October 24, 2022
DHL named most-spoofed brand in phishing
CISA, FBI warn healthcare organizations of Daixin ransomware
October 24, 2022
APT‑C‑50 updates FurBall Android malware – Week in security with Tony Anscombe
ESET Research spots a new version of Android malware known as FurBall that APT-C-50 is using in its wider Domestic Kitten campaign The post APT‑C‑50 updates FurBall Android malware – Week in security with Tony Anscombe appeared first on WeLiveSecurity
October 24, 2022
Google says slap some GUAC on your software supply chain
October 24, 2022
An incomplete fix was discovered in Pillow.
October 24, 2022
Several security issues were fixed in MySQL.
October 24, 2022
An update that fixes four vulnerabilities is now available.
October 24, 2022
An update for pki-core is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 24, 2022
An update for libksba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 24, 2022
Update to maintenance release 3.0.8
October 24, 2022
Most reported CVEs for Docker Hub images are harmless
October 24, 2022
5 reasons to keep your software and devices up to date
Next time you’re tempted to hold off on installing software updates, remember why these updates are necessary in the first place The post 5 reasons to keep your software and devices up to date appeared first on WeLiveSecurity
October 24, 2022
A year of SANS security summits
October 24, 2022
Linux: Here, there and everywhere
October 24, 2022
The container bci/rust was updated. The following patches have been included in this update:
October 23, 2022
The container bci/rust was updated. The following patches have been included in this update:
October 23, 2022
The container bci/rust was updated. The following patches have been included in this update:
October 23, 2022
The container bci/rust was updated. The following patches have been included in this update:
October 23, 2022
The container bci/rust was updated. The following patches have been included in this update:
October 23, 2022
The container suse/pcp was updated. The following patches have been included in this update:
October 23, 2022
An update that solves 7 vulnerabilities, contains one feature and has one errata is now available.
October 22, 2022
Security fix for CVE-2022-2476
October 22, 2022
– Update to 20.10.20. – Mitigates CVE-2022-39253
October 22, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
October 22, 2022
The container bci/dotnet-runtime was updated. The following patches have been included in this update:
October 22, 2022
The container bci/dotnet-runtime was updated. The following patches have been included in this update:
October 22, 2022
Domestic Kitten campaign spying on Iranian citizens with new FurBall malware
APT-C-50’s Domestic Kitten campaign continues, targeting Iranian citizens with a new version of the FurBall malware masquerading as an Android translation app The post Domestic Kitten campaign spying on Iranian citizens with new FurBall malware appeared first on WeLiveSecurity
October 21, 2022
An update that solves three vulnerabilities and has one errata is now available.
October 21, 2022
An update that fixes one vulnerability is now available.
October 21, 2022
An update that fixes one vulnerability is now available.
October 21, 2022
OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626) * OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628) * OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619) * OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624 [More…]
October 21, 2022
This update upgrades Firefox to version 102.4.0 ESR. * Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927) * Mozilla: Memory Corruption in JS Engine (CVE-2022-42928) * Mozilla: Denial of Service via window.print (CVE-2022-42929) * Mozilla: Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4 (CVE-2022-42932) For more details about the securit […]
October 21, 2022
OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618) * OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626) * OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628) * OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-202 [More…]
October 21, 2022
It’s time to prioritize SaaS security
October 21, 2022
Oops, web trackers may have leaked 3 million patients’ info
October 20, 2022
security update
October 20, 2022
Cloud migration and the cyber skills shortage
October 20, 2022
Don’t get scammed when buying tickets online
With hot-ticket events firmly back on the agenda, scammers selling fake tickets online have also come out in force The post Don’t get scammed when buying tickets online appeared first on WeLiveSecurity
October 20, 2022
Security fix for CVE-2022-38784
October 20, 2022
An update that fixes one vulnerability is now available.
October 20, 2022
An update that fixes one vulnerability is now available.
October 20, 2022
An update that fixes one vulnerability is now available.
October 20, 2022
An update for java-17-openjdk is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 20, 2022
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 20, 2022
Confidentiality in the cloud: the delicate bargain of trust
October 20, 2022
CISA warns of security holes in industrial Advantech, Hitachi kit
October 20, 2022
Verizon prepaid accounts hijacked by SIM swap crooks
October 19, 2022
security update
October 19, 2022
security update
October 19, 2022
Women in Cryptology – USPS celebrates WW2 codebreakers
October 19, 2022
Millennials, Gen Z actually suck at workplace security
October 19, 2022
So, the US, China, and Russia walk into an infosec conference
October 19, 2022
The infinite beauty of the hive mind
October 19, 2022
libXdmcp could be made to expose sensitive information.
October 19, 2022
Perl could be made to by pass signature verification.
October 19, 2022
An update that fixes one vulnerability is now available.
October 19, 2022
An update that contains security fixes can now be installed.
October 19, 2022
This update upgrades Firefox to version 102.3.0 ESR. * expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 firefox-102.3.0-7.el7_9.x86_64.rpm firefox-debuginfo-102.3.0-7.el7_9.x86_64.rpm firefox [More…]
October 19, 2022
This update upgrades Thunderbird to version 102.3.0. * expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 thunderbird-102.3.0-4.el7_9.x86_64.rpm thunderbird-debuginfo-102.3.0-4.el7_9.x86_64.rpm – [More…]
October 19, 2022
Germany stands down cyber boss over Russian ties
October 19, 2022
security update
October 19, 2022
Build some flexibility into your cyber learning
October 18, 2022
security update
October 18, 2022
‘Fully undetectable’ Windows backdoor gets detected
October 18, 2022
NSA urges enterprises to watch China, Taiwan tensions
October 18, 2022
Zoom for Mac patches sneaky “spy-on-me” bug – update now!
October 18, 2022
5 steps to protect your school from cyberattacks
What can schools, which all too often make easy prey for cybercriminals, do to bolster their defenses and keep threats at bay? The post 5 steps to protect your school from cyberattacks appeared first on WeLiveSecurity
October 18, 2022
Putting on the Red Hat
October 18, 2022
It was found that the Node XML DOM library was vulnerable to prototype pollution. For Debian 10 buster, this problem has been fixed in version
October 18, 2022
Several security issues were fixed in FRR.
October 18, 2022
An update that solves 26 vulnerabilities, contains two features and has 89 fixes is now available.
October 18, 2022
An update for nodejs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 18, 2022
An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 18, 2022
An update for the nodejs:14 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 18, 2022
Japanese giants to offer security-as-a-service for connected cars
October 18, 2022
Cops swoop after crooks use wireless keyfob hack to steal cars
October 18, 2022
Interpol busts global ‘Black Axe’ cyber-fraud suspects
October 17, 2022