October 14, 2020
Critical SonicWall VPN Portal Bug Allows DoS, Worming RCE
The rise of fearware and how to fight back
October 14, 2020
FIN11 Cybercrime Gang Shifts Tactics to Double-Extortion Ransomware
October 14, 2020
Intel Adds Memory Encryption, Firmware Security to Ice Lake Chips
October 14, 2020
An update that fixes one vulnerability is now available.
October 14, 2020
An update that solves one vulnerability and has one errata is now available.
October 14, 2020
Several security issues were fixed in Vim.
October 14, 2020
The package chromium before version 86.0.4240.75-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, information disclosure and insufficient validation.
October 14, 2020
October 14, 2020
Security flaws and CVSS rescore process with NVD
October 14, 2020
Red Hat Ansible Tower 3.6 runner release (CVE-2019-18874) 2. Description: * Updated python-psutil version to 5.6.6 inside ansible-runner container (CVE-2019-18874)
October 14, 2020
Windows “Ping of Death” bug revealed – patch now!
October 14, 2020
October Patch Tuesday: Microsoft Patches Critical, Wormable RCE Bug
October 13, 2020
Lemon Duck Cryptocurrency-Mining Botnet Activity Spikes
October 13, 2020
Software AG Data Released After Clop Ransomware Strike – Report
October 13, 2020
Critical Flash Player Flaw Opens Adobe Users to RCE
October 13, 2020
Attackers chain Windows, VPN flaws to target US government agencies
Bad actors have accessed US elections support systems, although there’s no evidence to suggest that election data has been compromised, say FBI and CISA The post Attackers chain Windows, VPN flaws to target US government agencies appeared first on WeLiveSecurity
October 13, 2020
ESET takes part in global operation to disrupt Trickbot
Throughout its monitoring, ESET analyzed thousands of malicious samples every month to help this effort The post ESET takes part in global operation to disrupt Trickbot appeared first on WeLiveSecurity
October 13, 2020
Creepy covert camera “feature” found in popular smartwatch for kids
October 13, 2020
Election Systems Under Attack via Microsoft Zerologon Exploits
October 13, 2020
Authentication Bug Opens Android Smart-TV Box to Data Theft
October 13, 2020
TrickBot Takedown Disrupts Major Crimeware Apparatus
October 13, 2020
Hackney hacked. Council hit by “serious cyber attack”, data breached
October 13, 2020
An update that fixes two vulnerabilities is now available.
October 13, 2020
An update that fixes one vulnerability is now available.
October 13, 2020
An update that solves two vulnerabilities and has one errata is now available.
October 13, 2020
An update that fixes two vulnerabilities is now available.
October 13, 2020
An update that fixes one vulnerability is now available.
October 13, 2020
Office 365: A Favorite for Cyberattack Persistence
October 13, 2020
An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 13, 2020
An update that contains security fixes can now be installed.
October 12, 2020
An update that solves 12 vulnerabilities and has 59 fixes is now available.
October 12, 2020
Android ransomware learns new tricks to lock devices
October 12, 2020
Ransomware Attackers Buy Network Access in Cyberattack Shortcut
October 12, 2020
An update that solves two vulnerabilities and has one errata is now available.
October 12, 2020
Securing A Linux Web Server: Preventing Information Leakage>
October 11, 2020
An update that fixes one vulnerability is now available.
October 11, 2020
Frediano Ziglio discovered multiple buffer overflow vulnerabilities in the QUIC image decoding process of spice, a SPICE protocol client and server library, which could result in denial of service, or possibly, execution of arbitrary code.
October 11, 2020
security update
October 11, 2020
An update that fixes 5 vulnerabilities is now available.
October 10, 2020
An update that fixes 5 vulnerabilities is now available.
October 10, 2020
A potential Cross-Site Scripting (XSS) vulnerability was found in rails, a ruby based MVC framework. Views that allow the user to control the default (not found) value of the `t` and `translate` helpers could be susceptible to XSS attacks. When an HTML-unsafe string is passed as the
October 10, 2020
Oleg Kalnichevski discovered that httpcomponents-client, a Java library for building HTTP-aware applications, can misinterpret a malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request
October 10, 2020
An update that fixes two vulnerabilities is now available.
October 10, 2020
An update that fixes one vulnerability is now available.
October 10, 2020
Taking a screwdriver to unlock your IoT sex toy is nuts
October 10, 2020
An update that solves one vulnerability and has one errata is now available.
October 10, 2020
In Eclipse Web Tools Platform, a component of the Eclipse IDE, XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in the user
October 9, 2020
Reading Time: ~ 2 min. New Jersey Hospital Pays Massive Ransom Officials have decided to pay roughly $670,000 in ransom following a ransomware attack on the University Hospital in New Jersey. The hospital was likely forced into this decision after being unable to restore from backups the 240GB of data stolen in the attack on […]
October 9, 2020
Fitbit Spyware Steals Personal Data via Watch Face
October 9, 2020
Sophisticated Android Ransomware Executes with the Home Button
October 9, 2020
Google adds password breach alerts to Chrome for Android, iOS
The feature is part of the browser’s security improvements that were first built into its desktop version The post Google adds password breach alerts to Chrome for Android, iOS appeared first on WeLiveSecurity
October 9, 2020
Facebook Debuts Bug-Bounty ‘Loyalty Program’
October 9, 2020
An update that fixes one vulnerability is now available.
October 9, 2020
An update that fixes one vulnerability is now available.
October 9, 2020
An update that fixes one vulnerability is now available.
October 9, 2020
Amazon Prime Day Spurs Spike in Phishing, Fraud Attacks
October 9, 2020
MontysThree APT Takes Unusual Aim at Industrial Targets
October 9, 2020
Feds Sound Alarm Over Emotet Attacks on State, Local Govs
October 9, 2020
Google Rolls Out Fixes for High-Severity Android System Flaws
October 9, 2020
BAHAMUT Spies-for-Hire Linked to Extensive Nation-State Activity
October 9, 2020
Wormable Apple iCloud Bug Allows Automatic Photo Theft
October 9, 2020
Backport fix for CVE-2020-26159
October 9, 2020
Backport fix for CVE-2020-26159
October 9, 2020
autobuilt v2.1.0,Security fix for CVE-2020-14370
October 9, 2020
Cisco Fixes High-Severity Webex, Security Camera Flaws
October 8, 2020
HEH P2P Botnet Sports Dangerous Wiper Function
October 8, 2020
Working from a hotel? Beware the dangers of public Wi‑Fi
As more and more hotels are turning rooms into offices, the FBI is warning remote workers of cyber-threats lurking in the shadows The post Working from a hotel? Beware the dangers of public Wi‑Fi appeared first on WeLiveSecurity
October 8, 2020
8 tips to tighten up your work‑from‑home network
October 8, 2020
Microsoft Azure Flaws Open Admin Servers to Takeover
October 8, 2020