March 31, 2022
Apple pushes out two emergency 0-day updates – get ’em now!
Patch now: RCE Spring4shell hits Java Spring framework
March 31, 2022
Nvidia DGX systems prone to side channel, covert attacks
March 31, 2022
QNAP Customers Adrift, Waiting on Fix for OpenSSL Bug
March 31, 2022
A Blockchain Primer and a Bored Ape Headscratcher – Podcast
March 31, 2022
An update that fixes one vulnerability is now available.
March 31, 2022
An update that fixes three vulnerabilities is now available.
March 31, 2022
An update that fixes 18 vulnerabilities is now available.
March 31, 2022
An update that fixes two vulnerabilities is now available.
March 31, 2022
An update that fixes 18 vulnerabilities is now available.
March 31, 2022
An update that fixes three vulnerabilities is now available.
March 31, 2022
Cryptomining groups fight fiercely for cloud resources
March 31, 2022
Zlib crash-an-app bug finally squashed, 17 years later
March 30, 2022
Ubiquiti sues Krebs on Security for defamation
March 30, 2022
Forcepoint ONE helps firms simplify their security
March 30, 2022
Lapsus$ ‘Back from Vacation’
March 30, 2022
Google Chrome Bug Actively Exploited as Zero-Day
March 30, 2022
VMware Horizon platform pummeled by Log4j-fueled attacks
March 30, 2022
World Backup Day: 5 data recovery tips for everyone!
March 30, 2022
zlib could be made to crash or run programs if it received specially crafted input.
March 30, 2022
MSHTML Flaw Exploited to Attack Russian Dissidents
March 30, 2022
zlib could be made to crash or run programs if it received specially crafted input.
March 30, 2022
An update that solves 12 vulnerabilities and has 25 fixes is now available.
March 30, 2022
An update that fixes one vulnerability is now available.
March 30, 2022
An update that solves 12 vulnerabilities and has 25 fixes is now available.
March 30, 2022
Electric Vehicle DC charging tripped by a wireless hack
March 30, 2022
An update that solves 22 vulnerabilities and has 22 fixes is now available.
March 30, 2022
Women in tech: Unique insights from a lifelong pursuit of innovation
Leading Slovak computer scientist Mária Bieliková shares her experience working as a woman driving technological innovation and reflects on how to inspire the next generation of talent in tech The post Women in tech: Unique insights from a lifelong pursuit of innovation appeared first on WeLiveSecurity
March 30, 2022
Mutating Verblecon malware in illicit cryptomining … so far
March 29, 2022
Ransomware driving you to distraction? Here’s how to recover
March 29, 2022
Exchange Servers Speared in IcedID Phishing Campaign
March 29, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 29, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
March 29, 2022
This kernel-linus update is based on upstream 5.15.32 and fixes at least the following security issues: An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts
March 29, 2022
This kernel update is based on upstream 5.15.32 and fixes at least the following security issues: An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts
March 29, 2022
5 security considerations for edge implementations
March 29, 2022
An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 29, 2022
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 29, 2022
Cybercrooks target students with fake job opportunities
March 29, 2022
Mozilla unveils vision for web evolution
March 29, 2022
Europe’s quest for energy independence – and how cyber‑risks come into play
Soaring energy prices and increased geopolitical tensions amid the Russian invasion of Ukraine bring a sharp focus on European energy security The post Europe’s quest for energy independence – and how cyber‑risks come into play appeared first on WeLiveSecurity
March 29, 2022
security update
March 28, 2022
Sophos fixes critical hijack flaw in firewall offering
March 28, 2022
Okta Says It Goofed in Handling the Lapsus$ Attack
March 28, 2022
Critical Sophos Security Bug Allows RCE on Firewalls
March 28, 2022
Triton malware still a threat to energy sector, FBI warns
March 28, 2022
openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 openssl-1.0.2k-25.el7_9.x86_64.rpm openssl-debuginfo-1.0.2k-25.el7_9.i686.rpm openssl-debuginfo-1.0.2k-25.el7_9.x86_64.rpm ope [More…]
March 28, 2022
expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235) * expat: Namespace-separator characters in “xmlns[:prefix]” attribute values can lead to arbitrary code execution (CVE-2022-25236) * expat: Integer overflow in storeRawNames() (CVE-2022-25315) * expat: Large number of prefixed XML attributes on a single tag can crash libexpat (CVE-2021-4596 [More…]
March 28, 2022
Red Hat OpenShift Container Platform release 4.10.6 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.10.
March 28, 2022
An update for openssl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 28, 2022
An update for openssl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 28, 2022
An update for expat is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 28, 2022
Under the hood of Wslink’s multilayered virtual machine
ESET researchers describe the structure of the virtual machine used in samples of Wslink and suggest a possible approach to see through its obfuscation techniques The post Under the hood of Wslink’s multilayered virtual machine appeared first on WeLiveSecurity
March 28, 2022
Okta acknowledges ‘mistake’ in handling of Lapsus$ attack
March 28, 2022
security update
March 28, 2022
The container bci/rust was updated. The following patches have been included in this update:
March 27, 2022
This is the March 2022 update for .NET Core 3.1: SDK 3.1.417 and Runtime 3.1.23 Release notes: https://github.com/dotnet/core/blob/main/release- notes/3.1/3.1.23/3.1.23.md This includes fixes for CVE-2022-24464, CVE-2022-24512 and CVE-2020-8927
March 26, 2022
CVE-2022-24302: Creation of new private key files using `~paramiko.pkey.PKey` subclasses was subject to a race condition between file creation and mode modification, which could be exploited by an attacker with knowledge of where the Paramiko-using code would write out such files; this has been patched by using `os.open` and `os.fdopen` to ensure new files are […]
March 26, 2022
This is the March 2022 update for .NET Core 3.1: SDK 3.1.417 and Runtime 3.1.23 Release notes: https://github.com/dotnet/core/blob/main/release- notes/3.1/3.1.23/3.1.23.md This includes fixes for CVE-2022-24464, CVE-2022-24512 and CVE-2020-8927
March 26, 2022
CVE-2022-24302: Creation of new private key files using `~paramiko.pkey.PKey` subclasses was subject to a race condition between file creation and mode modification, which could be exploited by an attacker with knowledge of where the Paramiko-using code would write out such files; this has been patched by using `os.open` and `os.fdopen` to ensure new files are […]
March 26, 2022
Fix for CVE-2022-0860
March 26, 2022
The container bci/ruby was updated. The following patches have been included in this update:
March 26, 2022
The container suse/rmt-nginx was updated. The following patches have been included in this update:
March 26, 2022
The container suse/rmt-mariadb was updated. The following patches have been included in this update:
March 26, 2022
The container suse/rmt-mariadb-client was updated. The following patches have been included in this update:
March 26, 2022
The container bci/python was updated. The following patches have been included in this update:
March 26, 2022
The container bci/python was updated. The following patches have been included in this update:
March 26, 2022