Menu

Monthly Archives: November 2020

FBI warns of criminals spoofing its website domain names
Manchester United: IT Systems Disrupted in Cyberattack
Joe Biden Campaign Subdomain Down After Hacktivist Defacement
Penetration testing isn’t enough, you need to activate full offensive operations

An update that solves 15 vulnerabilities and has 75 fixes is now available.

An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for microcode_ctl is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for microcode_ctl is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact

An update for microcode_ctl is now available for Red Hat Enterprise Linux 7.4 Advances Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for microcode_ctl is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

US Air Force deploys robot security dogs to guard base
No Xmas office party? Missing infosec pals and colleagues? Want to listen to DJs who also happen to be cyber warriors?
Head thumping, heart racing? Here’s how not to panic when you’re under cyber attack

security update

security update

Update to 87.0.4280.66. Fixes bugs and security holes. Yay! CVE-2020-16012 CVE-2020-16018 CVE-2020-16019 CVE-2020-16020 CVE-2020-16021 CVE-2020-16022 CVE-2020-16015 CVE-2020-16014 CVE-2020-16023 CVE-2020-16024 CVE-2020-16025 CVE-2020-16026 CVE-2020-16027 CVE-2020-16028 CVE-2020-16029 CVE-2020-16030 CVE-2020-16031 CVE-2020-16032 CVE-2020-16033 CVE-2020-16034 CVE-2020-16035

– Update to upstream 2.1-31. 20201118 – Removal of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68[1]; – Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up to 0x34[2]. [1] The microcode has been removed after reports of system hangs: https://github.com/intel/Intel-Linux-Processor- Microcode-Data-Files/issues/44 [2] Addresses CVE-2020-8695 for this platform.

Fix buffer overflow (RHBZ #1897485) A global buffer overflow was discovered in the check_chunk_name function via a crafted png file.

Fix buffer overflow (RHBZ #1897485) A global buffer overflow was discovered in the check_chunk_name function via a crafted png file.

Fix buffer overflow (RHBZ #1897485) A global buffer overflow was discovered in the check_chunk_name function via a crafted png file.

Manchester United working with infosec experts to ‘minimize ongoing IT disruption’ caused by ‘cyber attack’

Multiple vulnerabilities were discovered in Zabbix, a network monitoring solution. An attacker may remotely execute code on the zabbix server, and redirect to external links through the zabbix web frontend.

Three issues have been found in golang-1.8, a Go programming language compiler version 1.8

Two issues have been found in golang-1.7, a Go programming language compiler version 1.7

A heap-based buffer overflow flaw was discovered in MuPDF, a lightweight PDF viewer, which may result in denial of service or the execution of arbitrary code if malformed documents are opened.

security update

IBM Power9 processors beset by Cardiac Osprey data-leaking flaw as Spectre still haunts speculative chips
Google Services Weaponized to Bypass Security in Phishing, BEC Campaigns
VMware Fixes Critical Flaw in ESXi Hypervisor
Good Heavens! 10M Impacted in Pray.com Data Exposure
End to end encryption? In Android’s default messaging app? Don’t worry, nobody else noticed either
New Grelos Skimmer Variants Siphon Credit Card Data
The worst passwords of 2020: Is it time to change yours?

They’re supremely easy to remember, as well as easy to crack. Here’s how to improve your password security. The post The worst passwords of 2020: Is it time to change yours? appeared first on WeLiveSecurity

Facebook patches Messenger audio snooping bug – update now!
Robot vacuum cleaners can eavesdrop on your conversations, researchers reveal
Facebook Messenger Bug Allows Spying on Android Users

An update that fixes three vulnerabilities is now available.

An update that fixes 16 vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

An update that solves two vulnerabilities and has 12 fixes is now available.

NCSC’s London HQ was chosen because GCHQ spies panicked at the prospect of grubby Shoreditch offices
A guide to security technologies in Red Hat Enterprise Linux

An update that fixes three vulnerabilities is now available.

An update that fixes 12 vulnerabilities is now available.

UK reveals new ‘National Cyber Force’, announces Space Command and mysterious AI agency
You can protect the company from hackers, but can you protect the company from the CEO?
VMware reveals critical hypervisor bugs found at Chinese white hat hacking comp. One lets guests run code on hosts
In 2016 Australia’s online census failed. Preparations for the 2021 edition have been rated ‘partly effective’
Robot Vacuums Suck Up Sensitive Audio in ‘LidarPhone’ Hack
German COVID-19 Contact-Tracing Vulnerability Allowed RCE
US Senate approves deepfake bill to defend against manipulated media

security update

GO SMS Pro Android App Exposes Private Photos, Videos and Messages
Tis’ the Season for Online Holiday Shopping; and Phishing
AWS includes open-source Suricata for stateful inspection with Network Firewall service
Code42 Incydr Series: Protect IP with Code42 Incydr
Get the free Security Intelligence Handbook from Recorded Future
Food-Supply Giant Americold Admits Cyberattack
IoT Cybersecurity Improvement Act Passed, Heads to President’s Desk
Cyberup campaign: 80% of infosec pros fear they might fall foul of UK’s outdated Computer Misuse Act
APT Exploits Microsoft Zerologon Bug: Targets Japanese Companies
Cybercriminals Batter Automakers With Ransomware, IP Theft Cyberattacks
Egregor ransomware attack hijacks printers to spit out ransom notes

An update that solves one vulnerability and has two fixes is now available.

An update that solves one vulnerability and has two fixes is now available.

An update that solves one vulnerability, contains one feature and has two fixes is now available.

An update that fixes one vulnerability is now available.

An update that solves one vulnerability and has one errata is now available.

An update that solves one vulnerability and has one errata is now available.

In any other year, many of us would be gearing up for airline travel, big family dinners, cocktail hours or potlucks with friends, and much more. But with all the challenges this year has brought in terms of how we work and connect during a global pandemic, I’m guessing all our plans look a little […]

How security and compliance automation can help achieve a more secure hybrid cloud
Anti-adversarial machine learning defenses start to take root
Compsci guru wants ‘right to be forgotten’ for old email, urges Google and friends to expire, reveal crypto-keys
China-linked hacking gang ‘APT10’ named as probable actor behind extended attacks on Japanese companies

It’s common for savvy online shoppers to check third-party reviews before making an online purchasing decision. That’s smart, but testing the efficacy of security software can be a bit more difficult than determining if a restaurant had decent service or if clothing brand’s products are true to size. So, with the arguably more significant consequences […]

Smashing Security podcast #205: Zoom password pinching and Parler problems
Reeling from ransomware attack, Managed.com takes down its entire web hosting infrastructure
Widespread Scans Underway for RCE Bugs in WordPress Websites
Cryptocurrency exchange Liquid suffers security breach, user data exposed

security update

LAPD Bans Facial Recognition, Citing Privacy Concerns
Cisco Webex ‘Ghost’ Flaw Opens Meetings to Snooping
Heads up: A new strain of card-skimming Grelos malware is on the loose

An update for firefox is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

How AI Is powering a new generation of cyber-attacks
Bumble bugs could have exposed personal data of all users

The information at risk of theft due to API flaws included people’s pictures, locations, dating preferences and Facebook data The post Bumble bugs could have exposed personal data of all users appeared first on WeLiveSecurity

Google Chrome 87 Closes High-Severity ‘NAT Slipstreaming’ Hole
The ones who brought you Let’s Encrypt, bring you: Tools for gathering anonymized app usage metrics from netizens
Firing of CISA Chief Christopher Krebs Widely Condemned
Test and Trace chief Dido Harding prompted to self-isolate by NHS COVID-19 app
You call that DevSecOps? Why your DevSecOps practice may be falling short
Hackers steal 46 million Animal Jam account records, dating back 10 years

Release of OpenShift Serverless 1.11.0 2. Description: Red Hat OpenShift Serverless 1.11.0 is a generally available release of the OpenShift Serverless Operator. This version of the OpenShift Serverless

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

No, the creator of cURL didn’t morph into Elon Musk and give away Bitcoins. But his hijacked Twitter page tried to
Trump fires cybersecurity boss Chris Krebs for doing his job: Securing the election and telling the truth about it
Israeli spyware maker NSO channels Hollywood spy thrillers in appeal for legal immunity in WhatsApp battle