and has one errata is now available.
August 25, 2020
An update that fixes one vulnerability is now available.
August 25, 2020
An update that solves one vulnerability and has one errata is now available.
August 25, 2020
An update that solves one vulnerability and has one errata is now available.
August 25, 2020
An update that solves one vulnerability and has one errata is now available.
August 25, 2020
An update that solves one vulnerability and has one errata is now available.
August 25, 2020