January 13, 2022
New GootLoader Campaign Targets Accounting, Law Firms
January 13, 2022
Hackers are posting out malicious USB drives to businesses
January 13, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
January 13, 2022
This update upgrades Thunderbird to version 91.5.0. * Mozilla: Iframe sandbox bypass with XSLT (CVE-2021-4140) * Mozilla: Race condition when playing audio files (CVE-2022-22737) * Mozilla: Heap-buffer-overflow in blendGaussianBlur (CVE-2022-22738) * Mozilla: Use-after-free of ChannelEventQueue::mOwner (CVE-2022-22740) * Mozilla: Browser window spoof using fullscreen mode (CVE-2022-22741) [More…]
January 13, 2022
This update upgrades Firefox to version 91.5.0 ESR. * Mozilla: Iframe sandbox bypass with XSLT (CVE-2021-4140) * Mozilla: Race condition when playing audio files (CVE-2022-22737) * Mozilla: Heap-buffer-overflow in blendGaussianBlur (CVE-2022-22738) * Mozilla: Use-after-free of ChannelEventQueue::mOwner (CVE-2022-22740) * Mozilla: Browser window spoof using fullscreen mode (CVE-2022-22741) [More…]
January 13, 2022
Several security issues were fixed in Pillow.
January 13, 2022
Several security issues were fixed in Ghostscript.
January 13, 2022
Apache Log4j 1.2 could be made to crash or run programs if it received specially crafted input.
January 13, 2022
Amazon, Azure Clouds Host RAT-ty Trio in Infostealing Campaign
January 12, 2022
security update
January 12, 2022
security update
January 12, 2022
Stolen TikTok Videos, Bent on Fraud, Invade YouTube Shorts
January 12, 2022
New York AG Warns 17 Firms of Credential Attacks
January 12, 2022
Ransomware demands… a new approach to security
January 12, 2022
CES 2022: Wireless power for all
We don’t need no stinkin’ wall power as CES shows off the power and promise of usable long-range wireless charging The post CES 2022: Wireless power for all appeared first on WeLiveSecurity
January 12, 2022
Signed kernel drivers – Unguarded gateway to Windows’ core
ESET researchers look at malware that abuses vulnerabilities in kernel drivers and outline mitigation techniques against this type of exploitation The post Signed kernel drivers – Unguarded gateway to Windows’ core appeared first on WeLiveSecurity
January 12, 2022
Wormable Windows HTTP hole – what you need to know
January 12, 2022
Phishers Rip Off High-Profile EA Gamers
January 12, 2022
It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly sanitize HTML messages. This would allow an attacker to perform Cross-Site Scripting (XSS) attacks.
January 12, 2022
An update that fixes two vulnerabilities is now available.
January 12, 2022
lxml could be made to execute arbitrary code if it received a specially crafted XML or HTML file.
January 12, 2022
Several security issues were fixed in Ghostscript.
January 12, 2022
Two issues were found in GDAL, a geospatial library, that could lead to denial of service via application crash or possibly the execution of arbitrary code if maliciously crafted data was parsed.
January 12, 2022
openssl: Read buffer overruns processing ASN.1 strings (CVE-2021-3712) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 openssl-1.0.2k-23.el7_9.x86_64.rpm openssl-debuginfo-1.0.2k-23.el7_9.i686.rpm openssl-debuginfo-1.0.2k-23.el7_9.x86_64.rpm openssl-libs-1.0.2k-23.e [More…]
January 12, 2022
Here’s REALLY How to Do Zero-Trust Security
January 11, 2022
Microsoft Faces Wormable, Critical RCE Bug & 6 Zero-Days
January 11, 2022
MacOS Bug Could Let Creeps Snoop On You
January 11, 2022
WordPress Bugs Exploded in 2021, Most Exploitable
January 11, 2022
Home routers with NetUSB support could have critical kernel hole
January 11, 2022
FIN7 Mails Malicious USB Sticks to Drop Ransomware
January 11, 2022
CES 2022 – the “anyone can make an electric car” edition
But as we learned in mashing up other technologies, the security devil is in the details The post CES 2022 – the “anyone can make an electric car” edition appeared first on WeLiveSecurity
January 11, 2022
Critical SonicWall NAC Vulnerability Stems from Apache Mods
January 11, 2022
Millions of Routers Exposed to RCE by USB Kernel Bug
January 11, 2022
EU data watchdog to Europol: You’ve helped yourself to too much data
January 11, 2022
An update that solves two vulnerabilities, contains one feature and has 13 fixes is now available.
January 11, 2022
An update that fixes one vulnerability is now available.
January 11, 2022
Introduced regression Exiv2.
January 11, 2022
An update that solves one vulnerability and has two fixes is now available.
January 11, 2022
Several vulnerabilities were discovered in WordPress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, bypass hardening, or perform Cross-Site Scripting (XSS) attacks.
January 11, 2022
Use-after-free in sampled_data_sample (called from sampled_data_continue and interp). (CVE-2021-45944) Heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp). (CVE-2021-45949)
January 11, 2022
JavaScript developer destroys own projects in supply chain “lesson”
January 11, 2022
security update
January 11, 2022
Avira also mines imaginary internet money on customers’ PCs
January 10, 2022
URL Parsing Bugs Allow DoS, RCE, Spoofing & More
January 10, 2022
Cyber-Spike: Orgs Suffer 925 Attacks per Week, an All-Time High
January 10, 2022
Version 0.102 of ClamAV, an anti-virus toolkit, is end-of-life. ClamAV has been updated to version 0.103 to be able to receive virus signature updates.
January 10, 2022
Free guide: “A Journey to Zero Trust With Zero Passwords”
January 10, 2022
The container suse/sles/15.3/virt-operator was updated. The following patches have been included in this update:
January 10, 2022
The container suse/sles/15.3/libguestfs-tools was updated. The following patches have been included in this update:
January 10, 2022
The container suse/sles/15.3/virt-handler was updated. The following patches have been included in this update:
January 10, 2022
The container suse/sles/15.3/virt-controller was updated. The following patches have been included in this update:
January 10, 2022
The container suse/sles/15.3/virt-api was updated. The following patches have been included in this update:
January 10, 2022
No defence for outdated defenders as consumer AV nears RIP
January 10, 2022
Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the execution of arbitrary code if malformed document files are processed.
January 8, 2022
It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly sanitize HTML messages. This would allow an attacker to perform Cross-Side Scripting (XSS) attacks.
January 8, 2022
Honda cars in flashback to 2002 – “Can’t Get You Out Of My Head”
January 8, 2022
security update
January 8, 2022
EoL Systems Stonewalling Log4j Fixes for Fed Agencies
January 7, 2022
Cyberattackers Hit Data of 80K Fertility Patients
January 7, 2022
security update
January 7, 2022
Security fix for CVE-2021-45463
January 7, 2022
https://www.mediawiki.org/wiki/Release_notes/1.36#MediaWiki_1.36.3
January 7, 2022
3.7M FlexBooker Records Dumped on Hacker Forum
January 7, 2022
These updated packages fix a buffer overflow in the faces reader.
January 7, 2022
An update for rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
January 7, 2022
It was discovered that sphinxsearch, a fast standalone full-text SQL search engine, could allow arbitrary files to be read by abusing a configuration option.
January 7, 2022
2020 may have been the year of establishing remote connectivity and addressing the cybersecurity skills gap, but 2021 presented security experts, government officials and businesses with a series of unpresented challenges. The increased reliance on decentralized connection and the continued rapid expansion of digital transformation by enterprises, small to medium-sized businesses (SMBs) and individuals, provided […]
January 7, 2022
QNAP: Get NAS Devices Off the Internet Now
January 7, 2022
Log4J-Related RCE Flaw in H2 Database Earns Critical Rating
January 7, 2022
Salesforce mandates MFA by default
January 7, 2022
Security fix for CVE-2021-4136, CVE-2021-4166, CVE-2021-4173, CVE-2021-4186
January 6, 2022
Add wayland detection and pass flags to improve experience when wayland is used. —- Update to 96.0.4664.110. You know the drill, lots of security bugs fixed, update if you like security, hit that like and subscribe button. CVE-2021-4052 CVE-2021-4053 CVE-2021-4054 CVE-2021-4055 CVE-2021-4056 CVE-2021-4057 CVE-2021-4058 CVE-2021-4059 CVE-2021-4061 CVE-2021-4062 CVE-2021-4063
January 6, 2022
Activision Files Unusual Lawsuit over Call of Duty Cheat Codes
January 6, 2022
Google Voice Authentication Scam Leaves Victims on the Hook
January 6, 2022
CES 2022: More sensors than people
A sea of sensors will soon influence almost everything in your world The post CES 2022: More sensors than people appeared first on WeLiveSecurity
January 6, 2022
5 ways hackers steal passwords (and how to stop them)
From social engineering to looking over your shoulder, here are some of the most common tricks that bad guys use to steal passwords The post 5 ways hackers steal passwords (and how to stop them) appeared first on WeLiveSecurity
January 6, 2022