July 20, 2021
The Qualys Research Labs discovered that an attacker-controlled allocation using the alloca() function could result in memory corruption, allowing to crash systemd and hence the entire operating system.
July 20, 2021
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
July 20, 2021
An integer overflow flaw was found in glibc that may result in reading of arbitrary memory when wordexp is used with a specially crafted untrusted regular expression input (CVE-2021-35942). References:
July 20, 2021
This update provides Mbed TLS 2.16.11, with a number of bug fixes, including security fixes. The intermediate version 2.16.10 are included security fixes. See the referenced release notes and advisories for details.
July 20, 2021
What’s Next for REvil’s Victims?
July 19, 2021
Unpatched iPhone Bug Allows Remote Device Takeover
July 19, 2021
security update
July 19, 2021
Ruthless Attackers Target Florida Condo Collapse Victims
July 19, 2021
Protecting Phones From Pegasus-Like Spyware Attacks
July 19, 2021
An update that fixes one vulnerability is now available.
July 19, 2021
An update that fixes one vulnerability is now available.
July 19, 2021
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. CVE-2021-30547
July 19, 2021
An update that fixes three vulnerabilities is now available.
July 19, 2021
An update that solves one vulnerability and has one errata is now available.
July 19, 2021
An update for nettle is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 19, 2021
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the stable distribution (buster), these problems have been fixed in
July 18, 2021
Multiple vulnerabilities have been found in Dovecot, the worst of which could result in a Denial of Service condition.
July 17, 2021
New upstream version (90.0) Disabled Wayland on KDE by default due to popup bugs.
July 17, 2021
Fix crash in ThemeService (thanks to OpenSUSE) —- Security fixes. CVE-2021-30506 CVE-2021-30507 CVE-2021-30508 CVE-2021-30509 CVE-2021-30510 CVE-2021-30511 CVE-2021-30512 CVE-2021-30513 CVE-2021-30514 CVE-2021-30515 CVE-2021-30516 CVE-2021-30517 CVE-2021-30518 CVE-2021-30519 CVE-2021-30520 CVE-2021-30521 CVE-2021-30522 CVE-2021-30523 CVE-2021-30524 CVE-2021-30525
July 17, 2021
An update that contains security fixes can now be installed.
July 17, 2021
An update that contains security fixes can now be installed.
July 17, 2021
Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in a Denial of Service condition.
July 17, 2021
Multiple vulnerabilities have been found in Apache Commons FileUpload, the worst of which could result in a Denial of Service condition.
July 17, 2021
Multiple vulnerabilities have been found in Apache, the worst of which could result in a Denial of Service condition.
July 17, 2021
Top CVEs Trending with Cybercriminals
July 16, 2021
The Evolving Role of the CISO
July 16, 2021
Sports events and online streaming: prepare your cybersecurity
If you’ll be watching Sports Streaming events on your SmartTV, laptop, tablet or cell phone, learn the tips to keep you and your personal data safe. The post Sports events and online streaming: prepare your cybersecurity appeared first on WeLiveSecurity
July 16, 2021
Want to earn $10 million? Snitch on a cybercrook!
July 16, 2021
The package vivaldi before version 4.0.2312.41-1 is vulnerable to arbitrary code execution.
July 16, 2021
The package chromium before version 91.0.4472.164-1 is vulnerable to arbitrary code execution.
July 16, 2021
The package systemd before version 249-2 is vulnerable to denial of service.
July 16, 2021
The package varnish before version 6.6.1-1 is vulnerable to url request injection.
July 16, 2021
The package mbedtls before version 2.26.0-1 is vulnerable to information disclosure.
July 16, 2021
The package python-pillow before version 8.3.0-1 is vulnerable to arbitrary code execution.
July 16, 2021
Microsoft: New Unpatched Bug in Windows Print Spooler
July 16, 2021
It’s not just that they’re making headlines more often. Ransomware rates really are rising. Given the recent spate of high-profile attacks, it’s worth remembering the difference between standard backup and high-availability replication. Our research suggests that the costs of ransomware for businesses can amount to much more than an extortion payment. They include lost hours […]
July 15, 2021
security update
July 15, 2021
The Code Red worm 20 years on – what have we learned?
July 15, 2021
Microsoft Patch Tuesday fixes 13 critical flaws, including 4 under active attack
The latest Patch Tuesday brings a new batch of security updates addressing a total of 117 vulnerabilities The post Microsoft Patch Tuesday fixes 13 critical flaws, including 4 under active attack appeared first on WeLiveSecurity
July 15, 2021
Fake Zoom App Dropped by New APT ‘LuminousMoth’
July 15, 2021
SonicWall Warns Secure VPN Hardware Bugs Under Attack
July 15, 2021
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
July 15, 2021
This advisory resolves CVE issues filed against XP2 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP2 code base. NOTE: This advisory is informational only. There are no code changes
July 15, 2021
Safari Zero-Day Used in Malicious LinkedIn Campaign
July 15, 2021
Several vulnerabilities were discovered in php5, a server-side, HTML-embedded scripting language. An attacker could cause denial of service (DoS), memory corruption and potentially execution of arbitrary code, and server-side request forgery (SSRF) bypass.
July 15, 2021
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 15, 2021
An update for firefox is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 15, 2021
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 15, 2021
security update
July 14, 2021
Choosing your MSP: What the Kaseya incident tells us about third‑party cyber risk
Lessons to learn from the Kaseya cyberincident to protect your business’ data when doing business with a MSP. The post Choosing your MSP: What the Kaseya incident tells us about third‑party cyber risk appeared first on WeLiveSecurity
July 14, 2021
The hybrid workplace: What does it mean for cybersecurity?
How can organizations mitigate the risk of damaging cyberattacks while juggling the constantly changing mix of office and off-site workers? The post The hybrid workplace: What does it mean for cybersecurity? appeared first on WeLiveSecurity
July 14, 2021
Linux-Focused Cryptojacking Gang Tracked to Romania
July 14, 2021
Home delivery scams get smarter – don’t get caught out
July 14, 2021
Updated Joker Malware Floods into Android Apps
July 14, 2021
Windows Hello Bypass Fools Biometrics Safeguards in PCs
July 14, 2021
Red Hat OpenShift Container Platform release 4.6.38 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.6.
July 14, 2021
Multiple vulnerabilities have been found in Pillow, the worst of which could result in a Denial of Service condition.
July 13, 2021
An update that solves 14 vulnerabilities, contains one feature and has 5 fixes is now available.
July 13, 2021
Multiple vulnerabilities have been found in Apache Thrift, the worst of which could result in a Denial of Service condition.
July 13, 2021
Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service (CVE-2021-3200).
July 13, 2021
This update provides ffmpeg version 4.3.2, which fixes several security vulnerabilities and other bugs which were corrected upstream. References: – https://bugs.mageia.org/show_bug.cgi?id=28433
July 13, 2021
Microsoft Crushes 116 Bugs, Three Actively Exploited
July 13, 2021