February 9, 2021
Actively Exploited Windows Kernel EoP Bug Allows Takeover
Google Play Boots Barcode Scanner App After Ad Explosion
February 9, 2021
The supply chain attack that Trojanized a SolarWinds update to infect and spy on the IT management platform’s customer base continues to be analyzed. Early reports have called the methods highly sophisticated and the actors highly trained. We do know that IP addresses, a command and control server and a malicious product update file were […]
February 9, 2021
Attackers Exploit Critical Adobe Flaw to Target Windows Users
February 9, 2021
Hacker attempts to poison Florida city’s water supply
While the incursion was thwarted in time, cyberattacks targeting critical infrastructure are a major cause for concern The post Hacker attempts to poison Florida city’s water supply appeared first on WeLiveSecurity
February 9, 2021
ESET Threat Report Q4 2020
A view of the Q4 2020 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts The post ESET Threat Report Q4 2020 appeared first on WeLiveSecurity
February 9, 2021
Beware of technical “experts” bombarding you with bug reports
February 9, 2021
Android Devices Hunted by LodaRAT Windows Malware
February 9, 2021
Cyberpunk 2077 Publisher Hit with Hack, Threats and Ransomware
February 9, 2021
Hacker Tries to Poison Water Supply of Florida Town
February 9, 2021
Hackers publish patient data stolen from two US hospital chains
February 9, 2021
DISA Has Released the Red Hat Enterprise Linux 8 STIG
February 9, 2021
How To Secure the Linux Kernel >
February 9, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2021:0411
February 9, 2021
An update for qemu-kvm-rhev is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 and Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 9, 2021
Red Hat OpenShift Container Platform release 4.5.31 is now available with updates to packages and images that fix several bugs. This release also includes a security update for Red Hat OpenShift Container Platform 4.5.
February 9, 2021
Various overflow errors were identified and fixed. CVE-2020-27814
February 9, 2021
The container caasp/v4.5/cilium-operator was updated. The following patches have been included in this update:
February 9, 2021
The container caasp/v4.5/cilium was updated. The following patches have been included in this update:
February 9, 2021
A hacker tried to poison Florida city’s water supply
February 9, 2021
Safer Internet Day – Why not up your game?
February 9, 2021
Billions of Passwords Offered for $2 in Cyber-Underground
February 8, 2021
Critical WordPress Plugin Flaw Allows Site Takeover
February 8, 2021
Ransomware Demands Spike 320%, Payments Rise
February 8, 2021
security update
February 8, 2021
Fake Forcepoint Google Chrome Extension Hacks Windows Users
February 8, 2021
WestRock Ransomware Attack Hinders Packaging Production
February 8, 2021
The php packages are updated to version 7.3.27 to fix a Null Dereference in SoapClient (SOAP). (CVE-2021-21702). Note also php packages version 7.4.15-1.mga7 are available in backports/updates.
February 8, 2021
A vulnerability was discovered in how wpa_supplicant processing P2P (Wi-Fi Direct) group information from active group owners. The actual parsing of that information validates field lengths appropriately, but processing of the parsed information misses a length check when storing a copy of the secondary device types. This can result in writing
February 8, 2021
phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application. One such area, database.php does not verify the source of an HTTP request. This can be leveraged by a remote attacker to trick a logged-in administrator to visit a malicious page with a CSRF exploit and execute […]
February 8, 2021
Report: Adoption of passwordless security takes off amid COVID-19
February 8, 2021
The Linux Flaw you canât afford to Ignore (CVE-2021-3156)>
February 8, 2021
The future of work: Coming sooner than you think
February 8, 2021
An update that fixes three vulnerabilities is now available.
February 8, 2021
CVE-2020-0256 In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This
February 8, 2021
Red Hat OpenShift Container Platform release 4.6.16 is now available with updates to packages and images that fix several bugs. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 8, 2021
Perl.com gets its domain back – normal service restored!
February 7, 2021
An update that fixes 6 vulnerabilities is now available.
February 7, 2021
Multiple vulnerabilites were discovered in privoxy, a privacy enhancing HTTP proxy, like memory leaks, dereference of a NULL-pointer, et al.
February 6, 2021
Security fix for [PUT CVEs HERE]
February 6, 2021
Security fix for CVE-2020-26418, CVE-2020-26419, CVE-2020-26420, CVE-2020-26421 Update to version 3.4.2 Fix %post script on Silverblue
February 6, 2021
Update to jasper-2.0.24, see https://github.com/jasper- software/jasper/releases/tag/version-2.0.24 for details. Backport fix for CVE-2021-3272.
February 6, 2021
security fix for CVE-2021-0326 see also: https://w1.fi/security/2020-2/
February 6, 2021
Industrial Networks See Sharp Uptick in Hackable Security Holes
February 5, 2021
Unpatched WordPress Plugin Code-Injection Bug Afflicts 50K Sites
February 5, 2021
Update to 3.10.0a5. Security fix for CVE-2021-3177.
February 5, 2021
**PHP version 7.4.15** (04 Feb 2021) **Core:** * Fixed bug php#80523 (bogus parse error on >4GB source code). (Nikita) * Fixed bug php#80384 (filter buffers entire read until file closed). (Adam Seitz, cmb) **Curl:** * Fixed bug php#80595 (Resetting POSTFIELDS to empty array breaks request). (cmb) **Date:** * Fixed bug php#80376 (last day of the […]
February 5, 2021
Security fix for CVE-2021-20197
February 5, 2021
Backport patches for CVE-2020-14409, CVE-2020-14410.
February 5, 2021
CVE-2020-8695 Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to
February 5, 2021
An update that fixes two vulnerabilities is now available.
February 5, 2021
Facebook etiquette: Behaviors you should avoid
Sharing your thoughts or photos for the world to see is now as easy as pushing a button, but even a seemingly harmless post may come back to haunt you The post Facebook etiquette: Behaviors you should avoid appeared first on WeLiveSecurity
February 5, 2021
Google Chrome Zero-Day Afflicts Windows, Mac Users
February 5, 2021
Ransomware Attacks Hit Major Utilities
February 5, 2021
Chrome zero-day browser bug found – patch now!
February 5, 2021
flatpak: sandbox escape via spawn portal (CVE-2021-21261) SL7 x86_64 flatpak-1.0.9-10.el7_9.x86_64.rpm flatpak-debuginfo-1.0.9-10.el7_9.x86_64.rpm flatpak-libs-1.0.9-10.el7_9.x86_64.rpm flatpak-builder-1.0.0-10.el7_9.x86_64.rpm flatpak-devel-1.0.9-10.el7_9.x86_64.rpm – Scientific Linux Development Team
February 5, 2021
It was discovered that Mutt incorrectly handled certain email messages. An attacker could possibly use this issue to cause a denial of service because rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences of semicolon characters in RFC822 address fields (aka terminators […]
February 5, 2021
Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the caller as part […]
February 5, 2021
It was discovered that there was an issue in nodejs-ini, where an application could be exploited by a malicious input file. This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be […]
February 5, 2021
Android Devices Prone to Botnet’s DDoS Onslaught
February 4, 2021
# New in release OpenJDK 11.0.10 (2021-01-19): Live versions of these release notes can be found at: * https://bitly.com/openjdk11010 * https://builds.shipilev.net/backports-monitor/release-notes-11.0.10.txt ## Security fixes * JDK-8247619: Improve Direct Buffering of Characters ## Other changes * [JDK-8213821](https://bugs.openjdk.java.net/browse/JDK-8213821):
February 4, 2021
The 5.10.12 stable kernel update contains a number of important fixes across the tree.
February 4, 2021
Spotify Suffers Second Credential-Stuffing Cyberattack in 3 Months
February 4, 2021
Google: Better patching could have prevented 1 in 4 zero‑days last year
Vendors should fix the root cause of a vulnerability, rather than block just one path to triggering it, says Google The post Google: Better patching could have prevented 1 in 4 zero‑days last year appeared first on WeLiveSecurity
February 4, 2021
Critical Cisco Flaws Open VPN Routers Up to RCE Attacks
February 4, 2021
Microsoft Office 365 Attacks Sparked from Google Firebase
February 4, 2021
Free coffee! Belgian researcher hacks prepaid vending machines
February 4, 2021
Clearview Facial-Recognition Technology Ruled Illegal in Canada
February 4, 2021
An update for rh-nodejs14-nodejs is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 4, 2021
STIG Security Profile in Red Hat Enterprise Linux 7
February 4, 2021
Red Hat Quay 3.4.0 is now available with bug fixes and various enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 4, 2021
In KDE KMail, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If the receiver replies to […]
February 4, 2021
Cross-origin information leakage via redirected PDF requests. (CVE-2021-23953) Type confusion when using logical assignment operators in JavaScript switch statements. (CVE-2021-23954)
February 4, 2021
A flaw was found in python. A stack-based buffer overflow was discovered in the ctypes module provided within Python. Applications that use ctypes without carefully validating the input passed to it may be vulnerable to this flaw, which would allow an attacker to overflow a buffer on the stack and crash the application. The highest […]
February 4, 2021
A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby’s `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename (CVE-2019-5477).
February 4, 2021