An update that fixes one vulnerability is now available.
September 5, 2020
An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest […]
September 5, 2020
The update of squid3 released as DLA-2278-2 introduced a regression due to the updated fix for CVE-2019-12529. The new Kerberos authentication code prevented base64 token negotiation. Updated squid3 packages are now
September 4, 2020
Social Media: Thwarting The Phishing-Data Goldmine
September 4, 2020
Vulnerability Disclosure: Ethical Hackers Seek Best Practices
September 4, 2020
Microsoft debuts deepfake detection tool
As the US presidential election nears, the company’s new tech should also help assure people that an image or video is authentic The post Microsoft debuts deepfake detection tool appeared first on WeLiveSecurity
September 4, 2020
Houseparty – should I stay or should I go now?
What’s the benefit of deleting your Houseparty – or any other unused – account, rather than just uninstalling the app? The post Houseparty – should I stay or should I go now? appeared first on WeLiveSecurity
September 4, 2020
Facebook Debuts Third-Party Vulnerability Disclosure Policy
September 4, 2020
Phishing tricks – the Top Ten Treacheries of 2020
September 4, 2020
India Blocks High-Profile Chinese Apps on Political, Privacy Concerns
September 4, 2020
WhatsApp Discloses 6 Bugs via Dedicated Security Site
September 4, 2020
Attackers Can Exploit Critical Cisco Jabber Flaw With One Message
September 3, 2020
Google Ups Product-Abuse Bug Bounties
September 3, 2020
Reading Time: ~ 4 min. Substitute your digital space for your home and encryption for the safe and you have what’s known as ransomware. Ransomware is a type of malware. After the initial infection, your files are encrypted, and a note appears demanding payment, which is usually in the form of cryptocurrency such as bitcoin […]
September 3, 2020
Vishing scams use Amazon and Prime as lures – don’t get caught!
September 3, 2020
Norway’s parliament struck by hackers
Unknown threat actors were able to exfiltrate information from the email accounts of several parliamentarians The post Norway’s parliament struck by hackers appeared first on WeLiveSecurity
September 3, 2020
KryptoCibule: The multitasking multicurrency cryptostealer
ESET researchers analyze a previously undocumented trojan that is spread via malicious torrents and uses multiple tricks to squeeze as many cryptocoins as possible from its victims while staying under the radar The post KryptoCibule: The multitasking multicurrency cryptostealer appeared first on WeLiveSecurity
September 3, 2020
Python-based Spy RAT Emerges to Target FinTech
September 3, 2020
NSA Mass Surveillance Program Illegal, U.S. Court Rules
September 3, 2020
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
September 3, 2020
geary 3.36.3.1 release: * Fixed handling of pinned, invalid TLS certificates: CVE-2020-24661 * Build bug fixes
September 3, 2020
Rebased to version 8.0.21
September 3, 2020
Squid version update to 4.13 and security fixes
September 3, 2020
CVE-2020-12100: Parsing mails with a large number of MIME parts could have resulted in excessive CPU usage or a crash due to running out of stack memory. CVE-2020-12673: Dovecot’s NTLM implementation does not correctly check message buffer size, which leads to reading past allocation which can lead to crash. CVE-2020-10967: lmtp/submission:
September 3, 2020
Squid version update to 4.13 and security fixes
September 3, 2020
Hackers hijack Indian PM Narendra Modi Twitter account
September 3, 2020
Smashing Security podcast #194: Carry on droning
September 2, 2020
U.S. Agencies Must Adopt Vulnerability-Disclosure Policies by March 2021
September 2, 2020
BEC Wire Transfers Average $80K Per Attack
September 2, 2020
Triple-Threat Cryptocurrency RAT Mines, Steals and Harvests
September 2, 2020
WordPress websites attacked via File Manager plugin vulnerability
September 2, 2020
Joker Spyware Plagues More Google Play Apps
September 2, 2020
An update that fixes one vulnerability is now available.
September 2, 2020
An update that fixes 9 vulnerabilities is now available.
September 2, 2020
An update that fixes two vulnerabilities is now available.
September 2, 2020
An update that fixes one vulnerability is now available.
September 2, 2020
An update that solves one vulnerability and has two fixes is now available.
September 2, 2020
Phishing scam uses Sharepoint and One Note to go after passwords
September 2, 2020
Live Webinar: XDR and Beyond
September 2, 2020
Cisco Warns of Active Exploitation of Flaw in Carrier-Grade Routers
September 2, 2020
New F33 selinux-policy build.
September 2, 2020
Free ebook: Aligning cyber skills with the MITRE ATT&CK framework
September 2, 2020
China-based APT Debuts Sepulcher Malware in Spear-Phishing Attacks
September 2, 2020
security update
September 1, 2020
Magento Sites Vulnerable to RCE Stemming From Magmi Plugin Flaws
September 1, 2020
Security flaw allows bypassing PIN verification on Visa contactless payments
The vulnerability could allow criminals to rack up fraudulent charges on the cards without needing to know the PINs The post Security flaw allows bypassing PIN verification on Visa contactless payments appeared first on WeLiveSecurity
September 1, 2020
U.S. Voter Databases Offered for Free on Dark Web, Report
September 1, 2020
Magecart Credit-Card Skimmer Adds Telegram as C2 Channel
September 1, 2020
Hackers tricked Apple into approving malicious Adobe Flash Player update
September 1, 2020
FBI: Ring Smart Doorbells Could Sabotage Cops
September 1, 2020
An update that fixes two vulnerabilities is now available.
September 1, 2020
An update that solves 6 vulnerabilities and has 7 fixes is now available.
September 1, 2020
Pioneer Kitten APT Sells Corporate Network Access
September 1, 2020
An update for kernel is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 1, 2020
An update for bash is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
September 1, 2020
An update that fixes two vulnerabilities is now available.
September 1, 2020
An update that fixes one vulnerability is now available.
September 1, 2020
Hack this email account… plz plz plz!
September 1, 2020