An issue has been found in tinyxml, a C++ XML parsing library. Crafted XML messages could lead to an infinite loop in
April 30, 2022
Three issues have been found in libarchive, a multi-format archive and compression library.
April 30, 2022
An update that fixes one vulnerability is now available.
April 30, 2022
An update that fixes four vulnerabilities is now available.
April 30, 2022
An update that fixes one vulnerability is now available.
April 30, 2022
An update that fixes 5 vulnerabilities is now available.
April 30, 2022
TA410 under the microscope – Week in security with Tony Anscombe
Here’s what you should know about FlowingFrog, LookingFrog and JollyFrog – the three teams making up the TA410 espionage umbrella group The post TA410 under the microscope – Week in security with Tony Anscombe appeared first on WeLiveSecurity
April 30, 2022
Call for Contributors with Knowledge of Linux Firewalls!>
April 30, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
April 30, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
April 30, 2022
This vulnerability could potentially be exploited by a local user to execute arbitrary code with root privileges.
April 29, 2022
SDL (Simple DirectMedia Layer) could be made to crash or run programs if it opened a specially crafted file.
April 29, 2022
Ransomware costs show prevention is better than the cure
April 29, 2022
Security Turbulence in the Cloud: Survey Says…
April 29, 2022
Interpol: We can’t arrest our way out of cybercrime
April 29, 2022
Cyberespionage APT Now Identified as Three Separate Actors
April 29, 2022
Elon Musk says Twitter DMs should be end-to-end encrypted
April 29, 2022
Security fixes for CVE-2022-1227, CVE-2022-21698, CVE-2022-27191, CVE-2022-27649
April 29, 2022
Security fix for CVE-2021-28021, CVE-2021-42715, CVE-2021-42716, and CVE-2022-28041
April 29, 2022
Security fix for CVE-2021-25220
April 29, 2022
Security fix for CVE-2018-25032
April 29, 2022
security update
April 28, 2022
A lookback under the TA410 umbrella: Its cyberespionage TTPs and activity
ESET researchers reveal a detailed profile of TA410: we believe this cyberespionage umbrella group consists of three different teams using different toolsets, including a new version of the FlowCloud espionage backdoor discovered by ESET. The post A lookback under the TA410 umbrella: Its cyberespionage TTPs and activity appeared first on WeLiveSecurity
April 28, 2022
Cloudflare stomps huge DDoS attack on crypto platform
April 28, 2022
This kernel-linus update is based on upstream 5.15.35 and fixes at least the following security issues: A denial of service (DOS) issue was found in the Linux kernel smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet
April 28, 2022
This kernel update is based on upstream 5.15.35 and fixes at least the following security issues: A denial of service (DOS) issue was found in the Linux kernel smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet
April 28, 2022
Several security issues were fixed in networkd-dispatcher.
April 28, 2022
Cyberattacks Rage in Ukraine, Support Military Operations
April 28, 2022
An update for zlib is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 28, 2022
An update that solves one vulnerability, contains one feature and has one errata is now available.
April 28, 2022
An update that fixes one vulnerability is now available.
April 28, 2022
Five Eyes nations reveal 2021’s fifteen most-exploited flaws
April 28, 2022
Emotet is Back From ‘Spring Break’ With New Nasty Tricks
April 27, 2022
Updated web-admin-build packages are now available for Red Hat Gluster Storage 3.5 Web Administration on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 27, 2022
Millions of Java Apps Remain Vulnerable to Log4Shell
April 27, 2022
An update that fixes one vulnerability is now available.
April 27, 2022
An update that fixes one vulnerability is now available.
April 27, 2022
An update that fixes 5 vulnerabilities is now available.
April 27, 2022
An update that fixes one vulnerability is now available.
April 27, 2022
An update that fixes one vulnerability is now available.
April 27, 2022
Chinese drone-maker DJI suspends ops in Russia, Ukraine
April 27, 2022
Should security teams be giving service with a smile?
April 27, 2022
security update
April 26, 2022
DDoS attacks at an all-time-high in Q1 2022, says Kaspersky
April 26, 2022
Updated virtualbox packages fix security vulnerabilities: Vulnerability in the Oracle VM VirtualBox prior to 6.1.34 contains an easily exploitable vulnerability that allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to
April 26, 2022
Firms Push for CVE-Like Cloud Bug System
April 26, 2022
An update for maven-shared-utils is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 26, 2022
An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 26, 2022
An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 26, 2022
UNS-5376-1 was missing patches to properly fix the addressed issues.
April 26, 2022
An update that fixes 9 vulnerabilities is now available.
April 26, 2022
The trouble with BEC: How to stop the costliest internet scam
BEC fraud generated more losses for victims than any other type of cybercrime in 2021. It’s long past time that organizations got a handle on these scams. The post The trouble with BEC: How to stop the costliest internet scam appeared first on WeLiveSecurity
April 26, 2022
India inks tech pact with EU – only the US has the same deal
April 26, 2022
Crooks steal NFTs worth ‘$3m’ in Bored Ape Yacht Club heist
April 26, 2022
Git could be made to run arbitrary commands in platforms with multiple users support.
April 25, 2022
Lapsus$ Hackers Target T-Mobile
April 25, 2022
Several security issues were fixed in barbican.
April 25, 2022
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 25, 2022
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 25, 2022
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 25, 2022
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 25, 2022
Webcam hacking: How to know if someone may be spying on you through your webcam
Camfecting doesn’t ‘just’ invade your privacy – it could seriously impact your mental health and wellbeing. Here’s how to keep an eye on your laptop camera. The post Webcam hacking: How to know if someone may be spying on you through your webcam appeared first on WeLiveSecurity
April 25, 2022
FBI: BlackCat ransomware scratched 60-plus orgs
April 25, 2022
The newest upstream commit Security fixes for CVE-2022-1381, CVE-2022-1420
April 24, 2022
Security fix for [CVE-2022-1227]
April 24, 2022
A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document. (CVE-2021-45341) A buffer overflow vulnerability in CDataList of the jwwlib component of
April 24, 2022
A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. (CVE-2021-21898)
April 24, 2022
An update that fixes two vulnerabilities is now available.
April 23, 2022