January 25, 2021
2.28M MeetMindful Daters Compromised in Data Breach
security update
January 25, 2021
Cisco DNA Center Bug Opens Enterprises to Remote Attack
January 25, 2021
SonicWall Breach Stems from ‘Probable’ Zero-Days
January 25, 2021
An update that contains security fixes can now be installed.
January 25, 2021
An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 25, 2021
An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 25, 2021
An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 25, 2021
urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest() (CVE-2020-26137). References:
January 25, 2021
It was discovered that pip did not properly sanitize the filename during pip install. A remote attacker could possible use this issue to read and write arbitrary files on the host filesystem as root, resulting in a directory traversal attack (CVE-2019-20916).
January 25, 2021
The update for gst-plugins-bad1.0 released as DSA 4833-1 choosed a package version incompatible with binNMUs and prevented upgrades to the fixed packages. Updated gst-plugins-bad1.0 packages are now available to correct this issue.
January 24, 2021
Several vulnerabilities were discovered in salt, a powerful remote execution manager. The flaws could result in authentication bypass and invocation of Salt SSH, creation of certificates with weak file permissions via the TLS execution module or shell injections with the
January 24, 2021
An update that fixes 35 vulnerabilities is now available.
January 24, 2021
An update that fixes one vulnerability is now available.
January 24, 2021
Security fixes: – fix buffer overrun in EUC-KR conversion module [bz #2497] (CVE-2019-25013) – arm: CVE-2020-6096: Fix multiarch memcpy for negative length [BZ #25620] – arm: CVE-2020-6096: fix memcpy and memmove for negative length [BZ #25620] – iconv: Fix incorrect UCS4 inner loop bounds [BZ #26923] (CVE-2020-29562)
January 23, 2021
Rebase SDDM to 0.19.0
January 23, 2021
security update
January 23, 2021
security update
January 23, 2021
security update
January 23, 2021
An update that fixes one vulnerability is now available.
January 23, 2021
An update that fixes one vulnerability is now available.
January 23, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
January 23, 2021
Microsoft Edge, Google Chrome Roll Out Password Protection Tools
January 22, 2021
Amazon Kindle RCE Attack Starts with an Email
January 22, 2021
Update to 87.0.4280.141. Fixes: CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112 CVE-2021-21113 CVE-2020-16043 CVE-2021-21114 CVE-2020-15995 CVE-2021-21115 CVE-2021-21116
January 22, 2021
A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling (CVE-2020-10719). References:
January 22, 2021
A heap-based buffer overflow vulnerability was found in the blosc library. Depending on how the library is used, if there is a lack of space to write compressed data, an attacker might exploit this flaw to crash the program or potentially execute arbitrary code (CVE-2020-29367).
January 22, 2021
ADT Tech Hacks Home-Security Cameras to Spy on Women
January 22, 2021
Discord-Stealing Malware Invades npm Packages
January 22, 2021
Ransomware Attackers Publish 4K Private Scottish Gov Agency Files
January 22, 2021
Vadokrist: A wolf in sheep’s clothing
Another in our occasional series demystifying Latin American banking trojans The post Vadokrist: A wolf in sheep’s clothing appeared first on WeLiveSecurity
January 22, 2021
US administration adds “subliminal” ad to White House website
January 22, 2021
An update that fixes 13 vulnerabilities is now available.
January 22, 2021
An update that fixes 13 vulnerabilities is now available.
January 22, 2021
A vulnerability in KDE Connect could lead to a Denial of Service condition.
January 22, 2021
Multiple vulnerabilities have been found in VirtualBox, the worst of which could result in privilege escalation.
January 22, 2021
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.
January 22, 2021
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.
January 22, 2021
Einstein Healthcare Network Announces August Breach
January 21, 2021
SQL Server Malware Tied to Iranian Software Firm, Researchers Allege
January 21, 2021
Is Joe Biden’s Peloton a cybersecurity risk? Don’t sweat about it
January 21, 2021
Google Forms Set Baseline For Widespread BEC Attacks
January 21, 2021
Google Searches Expose Stolen Corporate Credentials
January 21, 2021
An update that fixes one vulnerability is now available.
January 21, 2021
Google Chrome wants to fix your unsafe passwords
January 21, 2021
Using OPA with GitOps to speed cloud-native development
January 21, 2021
Webroot BrightCloud® Threat Intelligence relies on the collective power of millions of devices working together. But what sometimes gets lost is the actual humans behind bringing this technology to market. In this Employee Spotlight, we talk to Account Development Executive, Jordan Gray, who works with C-level executives to integrate threat intelligence solutions within their environments. […]
January 20, 2021
Critical Cisco SD-WAN Bugs Allow RCE Attacks
January 20, 2021
DNSpooq bugs expose millions of devices to DNS cache poisoning
Security flaws in a widely used DNS software package could allow attackers to send users to malicious websites or to remotely hijack their devices The post DNSpooq bugs expose millions of devices to DNS cache poisoning appeared first on WeLiveSecurity
January 20, 2021
Backport fixes for CVE-2020-35653, CVE-2020-35654, CVE-2020-35655.
January 20, 2021
Backport fixes for CVE-2020-35653, CVE-2020-35654, CVE-2020-35655.
January 20, 2021
Update to security fix 1.6 version. Fixes CVE-2019-17455
January 20, 2021
rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences of semicolon characters in RFC822 address fields (aka terminators of empty groups).
January 20, 2021
NVIDIA Gamers Face DoS, Data Loss from Shield TV Bugs
January 20, 2021
Rebase to 1.9.5p1 – updated sudo url Resolves: rhbz#1902758 – enabled python plugin as a subpackage Resolves: rhbz#1909299 – fixed double free in sss_to_sudoers Resolves: rhbz#1885874 – fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit Resolves: rhbz#1915055 – fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-
January 20, 2021
Has the coronavirus pandemic affected Apple’s hardware design?
January 20, 2021
Malwarebytes Hit by SolarWinds Attackers
January 20, 2021
Investment Scammers Prey on Dating App Users, Interpol Warns
January 20, 2021
Red Hat OpenShift Container Platform release 3.11.374 is now available with updates to packages and images that fix several bugs. This release also includes a security update for Red Hat OpenShift Container Platform 3.11.
January 20, 2021
An update that fixes 7 vulnerabilities is now available.
January 20, 2021
Open banking is the future, so let’s secure the APIs
January 20, 2021
An update that solves two vulnerabilities and has one errata is now available.
January 20, 2021
An update that fixes one vulnerability is now available.
January 20, 2021
Red Hat OpenShift Container Platform release 4.5.27 is now available with updates to packages and images that fix several bugs and add enhancements. This release also includes a security update for Red Hat OpenShift Container Platform 4.5.
January 19, 2021
DNSpooq Flaws Allow DNS Hijacking of Millions of Devices
January 19, 2021
Rebase to 1.9.5p1 – updated sudo url Resolves: rhbz#1902758 – enabled python plugin as a subpackage Resolves: rhbz#1909299 – fixed double free in sss_to_sudoers Resolves: rhbz#1885874 – fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit Resolves: rhbz#1915055 – fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-
January 19, 2021
security update
January 19, 2021
Rob Joyce to Take Over as NSA Cybersecurity Director
January 19, 2021
FBI warns of voice phishing attacks stealing corporate credentials
Criminals coax employees into handing over their access credentials and use the login data to burrow deep into corporate networks The post FBI warns of voice phishing attacks stealing corporate credentials appeared first on WeLiveSecurity
January 19, 2021
WhatsApp delays privacy policy update after confusion, backlash
Millions of people flock to Signal and Telegram as WhatsApp scrambles to assuage users’ concerns The post WhatsApp delays privacy policy update after confusion, backlash appeared first on WeLiveSecurity
January 19, 2021
SolarWinds Malware Arsenal Widens with Raindrop
January 19, 2021
Linux Devices Under Attack by New FreakOut Malware
January 19, 2021
Attackers Steal E-Mails, Info from OpenWrt Forum
January 19, 2021
It was discovered that OpenLDAP incorrectly handled certain malformed inputs. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service (CVE-2020-25709, CVE-2020-25710). References:
January 19, 2021
Multiple vulnerabilities related to unsafe tempfile usage (bsc#1146690, bsc#1146691, bsc#1146692, bsc#1146766, bsc#1146776, bsc#1146784, bsc#1146785, bsc#1146787). Issues where the ocfmon user was created with a default password (bsc#1021689,
January 19, 2021
An update for dnsmasq is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
January 19, 2021