October 12, 2021
Microsoft Oct. Patch Tuesday Squashes 4 Zero-Day Bugs
security update
October 12, 2021
Microsoft Patch Tuesday bug harvest festival comes to town
October 12, 2021
Windows Zero-Day Actively Exploited in Widespread Espionage Campaign
October 12, 2021
Office 365 Spy Campaign Targets US Military Defense
October 12, 2021
Apple Releases Urgent iOS Updates to Patch New Zero-Day Bug
October 12, 2021
An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 12, 2021
An update that fixes 25 vulnerabilities is now available.
October 12, 2021
An update for libxml2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 12, 2021
An update for openssl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 12, 2021
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 12, 2021
An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 12, 2021
Google gives away 10,000 free security keys to high-risk users
October 12, 2021
What’s missing from most ICS cybersecurity training? The ICS itself…
October 12, 2021
Ransomware cost US companies almost $21 billion in downtime in 2020
The victims lost an average of nine days to downtime and two-and-a-half months to investigations, an analysis of disclosed attacks shows The post Ransomware cost US companies almost $21 billion in downtime in 2020 appeared first on WeLiveSecurity
October 11, 2021
Cybersecurity awareness month: Fight the phish!
October 11, 2021
An appearance on the IntoSecurity Chats podcast
October 11, 2021
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
October 11, 2021
An update that fixes 21 vulnerabilities is now available.
October 11, 2021
Gripped by cybersec career indecision? Don’t give up. Level up
October 11, 2021
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 11, 2021
An update for firefox is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 11, 2021
An update for firefox is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 11, 2021
An update for httpd24-httpd is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 11, 2021
security update
October 10, 2021
– New upstream update (93.0) – Fixed NSS package dependency (NSS 3.70) —- – New upstream release (93.0)
October 10, 2021
Two security issues were found in TIFF, a widely used format for storing image data, as follows: CVE-2020-19131
October 10, 2021
Update to f13cbcf (dr_wav 0.13.2) Fix a possible buffer overflow. —- Update to 8900af1 with dr_mp3 0.6.31 Fix a bug in dr_mp3 when loading from memory.
October 9, 2021
Upgrade Grafana to upstream version 7.5.10 —- rebuild to resolve CVE-2021-34558
October 9, 2021
Update to f13cbcf (dr_wav 0.13.2) Fixes a possible buffer overflow. —- Update to 8900af1 with dr_mp3 0.6.31 Fix a bug in dr_mp3 when loading from memory.
October 9, 2021
An update that solves three vulnerabilities and has one errata is now available.
October 9, 2021
The container caasp/v4/kured was updated. The following patches have been included in this update:
October 9, 2021
The container caasp/v4/kucero was updated. The following patches have been included in this update:
October 9, 2021
The container caasp/v4/kubernetes-client was updated. The following patches have been included in this update:
October 9, 2021
The container caasp/v4/hyperkube was updated. The following patches have been included in this update:
October 9, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
October 9, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
October 9, 2021
security update
October 8, 2021
FontOnLake: Previously unknown malware family targeting Linux
ESET researchers discover a malware family with tools that show signs they’re used in targeted attacks The post FontOnLake: Previously unknown malware family targeting Linux appeared first on WeLiveSecurity
October 8, 2021
Apache patch proves patchy – now you need to patch the patch
October 8, 2021
Due to a data race in the crossbeam-deque in the crossbeam crate, one or more tasks in the worker queue could have been be popped twice instead of other tasks that are forgotten and never popped. If tasks are allocated on the heap, this could have caused a double free and a memory leak (CVE-2021-32810).
October 8, 2021
New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
October 7, 2021
Twitch Leak Included Emails, Passwords in Clear Text: Researcher
October 7, 2021
Firefox could be made to crash or run programs as your login if it opened a malicious website.
October 7, 2021
4 Key Questions for Zero-Trust Success
October 7, 2021
Google to turn on 2FA by default for 150 million users, 2 million YouTubers
Two-factor authentication is a simple way to greatly enhance the security of your account The post Google to turn on 2FA by default for 150 million users, 2 million YouTubers appeared first on WeLiveSecurity
October 7, 2021
To the moon and hack: Fake SafeMoon app drops malware to spy on you
Cryptocurrencies rise and fall, but one thing stays the same – cybercriminals attempt to cash in on the craze The post To the moon and hack: Fake SafeMoon app drops malware to spy on you appeared first on WeLiveSecurity
October 7, 2021
Several security issues were fixed in MySQL.
October 7, 2021
Rebase to libssh-0.9.6 Fix CVE-2021-3634
October 7, 2021
3 focus areas for DevSecOps success
October 7, 2021
Updated container images that fix various bugs are now available for Red Hat OpenShift Container Storage 3.11 Update 8 in the Red Hat Container Registry. Red Hat Product Security has rated this update as having a security impact
October 7, 2021
Updated packages that provide Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Service Pack 9, and fix an important security issue, are now available for Red Hat Enterprise Linux 7 and Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact
October 7, 2021
Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Service Pack 9 zip release for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, and Microsoft Windows is available. Red Hat Product Security has rated this update as having a security impact
October 7, 2021
Bottle could be made to cache malicious requests if it received a specially crafted input.
October 7, 2021
Smashing Security podcast #246: Facebook has fallen
October 7, 2021
Canopy Parental Control App Wide Open to Unpatched XSS Bugs
October 6, 2021
VMware ESXi Servers Encrypted by Lightning-Fast Python Script
October 6, 2021
Apache web server zero-day bug is easy to exploit – patch now!
October 6, 2021
UEFI threats moving to the ESP: Introducing ESPecter bootkit
ESET research discovers a previously undocumented UEFI bootkit with roots going back all the way to at least 2012 The post UEFI threats moving to the ESP: Introducing ESPecter bootkit appeared first on WeLiveSecurity
October 6, 2021
Twitch Gets Gutted: All Source Code Leaked
October 6, 2021
The updated packages fix a security vulnerabilities: While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The
October 6, 2021
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
October 6, 2021
Red Hat JBoss Web Server 5.5.1 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, and Microsoft Windows. Red Hat Product Security has rated this release as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 6, 2021
Updated Red Hat JBoss Web Server 5.5.1 packages are now available for Red Hat Enterprise Linux 7 and Red Hat Enterprise Linux 8. Red Hat Product Security has rated this release as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 6, 2021
New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
October 5, 2021
IP Surveillance Bugs in Axis Gear Allow RCE, Data Theft
October 5, 2021
security update
October 5, 2021
security update
October 5, 2021
Apache Web Server Zero-Day Exposes Sensitive Data
October 5, 2021
Facebook Blames Outage on Faulty Router Configuration
October 5, 2021