August 25, 2020
Google Fixes High-Severity Chrome Browser Code Execution Bug
August 24, 2020
security update
August 24, 2020
An update that fixes 21 vulnerabilities is now available.
August 24, 2020
Several security issues were fixed in Net-SNMP.
August 24, 2020
APIs Are the Next Frontier in Cybercrime
August 24, 2020
An update that fixes one vulnerability is now available.
August 24, 2020
An update that solves one vulnerability and has two fixes is now available.
August 24, 2020
An update for openshift-enterprise-hyperkube-container is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
August 24, 2020
An update for jenkins and openshift is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 24, 2020
Chrony’s method of opening its PID file could allow a compromised chrony user account to overwrite files in certain parts of the filesystem with chrony’s PID, using a symlink attack (CVE-2020-14367). References:
August 23, 2020
Reading Time: ~ 2 min. Ransomware Attack Targets Major Cruise Line Officials for Carnival Cruises have confirmed that a portion of their IT systems were encrypted following a cyberattack identified over the weekend. The company also revealed that sensitive information for both employees and customers was illicitly accessed, though they did not admit to what […]
August 23, 2020
Security fix for CVE-2020-14367
August 22, 2020
Several vulnerabilities have been discovered in sqlite3, a C library that implements an SQL database engine. CVE-2018-8740
August 22, 2020
Several memory leaks were discovered in proftpd-dfsg, a versatile, virtual-hosting FTP daemon, when mod_facl or mod_sftp is used which could lead to memory exhaustion and a denial-of-service.
August 22, 2020
Jason A. Donenfeld found an ansi escape sequence injection into software-properties, a manager for apt repository sources. An attacker could manipulate the screen of a user prompted to install an additional repository (PPA).
August 22, 2020
News Wrap: AWS Cryptojacking Worm, IBM Privacy Lawsuit and More
August 22, 2020
Multiple vulnerabilities were discovered in Python2.7, an interactive high-level object-oriented language.
August 22, 2020
Tim Starling discovered two vulnerabilities in firejail, a sandbox program to restrict the running environment of untrusted applications.
August 22, 2020
An update that fixes two vulnerabilities is now available.
August 22, 2020
An update that fixes two vulnerabilities is now available.
August 22, 2020
Appearing on the Easy Prey podcast
August 21, 2020
Outlook “mail issues” phishing – don’t fall for this scam!
August 21, 2020
University of Utah Pays $457K After Ransomware Attack
August 21, 2020
An update that solves one vulnerability and has 22 fixes is now available.
August 21, 2020
An update that solves one vulnerability and has 19 fixes is now available.
August 21, 2020
Researchers Sound Alarm Over Malicious AWS Community AMIs
August 21, 2020
Using AI to fight hand-crafted Business Email Compromise
August 21, 2020
Several security issues were fixed in Bind.
August 21, 2020
An update that solves 7 vulnerabilities and has 109 fixes is now available.
August 21, 2020
The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function. (CVE-2020-14148) References:
August 20, 2020
– fix expired pointer dereference via multi API with `CURLOPT_CONNECT_ONLY` option set (CVE-2020-8231)
August 20, 2020
IBM Settles Lawsuit Over Weather Channel App Data Privacy
August 20, 2020
How to prepare and protect your digital legacy
It’s never too soon to plan for what will happen to your digital presence after you pass away The post How to prepare and protect your digital legacy appeared first on WeLiveSecurity
August 20, 2020
Multiple vulnerabilities were found in ghostscript, an interpreter for the PostScript language and for PDF, allowing an attacker to escalate privileges and cause denial of service via crafted PS/EPS/PDF files.
August 20, 2020
An update that solves two vulnerabilities and has 6 fixes is now available.
August 20, 2020
Cisco Critical Flaw Patched in WAN Software Solution
August 20, 2020
curl could be made to expose sensitive information over the network.
August 20, 2020
Smashing Security podcast #192: Ritz and robocalls with Rory
August 19, 2020
Rebased to version 3.33.0
August 19, 2020
Update to v0.3.4 release
August 19, 2020
A security flaw was found on ruby kramdown which may lead to unintended code execution. This vulnerability is now assigned as CVE-2020-14001 . This new rpm should fix this issue.
August 19, 2020
Researchers Warn of Flaw Affecting Millions of IoT Devices
August 19, 2020
FritzFrog Botnet Attacks Millions of SSH Servers
August 19, 2020
Ritz London clients scammed after apparent data breach
Armed with personal data stolen from the hotel’s dining reservation system, fraudsters trick guests into handing over their credit card details The post Ritz London clients scammed after apparent data breach appeared first on WeLiveSecurity
August 19, 2020
An update that fixes one vulnerability is now available.
August 19, 2020
An update that fixes one vulnerability is now available.
August 19, 2020
An update that fixes one vulnerability is now available.
August 19, 2020
Several security issues were fixed in QEMU.
August 19, 2020
Airline DMARC Policies Lag, Opening Flyers to Email Fraud
August 19, 2020
The Sounds a Key Make Can Produce 3D-Printed Replica
August 19, 2020
An update that fixes two vulnerabilities is now available.
August 19, 2020
An update for rh-mysql80-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 19, 2020
Researchers Warn of Active Malware Campaign Using HTML Smuggling
August 18, 2020
Large Orgs Plagued with Bugs, Face Giant Patch Backlogs
August 18, 2020
Attack of the Instagram clones
Could your social media account be spoofed, why would anybody do it, and what can you do to avoid having a doppelgänger? The post Attack of the Instagram clones appeared first on WeLiveSecurity
August 18, 2020
CVE-2020-12100: Receiving mail with deeply nested MIME parts leads to resource exhaustion as Dovecot attempts to parse it. CVE-2020-12673: Dovecot’s NTLM implementation does not correctly check message buffer size, which leads to reading past allocation which can lead to crash. CVE-2020-12674: Dovecot’s RPA mechanism implementation accepts zero-length
August 18, 2020
In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it’s required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current directory (CVE-2020-15121).
August 18, 2020
It was reported that firejail does not respect the end-of-options separator (“–“), allowing an attacker with control over the command line options of the sandboxed application, to write data to a specified file (CVE-2020-17367). It was reported that firejail when redirecting output via –output or
August 18, 2020
Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the ‘Cache-Digest’ header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via “H2Push off” will mitigate this vulnerability for unpatched servers (CVE-2020-9490).
August 18, 2020
An access flaw was found in targetcli, where the /etc/target and underneath backup directory/files were world-readable. This flaw allows a local attacker to access potentially sensitive information such as authentication credentials from the /etc/target/saveconfig.json and backup files. The highest threat from this vulnerability is to confidentiality (CVE-2020-13867).
August 18, 2020
Servers where the Handler concurrently reads the request body and writes a response can encounter a data race and crash. The httputil.ReverseProxy Handler is affected (CVE-2020-15586). Certain invalid inputs to ReadUvarint or ReadVarint could cause those functions
August 18, 2020
AWS Cryptojacking Worm Spreads Through the Cloud
August 18, 2020
TV stations – stop broadcasting your passwords!
August 18, 2020
Plymouth Passport Office’s pitiful password privacy
August 18, 2020
Smashing Security podcast #191: We are on the bird
August 18, 2020
IcedID Trojan Rebooted with New Evasive Tactics
August 18, 2020
Reading Time: ~ 3 min. Cyber resilience is being put to the test during the coronavirus pandemic. As more and more users work from home, it’s becoming increasingly difficult for IT teams to ensure uniform cyber security on home devices and networks that they don’t own or control. At the same time, cybercriminals are using […]
August 18, 2020
‘EmoCrash’ Exploit Stoppered Emotet For 6 Months
August 17, 2020
Jack Daniels, Ritz London Face Cyberattacks
August 17, 2020
Reading Time: ~ 2 min. Colorado Town Suffers Ransomware Attack The town of Lafayette, Colorado, fell victim to a ransomware attack last week without the capability to recover from the attack without paying a ransom of $45,000 in cryptocurrency. The attack disabled many city services for a number of days until officials determined they would […]
August 17, 2020
Cyberattacks Hit Thousands of Canadian Tax, Benefit Accounts
August 17, 2020
An update that solves 7 vulnerabilities and has two fixes is now available.
August 17, 2020