January 31, 2022
Public Exploit Released for Windows 10 Bug
Apple Pays $100.5K Bug Bounty for Mac Webcam Hack
January 31, 2022
Website operator fined for using Google Fonts “the cloudy way”
January 31, 2022
NSO Group Pegasus Spyware Aims at Finnish Diplomats
January 31, 2022
Qubit pleads with hacker to return $80 million of stolen funds
January 31, 2022
Multiple security vulnerabilities have been discovered in Apache Log4j 1.2, a Java logging framework, when it is configured to use JMSSink, JDBCAppender, JMSAppender or Apache Chainsaw which could be exploited for remote code execution.
January 31, 2022
ldns could be made to expose sensitive information if it received a specially crafted input.
January 31, 2022
An update for the nginx:1.20 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 31, 2022
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.
January 31, 2022
– Update cargo-insta to version 1.11.0. – Update the insta crate to version 1.11.0. – Update the ron crate to version 0.7.0. – Introduce a compat package for ron versions 0.6.x. – Update the similar-asserts crate to version 1.2.0. – Update the similar crate to version 2.1.0.
January 30, 2022
– Update cargo-insta to version 1.11.0. – Update the insta crate to version 1.11.0. – Update the ron crate to version 0.7.0. – Introduce a compat package for ron versions 0.6.x. – Update the similar-asserts crate to version 1.2.0. – Update the similar crate to version 2.1.0.
January 30, 2022
A security bug has been discovered and fixed in the userhelper program.
January 30, 2022
It was discovered that missing input sanitising in python-nbxmpp, a Jabber/XMPP Python library, could result in denial of service in clients based on it (such as Gajim).
January 30, 2022
The update for prosody released as DSA 5047 introduced a memory leak. Updated prosody packages are now available to correct this issue. For the oldstable distribution (buster), this problem has been fixed
January 30, 2022
Several vulnerabilities have been discovered in libraw that may lead to the execution of arbitrary code, denial of service, or information leaks.
January 30, 2022
Security fixes for CVE-2022-0351, CVE-2022-0359 —- Security fixes for CVE-2022-0213, CVE-2022-0261
January 29, 2022
Fix for CVE-2021-32765
January 29, 2022
The container suse-sles-15-sp3-chost-byos-v20220126-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
January 29, 2022
The container sles-15-sp1-chost-byos-v20220127 was updated. The following patches have been included in this update:
January 29, 2022
The container suse-sles-15-sp1-chost-byos-v20220127-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
January 29, 2022
The container suse-sles-15-sp1-chost-byos-v20220127-gen2 was updated. The following patches have been included in this update:
January 29, 2022
update to version 2.10 and enable OCV CVE-2022-23303
January 29, 2022
# New in release OpenJDK 17.0.2 (2022-01-18): Live versions of these release notes can be found at: * https://bitly.com/openjdk1702 * https://builds.shipilev.net/backports-monitor/release-notes-17.0.2.txt ## Security fixes – JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if zip has dir named “.” inside – JDK-8264934, CVE-2022-21248: Enhance cross VM
January 29, 2022
Lazarus APT Uses Windows Update to Spew Malware
January 28, 2022
Zerodium Spikes Payout for Zero-Click Outlook Zero-Days
January 28, 2022
Beyond the tick box: What to consider before agreeing to a privacy policy
The trade-off between using a free service and giving up our personal data becomes much less palatable when we think about the wider ramifications of the collection and use of our personal data The post Beyond the tick box: What to consider before agreeing to a privacy policy appeared first on WeLiveSecurity
January 28, 2022
Happy Data Privacy Day – and we really do mean “happy” :-)
January 28, 2022
Conti, DeadBolt Ransomwares Target Delta, QNAP
January 28, 2022
Real-Time Alerting with Snort>
January 28, 2022
OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934) (CVE-2022-21248) * OpenJDK: Insufficient URI checks in the XSLT TransformerImpl (JAXP, 8270492) (CVE-2022-21282) * OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813) (CVE-2022-21283) * OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (L [More…]
January 28, 2022
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:
January 28, 2022
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:
January 28, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
January 28, 2022
The container sles-15-sp3-chost-byos-v20220126 was updated. The following patches have been included in this update:
January 28, 2022
The container suse-sles-15-sp3-chost-byos-v20220126-gen2 was updated. The following patches have been included in this update:
January 28, 2022
Apple fixes Safari data leak (and patches a zero-day!) – update now
January 27, 2022
security update
January 27, 2022
Dark Overlord collaborator imprisoned for trading stolen identities
January 27, 2022
BotenaGo Botnet Code Leaked to GitHub, Impacting Millions of Devices
January 27, 2022
Every breath you take, every move you make: Do fitness trackers pose privacy risks?
Should you beware of wearables? Here’s what you should know about the potential security and privacy risks of your smartwatch or fitness tracker. The post Every breath you take, every move you make: Do fitness trackers pose privacy risks? appeared first on WeLiveSecurity
January 27, 2022
Shipment-Delivery Scams Become the Favored Way to Spread Malware
January 27, 2022
Apple patches Safari data leak (oh, and a zero-day) – patch now!
January 27, 2022
Several security issues were fixed in shadow.
January 27, 2022
Mac webcam hijack flaw wins man $100,500 from Apple
January 27, 2022
Indonesia bars financial institutions from offering crypto services
January 27, 2022
Red Hat OpenShift Container Platform release 4.6.54 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.6.
January 27, 2022
An update for httpd24-httpd is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 27, 2022
The container caasp/v4/velero-plugin-for-microsoft-azure was updated. The following patches have been included in this update:
January 27, 2022
The container caasp/v4/velero-plugin-for-gcp was updated. The following patches have been included in this update:
January 27, 2022
The container caasp/v4/velero-plugin-for-aws was updated. The following patches have been included in this update:
January 27, 2022
China orders web operators to spring clean its entire internet
January 27, 2022
TrickBot Crashes Security Researchers’ Browsers in Latest Upgrade
January 26, 2022
Apple Fixes 2 Zero-Day Security Bugs, One Exploited in the Wild
January 26, 2022
‘Dark Herring’ Billing Malware Swims onto 105M Android Devices
January 26, 2022
security update
January 26, 2022
security update
January 26, 2022
security update
January 26, 2022
security update
January 26, 2022
security update
January 26, 2022
New Year, New Threats: 4 Tips to Activate Your Best Cyber-Defense
January 26, 2022
Linux Bug in All Major Distros: ‘An Attacker’s Dream Come True’
January 26, 2022
Phishing attacks sustain historic highs In their latest report, IDG and the pros behind Carbonite + Webroot spoke with 300 global IT professionals to learn the current state of phishing. We learned that 93% of IT executives are still concerned about phishing – and it’s no wonder, as companies averaged 28 attacks each over the […]
January 26, 2022
Watering hole deploys new macOS malware, DazzleSpy, in Asia
Hong Kong pro-democracy radio station website compromised to serve a Safari exploit that installed cyberespionage malware on site visitors’ Macs The post Watering hole deploys new macOS malware, DazzleSpy, in Asia appeared first on WeLiveSecurity
January 26, 2022
Threat Actors Blanket Androids with Flubot, Teabot Campaigns
January 26, 2022
An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 26, 2022
An update for the parfait:0.5 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 26, 2022
An update for the parfait:0.5 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 26, 2022
An update for the parfait:0.5 module is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 26, 2022
An update for the parfait:0.5 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 26, 2022
An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
January 26, 2022
If you’ve considered using a virtual private network (VPN) at all, it’s likely to establish a secure connection while working remotely or to connect to public networks. But privacy enthusiasts appreciate the benefits of a VPN even from the comfort of their own homes. Depending on your level of comfort with your internet service provider […]
January 25, 2022
Ozzy Osbourne NFTs Used to Bite Off Chunk of Crypto Coin
January 25, 2022
Segway Hit by Magecart Attack Hiding in a Favicon
January 25, 2022
security update
January 25, 2022