Menu

Monthly Archives: November 2020

After Cummings’ Barnard Castle trip, cheeky Britons started using the word ‘vision’ in their passwords
Cisco Zero-Day in AnyConnect Secure Mobility Client Remains Unpatched

An update that fixes 5 vulnerabilities is now available.

An update that solves three vulnerabilities and has 6 fixes is now available.

An update that fixes 7 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

Malspam Campaign Milks Election Uncertainty
Data protection scofflaws failed to pay £2m in fines from UK watchdog – and 68% of penalties are still outstanding
Capcom hacked. Resident Evil game developer discloses cyber attack
USBGuard improvements in Red Hat Enterprise Linux 8.3
Smashing Security podcast #203: Testing times, naming names, and the bald truth about AI
Deloitte’s ‘Test your Hacker IQ’ site fails itself after exposing database user name, password in config file
No, GitHub’s source code wasn’t hacked and posted on GitHub, says GitHub CEO
Proofpoint survey: IT security leaders worry about and are ill-prepared to defeat cyber-attacks
Criticalstudies.org sounds pretty important, right? Wrong: USA says it’s an Iranian fake news front

Reading Time: ~ 2 min. Adobe Flash Being Uninstalled on Windows Systems Following its September announcement, Microsoft has released an update that removes Adobe Flash from Windows 10 systems and prevents reinstallation. It should be noted that this update only removes the version of Adobe Flash that comes bundled with Windows 10. Internet browser extensions […]

Revamped DLL side-load attack hits Myanmar

security update

Feds throw book at eBay execs who deny they had anything to do with cyberstalking of site’s critics
Mysterious APT Leaves Curious ‘KilllSomeOne’ Clue
GrowDiaries Exposes Emails, Passwords of 1.4M Cannabis Growers
Google Forms Abused to Phish AT&T Credentials
You can be a security intelligence expert, with these free tools from Recorded Future
If you’re an update laggard, buck up: Chrome zero-days are being exploited in the wild
A career in cybersecurity: Is it for you?

There’s no shortage of opportunities for cybersecurity professionals and people looking to break into this field of endeavor. Could this also be the right career path for you? The post A career in cybersecurity: Is it for you? appeared first on WeLiveSecurity

Toymaker Mattel Hit by Ransomware Attack
VMware Issues Updated Fix For Critical ESXi Flaw
Code42 Incydr Series: Why Most Companies Can’t Stop Departing Employee Data Theft
Another Chrome zero-day, this time on Android – check your version!
Police to Livestream Ring Camera Footage of Mississippi Residents

An update that solves three vulnerabilities and has 6 fixes is now available.

WireGuard Brings Speed and Simplicity to VPN Technology>

Reading Time: ~ 3 min. Mobile devices have become an indispensable part of our lives. By the time we’re teenagers, we’re already tethered to technology that lives in our pockets and connects us to a network far larger than we ever imagined possible. Because of the way we interact with our phones, it knows our […]

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

IBM adds code risk analyzer to cloud-based CI/CD
Using OPA for cloud-native app authorization

An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6, 7, and 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update is now available for Red Hat JBoss Enterprise Application Platform 7.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update that fixes two vulnerabilities is now available.

An update that fixes 16 vulnerabilities is now available.

Was that November’s Patch Tuesday? Already? Oh, no, it’s just Adobe issuing 14 emergency security fixes
Automation software slinger SaltStack warns of stop-watching-the-election-and-patch-now bugs
Oracle Solaris Zero-Day Attack Revealed
APT Groups Finding Success with Mix of Old and New Tools
34M Records from 17 Companies Up for Sale in Cybercrime Forum
The death of the email attack ‘campaign’
Two Chrome Browser Updates Plug Holes Actively Targeted by Exploits
None of our apps (except those 3) could secretly slurp Facebook user details, devs rage to High Court of England and Wales
Google squashes two more Chrome bugs under active attacks

The updates come on the heels of news of attacks exploiting another zero-day in Chrome in tandem with a previously-unknown Windows flaw The post Google squashes two more Chrome bugs under active attacks appeared first on WeLiveSecurity

Google discloses Windows zero‑day bug exploited in the wild

The security hole isn’t expected to be plugged until the forthcoming Patch Tuesday bundle of security fixes The post Google discloses Windows zero‑day bug exploited in the wild appeared first on WeLiveSecurity

How’s this for the ultimate gaming achievement? Half-Life 2’s Gnome Chompski is going to space – in real life
Adobe Warns Windows, MacOS Users of Critical Acrobat and Reader Flaws
Media Comms Giant Says Ransomware Hit Will Cost Millions
Oracle patches severe flaw in WebLogic Server that could be exploited ‘without the need for a username and password’
Oracle Rushes Emergency Fix for Critical WebLogic Server Flaw
Protecting the NHS: NCSC fended off lots of meddling aimed at UK health orgs while ransomware ramped up

python-cryptography could be made to expose sensitive information over the network.

Several security issues were fixed in AccountsService.

GDM could be made to create privileged users.

Vaisha Bernard discovered that Blueman, a graphical bluetooth manager performed insufficient validation on a D-Bus interface, which could result in denial of service or privilege escalation.

I’ll give you my passwords if you investigate police corruption, accused missile systems leaker told cops

There were several vulnerabilites reported against wordpress, as follows: CVE-2020-28032

CERT/CC: ‘Sensational’ bug names spark fear, hype – so we’ll give flaws our own labels… like Suggestive Bunny

An update that solves one vulnerability and has two fixes is now available.

Russian jailed for eight years in the US for writing code that sifted botnet logs for web banking creds for fraudsters
Are you protected from the latest threats to Industrial Control Systems?
$100M Botnet Scheme Lands Cybercriminal 8 Years in Jail
Survey: Cybersecurity Skills Shortage is ‘Bad,’ But There’s Hope
WordPress Pushes Out Multiple Flawed Security Updates
Texas Gold-Dealer Mined for Payment Details in Months-Long Data Breach
Scammers Abuse Google Drive to Send Malicious Links
Unpatched Windows Zero-Day Exploited in the Wild for Sandbox Escape
Is Hunter Biden’s laptop password really “Hunter02”?
Google’s home security package flies the Nest, Chocolate Factory pledges software support – for now
You can’t spell ‘electronics’ without ‘elect’: The time for online democracy has come
Maze ransomware gang says it has quit the cybercrime business

Several security issues were fixed in Samba.

Google reCAPTCHA service under the microscope: Questions raised over privacy promises, cookie use

An update that fixes three vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes three vulnerabilities is now available.

India securities regulator and stock exchanges worry that crims are exploiting lax work from home security

In junit4 the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system’s temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they are, by

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system. Both the SPICE client (spice-gtk) and server are affected by

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1.

An update that solves 5 vulnerabilities and has one errata is now available.

An update that solves 5 vulnerabilities and has one errata is now available.

An update that solves 8 vulnerabilities and has 5 fixes is now available.