November 11, 2020
Silver Peak SD-WAN Bugs Allow for Network Takeover
security update
November 11, 2020
Nvidia Warns Windows Gamers of GeForce NOW Flaw
November 11, 2020
Ragnar Locker Ransomware Gang Takes Out Facebook Ads in Key New Tactic
November 11, 2020
Minecraft Apps on Google Play Fleece Players Out of Big Money
November 11, 2020
“Instant bank fraud” hoax is back – don’t spread fake news!
November 11, 2020
High-Severity Cisco DoS Flaw Can Immobilize ASR Routers
November 11, 2020
Now-patched Ubuntu desktop vulnerability allows privilege escalation
November 11, 2020
COVID-19 Data-Sharing App Leaked Healthcare Worker Info
November 11, 2020
Several security issues were fixed in Intel Microcode.
November 11, 2020
raptor2 could be made to crash or run programs as your login if it opened a specially crafted file.
November 11, 2020
GNAP: OAuth the next generation
November 11, 2020
4 steps to DevSecOps in your software supply chain
November 11, 2020
An update that fixes four vulnerabilities is now available.
November 11, 2020
An update that solves 18 vulnerabilities and has two fixes is now available.
November 11, 2020
An update that fixes one vulnerability is now available.
November 11, 2020
An update that fixes 18 vulnerabilities is now available.
November 11, 2020
Microsoft Patch Tuesday Update Fixes 17 Critical Bugs
November 10, 2020
Reading Time: ~ 4 min. A few years back, cryptojacking and cryptomining emerged as relatively low-effort ways to profit by hijacking another’s computing resources. Today, cloudjacking and cloud mining capitalize on similar principles, only by targeting the near infinite resources of the cloud to generate revenue for attackers. Knowing this growing threat is key to […]
November 10, 2020
Colossal Intel Update Anchored by Critical Privilege-Escalation Bugs
November 10, 2020
Scalper-Bots Shake Down Desperate PS5, Xbox Series X Shoppers
November 10, 2020
security update
November 10, 2020
Smishing attack tells you “mobile payment problem” – don’t fall for it!
November 10, 2020
Data on millions of hotel guests exposed in cloud storage leak
The cache of data sitting wide open on a server included full names, national ID numbers and credit card data The post Data on millions of hotel guests exposed in cloud storage leak appeared first on WeLiveSecurity
November 10, 2020
Ghimob Android Banking Trojan Targets 153 Mobile Apps
November 10, 2020
The ppp de-capsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory. The buffer should be big enough to hold the captured data, but it
November 10, 2020
It was discovered that ZeroMQ, a lightweight messaging kernel library does not properly handle connecting peers before a handshake is completed. A remote, unauthenticated client connecting to an application using the libzmq library, running with a socket
November 10, 2020
Microsoft Teams Users Under Attack in ‘FakeUpdates’ Malware Campaign
November 10, 2020
Firefox could be made to crash or run programs as your login if it opened a malicious website.
November 10, 2020
Fabian Vogt discovered a flaw in sddm before 0.19.0. A local attacker can take advantage of a race condition when creating the Xauthority file to escalate privileges (CVE-2020-28049). References:
November 10, 2020
Lout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c. (CVE-2019-19917) Lout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c. (CVE-2019-19918)
November 10, 2020
ACL restrictions bypass. (CVE-2020-25654) References: – https://bugs.mageia.org/show_bug.cgi?id=27472 – https://www.openwall.com/lists/oss-security/2020/10/27/1
November 10, 2020
Trump Site Alleging AZ Election Fraud Exposes Voter Data
November 9, 2020
security update
November 9, 2020
Cyberattack on UVM Health Network Impedes Chemotherapy Appointments
November 9, 2020
Ultimate Member Plugin for WordPress Allows Site Takeover
November 9, 2020
Microsoft Exchange Attack Exposes New xHunt Backdoors
November 9, 2020
Millions of Hotel Guests Worldwide Caught Up in Mass Data Leak
November 9, 2020
An update that fixes four vulnerabilities is now available.
November 9, 2020
An update that fixes one vulnerability is now available.
November 9, 2020
An update that fixes one vulnerability is now available.
November 9, 2020
It was discovered that Docker could be made to expose sensitive information when processing URLs in container image manifests. A remote attacker could use this to trick the user and obtain the user’s registry credentials (CVE-2020-15157).
November 9, 2020
An update that solves 18 vulnerabilities and has one errata is now available.
November 9, 2020
An update that solves one vulnerability and has 35 fixes is now available.
November 9, 2020
SFD_GetFontMetaData() insufficient CVE-2020-5395 backport. (CVE-2020-25690) References: – https://bugs.mageia.org/show_bug.cgi?id=27563 – https://access.redhat.com/errata/RHSA-2020:4844
November 8, 2020
The latest release of mariadb fixes some undisclosed easily exploitable vulnerabilities. (CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 and CVE-2020-14812). Additionally some bugs are fixed:
November 8, 2020
It was discovered that junit contained a local information disclosure vulnerability. On Unix like systems, the system’s temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they are, by default, readable by other users on that same system. This vulnerability does not […]
November 8, 2020
Vaisha Bernard discovered that blueman did not properly sanitize input on the D-Bus interface to blueman-mechanism. A local attacker could possibly use this issue to escalate privileges and run arbitrary code or cause a denial of service (CVE-2020-15238).
November 8, 2020
The suricata package has been updated to version 4.1.9, which fixes security issues and other bugs. See the upstream announcements for details. References: – https://bugs.mageia.org/show_bug.cgi?id=27475
November 8, 2020
An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed. (CVE-2020-8820)
November 8, 2020
security update
November 7, 2020
In libexif/exif-entry.c, through libexif 0.6.21-2+deb9u4, compiler optimization could remove a buffer overflow check, making a buffer overflow possible with some EXIF tags.
November 7, 2020
An update that fixes two vulnerabilities is now available.
November 7, 2020
An update that fixes one vulnerability is now available.
November 7, 2020
An update that fixes two vulnerabilities is now available.
November 7, 2020
An update that solves three vulnerabilities and has 7 fixes is now available.
November 7, 2020
It was discovered that raptor2, an RDF parser library, is prone to heap-based buffer overflow flaws, which could result in denial of service, or potentially the execution of arbitrary code, if a specially crafted file is processed.
November 7, 2020
security update
November 7, 2020
Feds Seize $1B in Bitcoin from Silk Road
November 6, 2020
Campari Site Suffers Ransomware Hangover
November 6, 2020
Gitpaste-12 Worm Targets Linux Servers, IoT Devices
November 6, 2020
Gaming company Capcom hit by cyberattack
The developer of popular video game franchises took swift action to prevent the attack from spreading further across its systems The post Gaming company Capcom hit by cyberattack appeared first on WeLiveSecurity
November 6, 2020
Black Friday – stay safe before, during and after peak retail season
November 6, 2020
Reading Time: ~ 2 min. Maze Ransomware Group Ends Operations A press release issued this week announced the end of the Maze ransomware group’s data theft operations. In the release, the Maze authors revealed their motives behind one of the most successful ransomware campaigns to date, and why they chose to finally shut down their […]
November 6, 2020
Apple Patches Bugs Tied to Previously Identified Zero-Days
November 6, 2020
Several vulnerabilities were discovered in WordPress, a web blogging tool. They allowed remote attackers to run insecure deserialization, embed spam, perform various Cross-Site Scripting (XSS) or Cross-Site Request Forgery (CSRF) attacks, escalate privileges, run arbitrary
November 6, 2020
netqmail could be made to crash if it received specially crafted input.
November 6, 2020
Gaming Giant Capcom Hit By Ragnar Locker Ransomware: Report
November 5, 2020
Zoom Snooping: How Body Language Can Spill Your Password
November 5, 2020
Update to CVE release 3001.3-1 for Python3 Includes fixes for CVE-2020-16846, CVE-2020-17490, CVE-2020-25592
November 5, 2020
Fix executable hardening (PIC/PIE)
November 5, 2020
Update to v2.1.4. Contains security fix for CVE-2020-15238.
November 5, 2020
Update to Chromium 86. A few big things here: 1. Upstream has made hardware accelerated video support (VAAPI) for Linux possible without patches. One key difference is that the patchset used previously in Fedora enabled it by default and upstream’s approach disables it by default. To enable Hardware accelerated video in chromium, open this link […]
November 5, 2020