security update
December 17, 2022
MirrorFace aims for high‑value targets in Japan – Week in security with Tony Anscombe
The group’s proprietary backdoor LODEINFO delivers additional malware, exfiltrates credentials, and steals documents and emails The post MirrorFace aims for high‑value targets in Japan – Week in security with Tony Anscombe appeared first on WeLiveSecurity
December 17, 2022
Email hijackers scam food out of businesses, not just money
December 17, 2022
An update that fixes 6 vulnerabilities is now available.
December 17, 2022
An update that fixes 7 vulnerabilities is now available.
December 17, 2022
An update that fixes 6 vulnerabilities is now available.
December 17, 2022
An update that fixes 6 vulnerabilities is now available.
December 17, 2022
New version 4.0.2
December 17, 2022
New version 3.6.10
December 17, 2022
Twitter staffer turned Saudi spy jailed for 3.5 years
December 16, 2022
Traveling for the holidays? Stay cyber‑safe with these tips
Holiday travel is back with a vengeance this year. Set yourself up for a cyber-safe and hassle-free trip with our checklist. The post Traveling for the holidays? Stay cyber‑safe with these tips appeared first on WeLiveSecurity
December 16, 2022
Backup saves the day after crime author loses laptop in blizzard
December 16, 2022
Help! My kid has asked Santa for a smartphone
The time has come for your child to receive their first smartphone. Before handing it over, however, make sure to help them use their new gadget safely and responsibly. The post Help! My kid has asked Santa for a smartphone appeared first on WeLiveSecurity
December 16, 2022
NIST says you better dump weak SHA-1 … by 2030
December 16, 2022
– New upstream release (108.0)
December 16, 2022
CVE fixes for: CVE-2022-4283, CVE-2022-46340, CVE-2022-46341, CVE-2022-46342, CVE-2022-46343, CVE-2022-46344
December 16, 2022
Update to 2.9.0 (CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319, CVE-2022-39320, CVE-2022-41877 and CVE-2022-39347).
December 16, 2022
Update to upstream release 3.0.26.
December 16, 2022
Update to 2.9.0 (CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319, CVE-2022-39320, CVE-2022-41877 and CVE-2022-39347). —- Update to 2.8.1 (CVE-2022-39282, CVE-2022-39283).
December 16, 2022
An update that fixes 5 vulnerabilities is now available.
December 16, 2022
Sting op takes down 50 DDoS-for-hire domains, seven people collared
December 15, 2022
security update
December 15, 2022
Unmasking MirrorFace: Operation LiberalFace targeting Japanese political entities
ESET researchers discovered a spearphishing campaign targeting Japanese political entities a few weeks before the House of Councillors elections, and in the process uncovered a previously undescribed MirrorFace credential stealer The post Unmasking MirrorFace: Operation LiberalFace targeting Japanese political entities appeared first on WeLiveSecurity
December 15, 2022
Microsoft to Europe: We’re setting an EU ‘data boundary’ from 2023
December 15, 2022
Smashing Security podcast #302: Lensa AI, and a dog called Bob
December 15, 2022
Using system tags to enable extended security hardening recommendations
December 15, 2022
Beyond the STIG: The wider world of cybersecurity
December 15, 2022
On the 12th day of the Rackspace email disaster, it did not give to me …
December 14, 2022
Malicious Microsoft-signed Windows drivers wielded in cyberattacks
December 14, 2022
Seven smuggled US military tech for Moscow, say Feds
December 14, 2022
AWS strains to make Simple Storage Service not so simple to screw up
December 14, 2022
TikTok could be banned from America, thanks to proposed bipartisan bill
December 14, 2022
Patch Tuesday updates spark errors when creating Hyper-V VMs
December 14, 2022
Top tips for security‑ and privacy‑enhancing holiday gifts
Think outside the (gift) box. Here are a few ideas for security and privacy gifts to get for your relatives – or even for yourself. Some don’t cost a penny! The post Top tips for security‑ and privacy‑enhancing holiday gifts appeared first on WeLiveSecurity
December 14, 2022
EU takes another step towards US data-sharing agreement
December 14, 2022
The container suse/manager/4.3/proxy-tftpd was updated. The following patches have been included in this update:
December 14, 2022
The container suse/manager/4.3/proxy-ssh was updated. The following patches have been included in this update:
December 14, 2022
The container suse/manager/4.3/proxy-squid was updated. The following patches have been included in this update:
December 14, 2022
The container suse/manager/4.3/proxy-salt-broker was updated. The following patches have been included in this update:
December 14, 2022
The container suse/manager/4.3/proxy-httpd was updated. The following patches have been included in this update:
December 14, 2022
Several security issues were fixed in X.Org X Server.
December 14, 2022
Apple patches everything, finally reveals mystery of iOS 16.1.2
December 14, 2022
Patch Tuesday: 0-days, RCE bugs, and a curious tale of signed malware
December 14, 2022
Uber staff info leaks after supplier Teqtivity gets pwned
December 13, 2022
security update
December 13, 2022
COVID-bit: the wireless spyware trick with an unfortunate name
December 13, 2022
Cybersecurity Trends 2023: Securing our hybrid lives
ESET experts offer their reflections on what the continued blurring of boundaries between different spheres of life means for our human and social experience – and especially our cybersecurity and privacy The post Cybersecurity Trends 2023: Securing our hybrid lives appeared first on WeLiveSecurity
December 13, 2022
An update that contains security fixes can now be installed.
December 13, 2022
An update that solves 12 vulnerabilities, contains one feature and has two fixes is now available.
December 13, 2022
An update that solves 12 vulnerabilities, contains one feature and has two fixes is now available.
December 13, 2022
An update that contains security fixes can now be installed.
December 13, 2022
An update that fixes 12 vulnerabilities, contains one feature is now available.
December 13, 2022
Several security issues were fixed in containerd.
December 13, 2022
Researchers smell a cryptomining Chaos RAT targeting Linux systems
December 13, 2022
Pwn2Own contest concludes with nearly $1m paid out to ethical hackers
December 13, 2022
Timothee Desurmont discovered an information leak vulnerability in node-eventsource, a W3C compliant EventSource client for Node.js: the module was not honoring the same-origin-policy and upon following a redirect would leak cookies to the the target URL.
December 12, 2022
Pwn2Own Toronto: 54 hacks, 63 new bugs, $1 million in bounties
December 12, 2022
Using threat modeling to get your priorities right
December 12, 2022
Open source security fought back in 2022
December 12, 2022
Several security issues were fixed in the Linux kernel.
December 12, 2022
Several security issues were fixed in the Linux kernel.
December 12, 2022
Several security issues were fixed in the Linux kernel.
December 12, 2022
IT security teams, business execs still not on same page
December 12, 2022
UK arrests five for selling ‘dodgy’ point of sale software
December 12, 2022
Multiple security vulnerabilities have been found in OpenEXR, command-line tools and a library for the OpenEXR image format. Buffer overflows or out-of-bound reads could lead to a denial of service (application crash) if a malformed image file is processed.
December 12, 2022
security update
December 11, 2022
An update that fixes one vulnerability is now available.
December 11, 2022
Security fix for CVE-2022-3500 Proper exception handling in tornado_requests
December 11, 2022
Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing
December 11, 2022
Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing
December 11, 2022
Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing
December 11, 2022
An update that fixes one vulnerability is now available.
December 10, 2022
security update
December 10, 2022
Diamond industry under attack – Week in security with Tony Anscombe
ESET researchers uncover a new wiper and its execution tool, both attributed to the Iran-aligned Agrius APT group The post Diamond industry under attack – Week in security with Tony Anscombe appeared first on WeLiveSecurity
December 10, 2022
Xenomorph: What to know about this Android banking trojan
Xenomorph pilfers victims’ login credentials for banking, payment, social media, cryptocurrency and other apps with valuable data The post Xenomorph: What to know about this Android banking trojan appeared first on WeLiveSecurity
December 10, 2022
Zhang Boyang reported that the grub2 update released as DLA 3190-1 did not correctly apply fixes for CVE-2022-2601 and CVE-2022-3775. Updated packages are now available to address this issue. For reference the original advisory text follows.
December 10, 2022
Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application (the Sequoia PGP plugin for Thunderbird).
December 10, 2022
Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application (the Sequoia PGP plugin for Thunderbird).
December 10, 2022
Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application (the Sequoia PGP plugin for Thunderbird).
December 10, 2022
Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application (the Sequoia PGP plugin for Thunderbird).
December 10, 2022
updates to screenshooter,settings, and places-plugin
December 10, 2022
Legit Android apps poisoned by sticky ‘Zombinder’ malware
December 9, 2022
Italy, Japan, UK to jointly launch sixth-gen fighter jet by 2035
December 9, 2022