October 25, 2021
Cybersecurity Awareness Month: Listen up – CYBERSECURITY FIRST!
October 25, 2021
Google Chromebook devices could rightly be called a game-changer for education. These low-cost laptops are within financial reach for far more families than their more expensive competitors, a fact that proved crucial with the outbreak of the COVID-19 pandemic at the beginning of last year. During that period, Google donated more than 4,000 Chromebook devices […]
October 25, 2021
CISA Urges Sites to Patch Critical RCE in Discourse
October 25, 2021
An update for redis is now available for Red Hat OpenStack Platform 13 (Queens). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 25, 2021
This kernel-linus update is based on upstream 5.10.75 and fixes atleast the following security issues: A memory leak in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ ccp/ccp-ops.c in the Linux kernel allows malicious users to cause a
October 25, 2021
This kernel update is based on upstream 5.10.75 and fixes atleast the following security issues: A memory leak in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ ccp/ccp-ops.c in the Linux kernel allows malicious users to cause a
October 25, 2021
Sharpen your security knowledge with 1Password University
October 25, 2021
Several security issues were fixed in GNU binutils.
October 25, 2021
Several security issues were fixed in MySQL.
October 25, 2021
An update that solves 6 vulnerabilities and has four fixes is now available.
October 25, 2021
This update provides the upstream 6.1.28 maintenance release that fixes atleast the following security vulnerabilities: Vulnerability in the Oracle VM VirtualBox prior to 6.1.28 contains an easily exploitable vulnerability that allows high privileged attacker with
October 24, 2021
Several issues have been found in faad2, a freeware Advanced Audio Decoder player. They are related to heap buffer overflows or null pointer dereferences, which both might allow an attacker to execute code by
October 24, 2021
security update
October 23, 2021
Do not include params in exception when a call to set_options fails. Additionally, block the exception that is returned from being displayed to stdout. (CVE-2021-3620) References:
October 23, 2021
Flatpak apps with direct access to AF_UNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services into treating the Flatpak app as though it was an ordinary, non-sandboxed host-OS process, by manipulating the VFS using recent mount-related syscalls that are not blocked by Flatpak’s denylist seccomp
October 23, 2021
A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. (CVE-2021-30640) Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66
October 23, 2021
A bug was found in containerd where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes to file permissions can deny access to the expected owner of the file, widen access to others, or set extended bits like setuid, setgid, and sticky.
October 23, 2021
Security fix for CVE-2021-39360
October 22, 2021
## 2021-10-12, Version 14.18.1 ‘Fermium’ (LTS), @danielleadams This is a security release. ### Notable changes * **CVE-2021-22959**: HTTP Request Smuggling due to spaced in headers (Medium) * The http parser accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS). More details will […]
October 22, 2021
Remote access has helped us become more interconnected than ever before. In the United States alone, two months into the pandemic, approximately 35% of the workforce was teleworking. The growth of remote access allowed individuals to work with organizations and teams they don’t physically see or meet. However, the demand for remote access has critical […]
October 22, 2021
FIN7 Lures Unwitting Security Pros to Carry Out Ransomware Attacks
October 22, 2021
The package nodejs-lts-erbium before version 12.22.7-1 is vulnerable to multiple issues including arbitrary code execution, url request injection and certificate verification bypass.
October 22, 2021
The package nodejs-lts-fermium before version 14.18.1-1 is vulnerable to multiple issues including arbitrary code execution, url request injection and certificate verification bypass.
October 22, 2021
The package nodejs before version 16.11.1-1 is vulnerable to url request injection.
October 22, 2021
Cybersecurity careers: What to know and how to get started
Want to help make technology safer for everyone? Love solving puzzles? Looking for a rewarding career? Break into cybersecurity! Insights from ESET researchers Aryeh Goretsky and Cameron Camp will put you on the right track. The post Cybersecurity careers: What to know and how to get started appeared first on WeLiveSecurity
October 22, 2021
Cisco SD-WAN Security Bug Allows Root Code Execution
October 22, 2021
Threat Actors Abuse Discord to Push Malware
October 22, 2021
YouTubers fell for shady ‘sponsors’ who seized, then sold, accounts
October 22, 2021
Several security issues were fixed in Mailman.
October 22, 2021
Several security issues were fixed in the Linux kernel.
October 21, 2021
Several security issues were fixed in the Linux kernel.
October 21, 2021
U.S. Ban on Sales of Cyberattack Tools Is Anemic, Experts Warn
October 21, 2021
TA551 Shifts Tactics to Install Sliver Red-Teaming Tool
October 21, 2021
Gigabyte Allegedly Hit by AvosLocker Ransomware
October 21, 2021
Why is Cybersecurity Failing Against Ransomware?
October 21, 2021
fix memory leak when verbose mode is on
October 21, 2021
Security fix for CVE-2021-3618
October 21, 2021
Ransomware Sinks Teeth into Candy-Corn Maker Ahead of Halloween
October 21, 2021
libcaca could be made to crash if it received a specially crafted image.
October 21, 2021
Tenable discovered that in Babel, a set of tools for internationalizing Python applications, Babel.Locale allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution. This
October 21, 2021
What is self-learning AI and how does it tackle ransomware?
October 21, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
October 21, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
October 21, 2021
Smashing Security podcast #248: Press F12 to hack
October 21, 2021
Brave browser replaces Google with its own search engine
Brave Search will become the default search option for new users in the US, UK, Canada, Germany and France, with more countries to follow soon The post Brave browser replaces Google with its own search engine appeared first on WeLiveSecurity
October 20, 2021
security update
October 20, 2021
Google Crushes YouTube Cookie-Stealing Channel Hijackers
October 20, 2021
VPN Exposes Data for 1M Users, Leading to Researcher Questioning
October 20, 2021
A recipe for failure: Predictably poor passwords
Security professionals advise to never use ‘beef stew’ as a password. It just isn’t stroganoff. The post A recipe for failure: Predictably poor passwords appeared first on WeLiveSecurity
October 20, 2021
“To the moon!” Cryptocurrency hamster Mr Goxx trades online 24/7
October 20, 2021
Geriatric Microsoft Bug Exploited by APT Using Commodity RATs
October 20, 2021
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 20, 2021
How security has changed in the era of cloud computing
October 20, 2021
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 20, 2021
An update for the redis:6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 20, 2021
The security update of smarty3, the compiling PHP template engine, issued as DLA 2618-1 introduced a regression in the smarty_security class when secure directories are evaluated. Updated smarty3 packages are now available to correct this issue.
October 20, 2021
An update for the redis:5 module is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 20, 2021
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 20, 2021
When it comes to ransomware, every second hurts
October 20, 2021
Squirrel Bug Lets Attackers Execute Code in Games, Cloud Services
October 19, 2021
security update
October 19, 2021
Fresh APT Harvester Reaps Telco, Government Data
October 19, 2021
$5.2 billion worth of Bitcoin transactions possibly tied to ransomware
Threat actors are increasingly using advanced tactics to obfuscate and launder their illicit gains, a report by the US Government finds The post $5.2 billion worth of Bitcoin transactions possibly tied to ransomware appeared first on WeLiveSecurity
October 19, 2021
Lyceum APT Returns, This Time Targeting Tunisian Firms
October 19, 2021
Earlier this year, the National Institute for Standards and Technology (NIST) published updated recommendations for phishing simulations in security awareness training programs. We discussed it on our Community page soon after the updated standards were released, but the substance of the change bears repeating. “Practical exercises include no-notice social engineering attempts to collect information, gain […]
October 19, 2021