November 14, 2022
Complete Guide to Ethical Hacking on Linux
November 14, 2022
ESET APT Activity Report T2 2022
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in T2 2022 The post ESET APT Activity Report T2 2022 appeared first on WeLiveSecurity
November 14, 2022
An update that fixes 6 vulnerabilities is now available.
November 14, 2022
An update for libksba is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 14, 2022
An update for device-mapper-multipath is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 14, 2022
Australia to ‘stand up and punch back’ against cyber crims
November 14, 2022
An issue was discovered in Dropbear, a relatively small SSH server and client. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it was possible for an SSH server to change the login process in its favor. This attack can bypass
November 13, 2022
There were a couple of secuity issues found in sysstat, system performance tools for Linux, which are as follows: CVE-2019-16167
November 13, 2022
Update to 4.19.0, fixes CVE-2021-46848.
November 13, 2022
libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c (CVE-2021-3826) binutils: heap-based buffer overflow in bfd_getl32() when called by strip_main() in objcopy.c via a crafted file (CVE-2022-38533)
November 12, 2022
libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c (CVE-2021-3826) binutils: heap-based buffer overflow in bfd_getl32() when called by strip_main() in objcopy.c via a crafted file (CVE-2022-38533)
November 12, 2022
LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. (CVE-2022-3599) LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in
November 12, 2022
LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. (CVE-2022-3599) LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in
November 12, 2022
In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y. (CVE-2022-44638) References:
November 12, 2022
In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y. (CVE-2022-44638) References:
November 12, 2022
An update that fixes two vulnerabilities is now available.
November 12, 2022
An update that fixes two vulnerabilities is now available.
November 12, 2022
Security challenges facing SMBs – Week in security with Tony Anscombe
New ESET report shows how ever-growing threats impact SMB sentiment and why many SMBs are underprepared to defend against attacks The post Security challenges facing SMBs – Week in security with Tony Anscombe appeared first on WeLiveSecurity
November 12, 2022
FIFA World Cup 2022 scams: Beware of fake lotteries, ticket fraud and other cons
When in doubt, kick it out, plus other tips for hardening your cyber-defenses against World Cup-themed phishing and other scams The post FIFA World Cup 2022 scams: Beware of fake lotteries, ticket fraud and other cons appeared first on WeLiveSecurity
November 12, 2022
Maddie Stone reported a heap-based buffer overflow flaw in pixman, a pixel-manipulation library for X and cairo, which could result in denial of service or potentially the execution of arbitrary code.
November 12, 2022
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
November 12, 2022
The container bci/golang was updated. The following patches have been included in this update:
November 12, 2022
The container bci/golang was updated. The following patches have been included in this update:
November 12, 2022
security update
November 12, 2022
security update
November 11, 2022
World Cup apps pose a data security and privacy nightmare
November 11, 2022
Dangerous SIM-swap lockscreen bypass – update Android now!
November 11, 2022
Toward the cutting edge: SMBs contemplating enterprise security
Survey finds SMBs, weary of security failures, curious about detection and response The post Toward the cutting edge: SMBs contemplating enterprise security appeared first on WeLiveSecurity
November 11, 2022
Alleged LockBit ransomware operator arrested in Canada
November 11, 2022
NSA urges orgs to use memory-safe programming languages
November 11, 2022
What observability means for cloud operations
November 11, 2022
The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:
November 11, 2022
The container suse/manager/4.3/proxy-squid was updated. The following patches have been included in this update:
November 11, 2022
The container suse/manager/4.3/proxy-httpd was updated. The following patches have been included in this update:
November 11, 2022
The container suse/manager/4.3/proxy-httpd was updated. The following patches have been included in this update:
November 11, 2022
The container suse/manager/4.3/proxy-httpd was updated. The following patches have been included in this update:
November 11, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
November 11, 2022
Europe calls for joint cyber defense to ward off Russia
November 11, 2022
Australia blames Russia for harboring health insurance hackers
November 11, 2022
Instagram star gets 11 years for $300m email scam plot
November 10, 2022
S3 Ep108: You hid THREE BILLION dollars in a popcorn tin?
November 10, 2022
Husband and wife nuclear warship ‘spy’ team get 20 years each
November 10, 2022
10 common security mistakes and how to avoid them
Do you make these security mistakes and put yourself at greater risk for successful attacks? The post 10 common security mistakes and how to avoid them appeared first on WeLiveSecurity
November 10, 2022
Twitter Chief Information Security Officer flies the coop
November 10, 2022
A vulnerability has been found in lesspipe which could result in arbitrary code execution.
November 10, 2022
A vulnerability has been found in lesspipe which could result in arbitrary code execution.
November 10, 2022
This is the October 2022 monthly update for .NET 6. It updates the SDK to 6.0.110 and the Runtime to 6.0.10. This update includes a fix for CVE 2022-41032
November 10, 2022
This is the October 2022 monthly update for .NET 6. It updates the SDK to 6.0.110 and the Runtime to 6.0.10. This update includes a fix for CVE 2022-41032
November 10, 2022
– url: use IDN decoded names for HSTS checks (CVE-2022-42916) – http_proxy: restore the protocol pointer on error (CVE-2022-42915) – netrc: replace fgets with Curl_get_line (CVE-2022-35260) – fix POST following PUT confusion (CVE-2022-32221)
November 10, 2022
– url: use IDN decoded names for HSTS checks (CVE-2022-42916) – http_proxy: restore the protocol pointer on error (CVE-2022-42915) – netrc: replace fgets with Curl_get_line (CVE-2022-35260) – fix POST following PUT confusion (CVE-2022-32221)
November 10, 2022
A roadmap to better cyber security training
November 10, 2022
Windows breaks under upgraded IceXLoader malware
November 10, 2022
Emergency code execution patch from Apple – but not an 0-day
November 10, 2022
Smashing Security podcast #297: Mastodon 101, and the Hushpuppi saga
November 10, 2022
security update
November 9, 2022
security update
November 9, 2022
Authoritative Guide on Linux Disk Encryption
November 9, 2022
OpenSSL: Email address buffer overflow security flaws
November 9, 2022
Several security issues were fixed in OpenJDK.
November 9, 2022
Zstandard could be made to expose sensitive information
November 9, 2022
Zstandard could be made to expose sensitive information
November 9, 2022
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 9, 2022
An update for linux-firmware is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update Support, and Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions.
November 9, 2022
An update for linux-firmware is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update Support, and Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions.
November 9, 2022
VMware warns of three critical holes in remote-control tool
November 9, 2022
Microsoft squashes six security bugs already exploited in the wild
November 9, 2022
Silk Road drugs market hacker pleads guilty, faces 20 years inside
November 8, 2022
Robin Banks crooks back at the table with fresh phish from Russia
November 8, 2022
Experian, T-Mobile US settle data spills for mere $16m
November 8, 2022
Hacking baby monitors can be child’s play: Here’s how to stay safe
Make sure that the device that’s supposed to help you keep tabs on your little one isn’t itself a privacy and security risk The post Hacking baby monitors can be child’s play: Here’s how to stay safe appeared first on WeLiveSecurity
November 8, 2022
Mastodon: What you need to know for your security and privacy
November 8, 2022
Cloud architects are afraid of automation
November 8, 2022
For Debian 10 buster, these problems have been fixed in version 2:8.1.0875-5+deb10u3. We recommend that you upgrade your vim packages.
November 8, 2022
An update that fixes 7 vulnerabilities is now available.
November 8, 2022
An update that fixes one vulnerability is now available.
November 8, 2022
An update that fixes 7 vulnerabilities is now available.
November 8, 2022
An update that solves one vulnerability and has one errata is now available.
November 8, 2022
An update that solves one vulnerability and has two fixes is now available.
November 8, 2022
FBI: Russian hacktivists achieve only ‘limited’ DDoS success
November 8, 2022
All the US midterm-related lies to expect when you’re electing
November 7, 2022
security update
November 7, 2022
Public URL scanning tools – when security leads to insecurity
November 7, 2022
Microsoft hits the switch on password-free smartphone authentication
November 7, 2022
Small and medium-size business (SMB) leaders have a lot on their minds. The looming recession and inflation have created financial uncertainty. Meanwhile, the global rise in sophisticated ransomware threats and geo-political tensions are escalating cyber threats. With so many factors and pressures at play, how are SMBs navigating this challenging business landscape while fighting back […]
November 7, 2022
Oh, look: More malware in the Google Play store
November 7, 2022
Can confidential computing stop the next crypto heist?
November 7, 2022
Linux Database Security Tips
November 7, 2022
Japan officially joins NATO’s cyber defense center
November 7, 2022
Do all vulnerabilities really matter?
November 7, 2022
It was discovered that there was a potential out-of-bounds write vulnerability in pixman, a pixel-manipulation library used in many Linux graphical applications.
November 7, 2022
It was discovered that there was a potential out-of-bounds write vulnerability in pixman, a pixel-manipulation library used in many Linux graphical applications.
November 7, 2022