December 9, 2020
Microsoft Patch Tuesday fixes 58 flaws
The last Patch Tuesday of the year brings another fresh batch of fixes for Microsoft products and while the number may be lower the patches are no less important. The post Microsoft Patch Tuesday fixes 58 flaws appeared first on WeLiveSecurity
December 9, 2020
D-Link Routers at Risk for Remote Takeover from Zero-Day Flaws
December 9, 2020
The updated packages fix some problems found in version 86 and security vulnerabilities. References: – https://bugs.mageia.org/show_bug.cgi?id=27630
December 9, 2020
An update that fixes one vulnerability is now available.
December 9, 2020
An update that fixes one vulnerability is now available.
December 9, 2020
An update that solves 8 vulnerabilities, contains one feature and has one errata is now available.
December 9, 2020
An update that fixes one vulnerability is now available.
December 9, 2020
An update that fixes one vulnerability is now available.
December 9, 2020
Using OPA for multicloud policy and process portability
December 9, 2020
Google Patches Critical Wi-Fi and Audio Bugs in Android Handsets
December 8, 2020
FireEye Cyberattack Compromises Red-Team Security Tools
December 8, 2020
security update
December 8, 2020
security update
December 8, 2020
Microsoft Wraps Up a Lighter Patch Tuesday for the Holidays
December 8, 2020
Apple Manufacturer Foxconn Confirms Cyberattack
December 8, 2020
The Internal Revenue Service expands identity protection to all tax‑payers
U.S. tax-payers will be able to enroll in the Identity Protection PIN program that was previously available only to certain users starting mid-January. The post The Internal Revenue Service expands identity protection to all tax‑payers appeared first on WeLiveSecurity
December 8, 2020
The Remote-Work Transition Shifts Demand for Cyber Skills
December 8, 2020
Adobe Warns Windows, macOS Users of Critical-Severity Flaws
December 8, 2020
Vishing criminals let rip with two scams at once
December 8, 2020
‘Amnesia:33’ TCP/IP Flaws Affect Millions of IoT Devices
December 8, 2020
David Benjamin discovered a flaw in the GENERAL_NAME_cmp() function which could cause a NULL dereference, resulting in denial of service. Additional details can be found in the upstream advisory:
December 8, 2020
An update that solves 6 vulnerabilities and has one errata is now available.
December 8, 2020
An update for mariadb-galera is now available for Red Hat OpenStack Platform 10 (Newton). Red Hat Product Security has rated this update as having a security impact of High. A Common Vulnerability Scoring System (CVSS) base score, which
December 8, 2020
December 8, 2020
December 8, 2020
December 8, 2020
NSA Warns: Patched VMware Bug Under Active Attack
December 7, 2020
Rana Android Malware Updates Allow WhatsApp, Telegram IM Snooping
December 7, 2020
Europol Warns COVID-19 Vaccine Rollout Vulnerable to Fraud, Theft
December 7, 2020
‘Free’ Cyberpunk 2077 Downloads Lead to Data Harvesting
December 7, 2020
Google patches four high‑severity flaws in Chrome
The new release patches a total of eight vulnerabilities affecting the desktop versions of the popular browser. The post Google patches four high‑severity flaws in Chrome appeared first on WeLiveSecurity
December 7, 2020
Recruitment giant Randstad hit by ransomware, sensitive data stolen
December 7, 2020
Insider Report: Healthcare Security Woes Balloon in COVID-Era
December 7, 2020
QNAP High-Severity Flaws Plague NAS Systems
December 7, 2020
German divers find Enigma crypto machine on seabed
December 7, 2020
An update that fixes one vulnerability is now available.
December 7, 2020
An update that fixes one vulnerability is now available.
December 7, 2020
An update that fixes one vulnerability is now available.
December 7, 2020
An update that solves 5 vulnerabilities and has one errata is now available.
December 7, 2020
An update that fixes one vulnerability is now available.
December 7, 2020
An update that solves one vulnerability and has one errata is now available.
December 7, 2020
An update that fixes one vulnerability is now available.
December 6, 2020
An update that contains security fixes can now be installed.
December 6, 2020
When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable (CVE-2020-26970).
December 6, 2020
In PDFResurrect before 0.20, lack of header validation checks causes a heap-buffer-overflow in pdf_get_version() (CVE-2020-20740). References: – https://bugs.mageia.org/show_bug.cgi?id=27704
December 6, 2020
Mutt before 2.0.2 did not ensure that $ssl_force_tls was processed if an IMAP server’s initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted connection, or to a machine-in-the-middle (CVE-2020-28896).
December 6, 2020
Food bank loses nearly $1,000,000 in Business Email Compromise scam
December 5, 2020
Security fix for CVE-2020-8037
December 5, 2020
security update
December 5, 2020
security update
December 5, 2020
Cybersecurity Advent Calendar: Let Santa in, keep hackers out!
Santa will soon come down the chimney, but there are potential entry points into your home and digital life that you should never leave open The post Cybersecurity Advent Calendar: Let Santa in, keep hackers out! appeared first on WeLiveSecurity
December 5, 2020
December 5, 2020
The package musl before version 1.2.1-2 is vulnerable to arbitrary code execution.
December 5, 2020
The package webkit2gtk before version 2.30.3-1 is vulnerable to arbitrary code execution.
December 5, 2020
The package gitea before version 1.12.6-1 is vulnerable to insufficient validation.
December 5, 2020
The package neomutt before version 20201120-1 is vulnerable to silent downgrade.
December 5, 2020
The package matrix-synapse before version 1.20.1-1 is vulnerable to denial of service.
December 5, 2020
Biological Worries Over Malware Attacks Researchers have recently unveiled the latest potential victim for malware authors: biological laboratories. By illicitly accessing these facilities, hackers may be able to digitally replace sections of DNA strings, causing unexpected results when biologists go to create or experiment with these compounds. While it is fortunate that this specific targeted […]
December 4, 2020
Making Sense of the Security Sensor Landscape
December 4, 2020
High-Severity Chrome Bugs Allow Browser Hacks
December 4, 2020
security update
December 4, 2020
Novel Online Shopping Malware Hides in Social-Media Buttons
December 4, 2020
Two vulnerabilities in the certificate list syntax verification and in the handling of CSN normalization were discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated remote attacker can take advantage of these
December 4, 2020
Several vulnerabilities were discovered in salt. CVE-2020-16846
December 4, 2020
According to data from a recent report, only 60% of office workers worldwide believe their company is resilient against cyberattacks. Nearly one in four (23%) admit to not knowing, while nearly one in five (18%) flat-out think it isn’t. In the anonymous, write-in responses to the survey, many workers agreed that their employers could be […]
December 4, 2020
Cybersecurity Trends 2021: Staying secure in uncertain times
ESET experts look back at some of the key themes that defined the cybersecurity landscape in the year that’s ending and give their takes on what to expect in 2021 The post Cybersecurity Trends 2021: Staying secure in uncertain times appeared first on WeLiveSecurity
December 4, 2020
VMware Rolls a Fix for Formerly Critical Zero-Day Bug
December 4, 2020
Vancouver Metro Disrupted by Egregor Ransomware
December 4, 2020
An update that fixes 5 vulnerabilities, contains one feature is now available.
December 4, 2020
An update that fixes 10 vulnerabilities is now available.
December 4, 2020
December 4, 2020
Chiaki Ishikawa discovered a stack overflow in SMTP server status handling which could potentially result in the execution of arbitrary code.
December 4, 2020