Menu

Monthly Archives: August 2020

Uncle Sam blames best pal China as Taidoor crew’s dirty RAT takes aim at Western orgs, but others are less sure

libssh could be made to crash if it received a specially crafted request.

Apple Knocked Off Perch as Most Imitated Brand for Phishing Attacks
Podcast: Learning to ‘Speak the Language’ of OT Security Teams
GandCrab ransomware hacker arrested in Belgium

Reading Time: ~ 5 min. Don’t expect cybercriminals to go easy during a hurricane. Quite the opposite, in fact. Just like they’ve used the coronavirus pandemic to launch COVID-related malware scams, hackers will capitalize on the names and news coverage of hurricanes to disguise attacks. That’s why now is a good time to review your […]

postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML (CVE-2020-13692) SL6 noarch postgresql-jdbc-8.4.704-4.el6_10.noarch.rpm – Scientific Linux Development Team

Updated ovirt-engine packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML (CVE-2020-13692) SL7 noarch postgresql-jdbc-9.2.1002-8.el7_8.noarch.rpm postgresql-jdbc-javadoc-9.2.1002-8.el7_8.noarch.rpm – Scientific Linux Development Team

Doctor, doctor, got some sad news, there’s been a bad case of hacking you: UK govt investigates email fail
Leaky AWS S3 buckets are so common, they’re being found by the thousands now – with lots of buried secrets
Days after President Trump suggests pausing election over security, US House passes $500m for states to shore up election security

security update

Google Updates Ad Policies to Counter Influence Campaigns, Extortion
How much is your personal data worth on the dark web?

The going prices are lower than you probably think – your credit card details, for example, can sell for a few bucks The post How much is your personal data worth on the dark web? appeared first on WeLiveSecurity

Netgear Won’t Patch 45 Router Models Vulnerable to Serious Flaw
UK Defence Committee chair muses treating TikTok like Huawei: So eyeball its code then ban it from the country?
Garmin Pays Up to Evil Corp After Ransomware Attack — Reports
Linux Foundation rolls bunch of overlapping groups into one to tackle growing number of open-source security vulns
Black Hat USA 2020: Critical Meetup.com Flaws Reveal Common AppSec Holes

An update that fixes one vulnerability is now available.

‘We stopped ransomware’ boasts Blackbaud CEO. And by ‘stopped’ he means ‘got insurance to pay off crooks’

An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Meetup Critical Flaws Allow ‘Group’ Takeover, Payment Theft

An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

libvncserver: websocket decoding buffer overflow (CVE-2017-18922) SL7 x86_64 libvncserver-0.9.9-14.el7_8.1.i686.rpm libvncserver-0.9.9-14.el7_8.1.x86_64.rpm libvncserver-debuginfo-0.9.9-14.el7_8.1.i686.rpm libvncserver-debuginfo-0.9.9-14.el7_8.1.x86_64.rpm libvncserver-devel-0.9.9-14.el7_8.1.i686.rpm libvncserver-devel-0.9.9-14.el7_8.1.x86_64.rpm – Scientific Linux [More…]

Oh cool, more Cisco patches to apply. Happy Monday
IoT Security Vulnerabilities are Ubiquitous: How To Secure Your Router and Your Linux System Now>

An update that fixes one vulnerability is now available.

Multiple security issues have been found in Thunderbird which could result in denial of service or potentially the execution of arbitrary code.

It was discovered that there was an escaping issue in libphp-phpmailer, an email generation utility class for the PHP programming language.

Multiple vulnerabilities have been found in Python, the worst of which could result in a Denial of Service condition.

In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in

Security fix for CVE-2020-15917 (STARTTLS protocol violation).

security update

Fix insufficient output escaping bug in file attachment names (CVE-2020-13625). References: – https://bugs.mageia.org/show_bug.cgi?id=26760

Twitter hack – three suspects charged in the US