An update that solves one vulnerability and has one errata is now available.
September 19, 2021
Two vulnerabilities were discovered in the Nextcloud desktop client, which could result in information disclosure. For the oldstable distribution (buster), these problems have been fixed
September 19, 2021
The legacy 1.0 version of OpenSSL, a cryptography library for secure communication, fails to validate alternate trust chains in some conditions. In particular this breaks connecting to servers that use Let’s Encrypt certificates, starting 2021-10-01.
September 18, 2021
Multiple vulnerabilities were discovered in nettle, a low level cryptographic library, which could result in denial of service (remote crash in RSA decryption via specially crafted ciphertext, crash on ECDSA signature verification) or incorrect verification of ECDSA signatures.
September 18, 2021
Yes, of course there’s now malware for Windows Subsystem for Linux
September 17, 2021
GnuTLS, a portable cryptography library, fails to validate alternate trust chains in some conditions. In particular this breaks connecting to servers that use Let’s Encrypt certificates, starting 2021-10-01.
September 17, 2021
Porn Problem: Adult Ads Persist on US Gov’t, Military Sites
September 17, 2021
Something phishy: Tech recruiters jabbed by fake COVID-19 Passport scam
September 17, 2021
Ditch the Alert Cannon: Modernizing IDS is a Security Must-Do
September 17, 2021
AT&T Phone-Unlocking Malware Ring Costs Carrier $200M
September 17, 2021
Free decryptor for past REvil ransomware victims released
September 17, 2021
Microsoft MSHTML Flaw Exploited by Ryuk Ransomware Gang
September 17, 2021
Update to 2.2.17
September 17, 2021
Upstream annoucement: [WordPress 5.8.1 Security and Maintenance Release](https://wordpress.org/news/2021/09/wordpress-5-8-1-security-and- maintenance-release/)
September 17, 2021
Another race in XENMAPSPACE_grant_table handling [XSA-384, CVE-2021-28701] bugfix for XSA-380
September 17, 2021
Fake Walmart press release causes cryptocurrency price surge
September 17, 2021
WTF? Microsoft makes fixing deadly OMIGOD flaws on Azure your job
September 17, 2021
The container caasp/v4.5/kube-scheduler was updated. The following patches have been included in this update:
September 17, 2021
The container caasp/v4.5/kube-proxy was updated. The following patches have been included in this update:
September 17, 2021
The container caasp/v4.5/kube-controller-manager was updated. The following patches have been included in this update:
September 17, 2021
CISA, FBI: State-Backed APTs May Be Exploiting Critical Zoho Bug
September 16, 2021
Airline Credential-Theft Takes Off in Widening Campaign
September 16, 2021
Hack yourself before someone else does it for you
September 16, 2021
Microsoft Patch Tuesday fixes actively exploited zero‑day and 85 other flaws
The most recent Patch Tuesday includes a fix for the previously disclosed and actively exploited remote code execution flaw in MSHTML. The post Microsoft Patch Tuesday fixes actively exploited zero‑day and 85 other flaws appeared first on WeLiveSecurity
September 16, 2021
OMIGOD, an exploitable hole in Microsoft open source code!
September 16, 2021
Several security issues were fixed in Python.
September 16, 2021
Several security issues were fixed in Qt.
September 16, 2021
Several security issues were fixed in the Linux kernel.
September 16, 2021
Several security issues were fixed in the Linux kernel.
September 16, 2021
Libgcrypt could be made to expose sensitive information.
September 16, 2021
Financial Cybercrime: Following Cryptocurrency via Public Ledgers
September 16, 2021
REvil/Sodinokibi Ransomware Universal Decryptor Key Is Out
September 16, 2021
DDoS Attacks: A Flourishing Business for Cybercrooks – Podcast
September 16, 2021
HP Omen Hub Exposes Millions of Gamers to Cyberattack
September 16, 2021
Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk
September 16, 2021
An update that solves one vulnerability and has three fixes is now available.
September 16, 2021
De-identify, re-identify: Anonymised data’s dirty little secret
September 16, 2021
This is AUKUS for China – US, UK, Australia reveal defence tech-sharing pact
September 16, 2021
No Patch for High-Severity Bug in Legacy IBM System X Servers
September 15, 2021
WhatsApp announces end‑to‑end encrypted backups
The Facebook-owned messaging service plans to roll out the feature to both iOS and Android users in the coming weeks. The post WhatsApp announces end‑to‑end encrypted backups appeared first on WeLiveSecurity
September 15, 2021
What is a cyberattack surface and how can you reduce it?
Discover the best ways to mitigate your organization’s attack surface, in order to maximize cybersecurity. The post What is a cyberattack surface and how can you reduce it? appeared first on WeLiveSecurity
September 15, 2021
S3 Ep50: Two 0-days plus another 0-day plus a fast food bug [Podcast]
September 15, 2021
Squashfs-Tools could be made to overwrite files.
September 15, 2021
Attackers Impersonate DoT in Two-Day Phishing Scam
September 15, 2021
An update that fixes one vulnerability is now available.
September 15, 2021
An update that solves one vulnerability and has one errata is now available.
September 15, 2021
Several security issues were fixed in curl.
September 15, 2021
Squashfs-Tools could be made to overwrite files.
September 15, 2021
The container ses/7/rook/ceph was updated. The following patches have been included in this update:
September 15, 2021
Ex-US intel, military trio were cyber-mercenaries for UAE, say prosecutors
September 15, 2021
Adobe Snuffs Critical Bugs in Acrobat, Experience Manager
September 14, 2021
Microsoft Patches Actively Exploited Windows Zero-Day Bug
September 14, 2021
2021’s Most Dangerous Software Weaknesses
September 14, 2021
ZLoader’s Back, Abusing Google AdWords, Disabling Windows Defender
September 14, 2021
Beware of these 5 common scams you can encounter on Instagram
From cybercriminal evergreens like phishing to the verification badge scam we look at the most common tactics fraudsters use to trick their victims The post Beware of these 5 common scams you can encounter on Instagram appeared first on WeLiveSecurity
September 14, 2021
Pair of Google Chrome Zero-Day Bugs Actively Exploited
September 14, 2021
Unpatched Bugs Plague Databases; Your Data Is Probably Not Secure – Podcast
September 14, 2021
Romance, BEC Scams Lands Soldier in Jail for 46 Months
September 14, 2021
An update that fixes four vulnerabilities is now available.
September 14, 2021
BlackMatter Ransomware Hits Japanese Tech Giant Olympus
September 14, 2021
An update that fixes one vulnerability is now available.
September 14, 2021
An update that fixes four vulnerabilities is now available.
September 14, 2021
An update that fixes four vulnerabilities is now available.
September 14, 2021
SPDX becomes internationally recognized standard>
September 14, 2021
The 5.13.15 stable kernel update contains a number of important fixes across the tree.
September 14, 2021
update to 1.1.1l
September 14, 2021
ExpressVPN bought for $1bn by Brit biz with an intriguing history in adware
September 14, 2021
Apple products vulnerable to FORCEDENTRY zero-day attack – patch now!
September 14, 2021
Apple Issues Emergency Fix for NSO Zero-Click Zero Day
September 13, 2021
How a glitch in the Matrix led to apps potentially exposing encrypted chats
September 13, 2021
REvil’s Back; Coder Fat-Fingered Away Its Decryptor Key?
September 13, 2021
WhatsApp’s End-to-End Encryption Isn’t Actually Broken
September 13, 2021
Honing Cybersecurity Strategy When Everyone’s a Target for Ransomware
September 13, 2021
WooCommerce Multi Currency Bug Allows Shoppers to Change eCommerce Pricing
September 13, 2021
Serious Security: How to make sure you don’t miss bug reports!
September 13, 2021
This advisory resolves CVE issues filed against XP2 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP2 code base. NOTE: This advisory is informational only. There are no code changes
September 13, 2021
Time is running out for CentOS 8>
September 13, 2021
CloudLinux Adds TuxCare Support for CentOS 8 Through 2025>
September 13, 2021
This update upgrades Thunderbird to version 78.14.0. * Mozilla: Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and Firefox ESR 91.1 (CVE-2021-38493) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE — SL7 x86_64 – thunderbird-78.14.0-1.el7_9.x86_64.rpm – thunderbird-debuginfo-78.1 [More…]
September 13, 2021
This update upgrades Firefox to version 78.14.0 ESR. * Mozilla: Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and Firefox ESR 91.1 (CVE-2021-38493) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE — SL7 x86_64 – firefox-78.14.0-1.el7_9.i686.rpm – firefox-78.14.0-1.el7_9.x86_64.r [More…]
September 13, 2021
An update that contains security fixes can now be installed.
September 13, 2021