January 19, 2022
Faker NPM package back on track after malicious coding incident
January 19, 2022
Box 2FA Bypass Opens User Accounts to Attack
January 19, 2022
DoNot Go! Do not respawn!
ESET researchers take a deep look into recent attacks carried out by Donot Team throughout 2020 and 2021, targeting government and military entities in several South Asian countries The post DoNot Go! Do not respawn! appeared first on WeLiveSecurity
January 19, 2022
Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks
January 19, 2022
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 19, 2022
Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite. 2. Relevant releases/architectures: Red Hat Satellite 6.10 – noarch, x86_64
January 19, 2022
Red Hat OpenShift Container Platform release 4.7.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7.
January 19, 2022
An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 19, 2022
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 19, 2022
Cloned Dept. of Labor Site Hawks Fake Government Contracts
January 19, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
January 19, 2022
Nine-year-old kids are launching DDoS attacks against schools
January 19, 2022
Will 2022 Be the Year of the Software Bill of Materials?
January 18, 2022
The Log4j Vulnerability Puts Pressure on the Security World
January 18, 2022
Cybercriminals Actively Target VMware vSphere with Cryptominers
January 18, 2022
Suse open sources NeuVector container security platform
January 18, 2022
‘White Rabbit’ Ransomware May Be FIN8’s Latest Tool
January 18, 2022
Social media in the workplace: Cybersecurity dos and don’ts for employees
Do you often take to social media to broadcast details about your job, employer or coworkers? Think before you share – less may be more. The post Social media in the workplace: Cybersecurity dos and don’ts for employees appeared first on WeLiveSecurity
January 18, 2022
Critical ManageEngine Desktop Server Bug Opens Orgs to Malware
January 18, 2022
Organizations Face a ‘Losing Battle’ Against Vulnerabilities
January 18, 2022
httpd: mod_lua: Possible buffer overflow when parsing multipart content (CVE-2021-44790) * httpd: mod_session: Heap overflow via a crafted SessionHeader value (CVE-2021-26691) * httpd: NULL pointer dereference via malformed requests (CVE-2021-34798) * httpd: Out-of-bounds write in ap_escape_quotes() via malicious input (CVE-2021-39275) For more details about the security issue(s), includin [More…]
January 18, 2022
Why global DDoS protection is essential for Anycast networks
January 18, 2022
This kernel-linus update is based on upstream 5.15.15 and fixes atleast the following security issues: A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A
January 18, 2022
This kernel update is based on upstream 5.15.15 and fixes atleast the following security issues: A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A
January 18, 2022
Upstream details at : https://access.redhat.com/errata/RHSA-2022:0162
January 18, 2022
An update that fixes two vulnerabilities is now available.
January 18, 2022
An update that fixes one vulnerability is now available.
January 18, 2022
security update
January 17, 2022
security update
January 17, 2022
Successfully recovering from disruption or disaster is one of an IT administrator’s most critical duties. Whether it’s restoring servers or rescuing lost data, failure to complete a successful recovery can spell doom for a company. But mastering the recovery process happens before disaster strikes. This is especially true for large datasets. Our breakdown is here […]
January 17, 2022
New expat packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
January 17, 2022
Romance scammer who targeted 670 women gets 28 months in jail
January 17, 2022
Pulling Back the Curtain: About LinuxSecurity.com>
January 17, 2022
An update that fixes 24 vulnerabilities is now available.
January 17, 2022
Several security issues were fixed in Pillow.
January 17, 2022
An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 17, 2022
Update to 1.12.3 Fixes these two security issues: * CVE-2021-43860 or https://github.com/flatpak/flatpak/security/advisories/GHSA-qpjc-vq3c-572j * CVE-2022-21682 or https://github.com/flatpak/flatpak/security/advisories/GHSA-8ch7-5j3h-g4fx Full release notes: https://github.com/flatpak/flatpak/releases/tag/1.12.3
January 16, 2022
It was discovered that sphinxsearch, a fast standalone full-text SQL search engine, could allow arbitrary files to be read by abusing a configuration option.
January 16, 2022
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For Debian 9 stretch, these problems have been fixed in version
January 16, 2022
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure, denial of service or spoofing.
January 16, 2022
security update
January 15, 2022
security update
January 15, 2022
Security fix for CVE-2021-4122
January 15, 2022
– kombu 5.2.3: https://github.com/celery/kombu/blob/master/Changelog.rst#523 – celery 5.2.3: https://github.com/celery/celery/blob/master/Changelog.rst#523
January 15, 2022
– kombu 5.2.3: https://github.com/celery/kombu/blob/master/Changelog.rst#523 – celery 5.2.3: https://github.com/celery/celery/blob/master/Changelog.rst#523
January 15, 2022
Update to 0.9.6, see https://github.com/uriparser/uriparser/blob/uriparser-0.9.6/ChangeLog for details.
January 15, 2022
Network Intrusion Detection Using Snort>
January 15, 2022
CPAN 2.28 allows Signature Verification Bypass. (CVE-2020-16156) References: – https://bugs.mageia.org/show_bug.cgi?id=29878 – https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/
January 15, 2022
This update provides Mbed TLS 2.16.12, with a number of bug fixes and a security fix. Mbed TLS has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure. (CVE-2021-44732)
January 15, 2022
A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp. (CVE-2021-3997) References:
January 15, 2022
CWE-122 Heap-based Buffer Overflow (CVE-2021-4136) CWE-125 Out-of-bounds Read (CVE-2021-4166) CWE-416 Use After Free (CVE-2021-4173) CWE-416 Use After Free (CVE-2021-4187)
January 15, 2022
Buffer overflow vulnerability in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp. (CVE-2021-40985) References:
January 15, 2022
security update
January 14, 2022
The 5.15.14 stable kernel update contains a number of important fixes across the tree.
January 14, 2022
Serious Security: Linux full-disk encryption bug fixed – patch now!
January 14, 2022
Top Illicit Carding Marketplace UniCC Abruptly Shuts Down
January 14, 2022
Making loyalty pay: How to keep your loyalty rewards safe from scammers
Is loyalty fraud on your radar? Here’s why your hard-earned reward points and air miles may be easy pickings for cybercriminals. The post Making loyalty pay: How to keep your loyalty rewards safe from scammers appeared first on WeLiveSecurity
January 14, 2022
Real Big Phish: Mobile Phishing & Managing User Fallibility
January 14, 2022
Critical Cisco Contact Center Bug Threatens Customer-Service Havoc
January 14, 2022
‘Be Afraid:’ Massive Cyberattack Downs Ukrainian Gov’t Sites
January 14, 2022
Talking cyber on the ManageEngine Insights podcast
January 14, 2022
REvil ransomware crew allegedly busted in Russia, says FSB
January 14, 2022
Russian Security Takes Down REvil Ransomware Gang
January 14, 2022
Three Plugins with Same Bug Put 84K WordPress Sites at Risk
January 14, 2022
Adobe Cloud Abused to Steal Office 365, Gmail Credentials
January 14, 2022
kernel: perf_event_parse_addr_filter memory (CVE-2020-25704) * kernel: fuse: fuse_do_getattr() calls make_bad_inode() in inappropriate situations (CVE-2020-36322) * kernel: Heap buffer overflow in firedtv driver (CVE-2021-42739) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE Bug Fix(es): * [More…]
January 14, 2022
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
January 14, 2022
An update for samba is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 14, 2022
An update is now available for ansible-runner for Red Hat Ansible Automation Platform 2.0 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
January 14, 2022
Microsoft Yanks Buggy Windows Server Updates
January 13, 2022
North Korean APTs Stole ~$400M in Crypto in 2021
January 13, 2022
Orca Security tells AWS fail tale with a happy ending
January 13, 2022
Security fix for CVE-2021-46059, CVE-2022-0158, CVE-2022-0156
January 13, 2022
security update
January 13, 2022
security update
January 13, 2022
Security fix for CVE-2021-41500. Upstream notes for version 1.2.7 read: “Bug fixes, Python 3.10 compatibility”.
January 13, 2022
Continuous security and compliance for hybrid cloud, the Red Hat way
January 13, 2022
US Military Ties Prolific MuddyWater Cyberespionage APT to Iran
January 13, 2022
Cryptocurrency scams: What to know and how to protect yourself
As you attempt to strike it rich in the digital gold rush, make sure you know how to recognize various schemes that want to part you from your digital coins The post Cryptocurrency scams: What to know and how to protect yourself appeared first on WeLiveSecurity
January 13, 2022