October 10, 2022
Evgeny Vereshchagin discovered multiple vulnerabilities in D-Bus, a simple interprocess messaging system, which may result in denial of service by an authenticated user.
October 10, 2022
Several security vulnerabilities were discovered in WordPress, a popular content management framework. Server Side Request Forgery and cross-site scripting (XSS) attacks may facilitate the bypass of access controls or the injection of client-side scripts.
October 10, 2022
Singtel confirms digital burglary at Dialog subsidiary
October 10, 2022
Criminal multitool LilithBot arrives on malware-as-a-service scene
October 10, 2022
How do you protect your online systems? Cultivate an insider threat
October 10, 2022
A security issue was fixed in nginx’s lua module.
October 10, 2022
Mastercard moves to protect ‘risky and frisky’ crypto transactions
October 10, 2022
Security fix for CVE-2022-38784
October 9, 2022
There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the ‘err_msg’ of ‘sqlite3_exec’ is not releasing after use, while libxml2 emphasizes that the caller needs to release it. (CVE-2021-42523)
October 8, 2022
A syntactically invalid type signature with incorrectly nested parentheses and curly brackets would cause an assertion failure in debug builds. Similar messages could potentially result in a crash or incorrect message processing in a production build, although we are not aware of a practical example. (CVE-2022-42010)
October 8, 2022
In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup. (CVE-2022-41322)
October 8, 2022
libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup(). (CVE-2020-29260) References: – https://bugs.mageia.org/show_bug.cgi?id=30917
October 8, 2022
Core Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) Fixed bug GH-9361 (Segmentation fault on script exit #9379). Fixed bug GH-9407 (LSP error in eval’d code refers to wrong class for static type).
October 8, 2022
Non-Responsive Delegation Attack. (CVE-2022-3204) Improves performance when under load, by cutting promiscuous queries for nameserver discovery and limiting the number of times a delegation point can look in the cache for missing records.
October 8, 2022
Key takeaways from ESET Threat Report T2 2022 – Week in security with Tony Anscombe
A look back on the key trends and developments that shaped the cyberthreat landscape from May to August of this year The post Key takeaways from ESET Threat Report T2 2022 – Week in security with Tony Anscombe appeared first on WeLiveSecurity
October 8, 2022
Update to the September 2022 update release of .NET Core 3.1 Release Notes: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.29/3.1.29.md This includes a fix for CVE-2022-38013
October 8, 2022
Security fix for CVE-2022-21797
October 8, 2022
Update to the September 2022 update release of .NET Core 3.1 Release Notes: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.29/3.1.29.md This includes a fix for CVE-2022-38013
October 8, 2022
Open source incident response solutions
October 8, 2022
What is the Confidential Containers project?
October 8, 2022
Biden’s Privacy Shield 2.0 order may not satisfy Europe
October 8, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
October 8, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
October 8, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
October 8, 2022
security update
October 7, 2022
security update
October 7, 2022
security update
October 7, 2022
Binance robbed of $600 million in crypto-tokens
October 7, 2022
The need to change cybersecurity for the next generation
Healthy habits that are instilled and nurtured at an early age bring lifelong benefits – the same applies to good cybersecurity habits The post The need to change cybersecurity for the next generation appeared first on WeLiveSecurity
October 7, 2022
ESET Threat Report T2 2022
A view of the T2 2022 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts The post ESET Threat Report T2 2022 appeared first on WeLiveSecurity
October 7, 2022
WhatsApp goes after Chinese password scammers via US court
October 7, 2022
Security fix for CVE-2022-38784
October 7, 2022
Some stability fixes. —- Update to 2.53.14 Note that besides the ordinary builds for the current Fedora and EPEL branches, there is an additional distro- independed build available at https://buc.fedorapeople.org/seamonkey . So if you have friends who use other Linux distro, but that distro does not provide SeaMonkey yet, you can recommend it for them.
October 7, 2022
Rebase to 2.4.9
October 7, 2022
**Version 3.4.3** (2022-09-28) * Fix a security issue on filesystem loader (possibility to load a template outside a configured directory)
October 7, 2022
**Version 2.15.3** (2022-09-28) * Fix a security issue on filesystem loader (possibility to load a template outside a configured directory)
October 7, 2022
Updated to version 0.10.2 with CVE fix.
October 7, 2022
Hardening data security in the cloud
October 7, 2022
Lloyd’s of London reboots after dodgy network activity detected
October 7, 2022
expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 expat-2.1.0-15.el7_9.i686.rpm expat-2.1.0-15.el7_9.x86_64.rpm expat-debuginfo-2.1.0-15.el7_9.i686.rpm expat-debuginfo-2.1.0-15.el7_9.x86_ [More…]
October 6, 2022
squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 squid-3.5.20-17.el7_9.8.x86_64.rpm squid-debuginfo-3.5.20-17.el7_9.8.x86_64.rpm squid-migration-script-3.5.20-17.el7_9.8.x86_64.rpm squid-sysvinit [More…]
October 6, 2022
An update that fixes two vulnerabilities is now available.
October 6, 2022
An update that fixes two vulnerabilities is now available.
October 6, 2022
An update that fixes one vulnerability is now available.
October 6, 2022
An update that fixes three vulnerabilities is now available.
October 6, 2022
Smashing Security podcast #292: Trussterflucks and eBay stalking
October 6, 2022
Learning from real life situations
October 6, 2022
Former Uber CSO convicted of covering up megabreach back in 2016
October 6, 2022
NetWalker ransomware scumbag jailed for 20 years
October 5, 2022
security update
October 5, 2022
security update
October 5, 2022
security update
October 5, 2022
Several security issues were fixed in DHCP.
October 5, 2022
Several vulnerabilities were discovered in BIND, a DNS server implementation. CVE-2022-2795
October 5, 2022
Multiple vulnerabilities were discovered in Node.js, a JavaScript runtime environment, which could result in memory corruption, invalid certificate validation, prototype pollution or command injection.
October 5, 2022
Don’t let your employees become the weakest link
October 5, 2022
Modified version of Tor Browser spies on Chinese users
October 5, 2022
An update that fixes one vulnerability is now available.
October 5, 2022
An update that fixes four vulnerabilities is now available.
October 5, 2022
An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 5, 2022
All your identity needs fulfilled
October 5, 2022
No Shangri-La for you: Top hotel chain confirms data leak
October 5, 2022
8 questions to ask yourself before getting a home security camera
As each new smart home device may pose a privacy and security risk, do you know what to look out for before inviting a security camera into your home? The post 8 questions to ask yourself before getting a home security camera appeared first on WeLiveSecurity
October 4, 2022
Romance scammer and BEC fraudster sent to prison for 25 years
October 4, 2022
An update that fixes three vulnerabilities is now available.
October 4, 2022
An update that fixes two vulnerabilities is now available.
October 4, 2022
An update that solves three vulnerabilities and has one errata is now available.
October 4, 2022
An update that fixes one vulnerability is now available.
October 4, 2022
An update that fixes one vulnerability is now available.
October 4, 2022
An update that fixes two vulnerabilities is now available.
October 4, 2022
Rocky Linux Security Advisories Are Now on LinuxSecurity.com!
October 4, 2022
Giveaways for every security professional
October 4, 2022
Scammers and rogue callers – can anything ever stop them?
October 4, 2022
Online romance scamlord who netted $9.5m jailed for 25 years
October 3, 2022
security update
October 3, 2022