Menu

Monthly Archives: January 2023

Several vulnerabilities have been fixed in the libstb library. CVE-2018-16981

Planet Ice hacked! 240,000 skating fans’ details stolen
Microsoft upgrades Defender to lock down Linux gear for its own good

Brief introduction CVE-2020-21529

New year, new storage challenge
GitHub code-signing certificates stolen (but will be revoked this week)

python-future could be made to crash if it received specially crafted input.

C++ creator Bjarne Stroustrup defends its safety

The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:

The container bci/ruby was updated. The following patches have been included in this update:

The container bci/openjdk was updated. The following patches have been included in this update:

The container bci/nodejs was updated. The following patches have been included in this update:

The container bci/golang was updated. The following patches have been included in this update:

Amid FTX’s burning wreckage, Japan outpost promises asset withdrawals in February
South Korea makes crypto crackdown a national justice priority
Chromebook SH1MMER exploit promises admin jailbreak
The wages of sin aren’t that great if you’re a developer choosing the dark side

security update

security update

Gootloader malware updated with PowerShell, sneaky JavaScript
Serious Security: The Samba logon bug caused by outdated crypto
Latvia says Russian hackers tried to phish its Ministry of Defence
JD Sports admits intruder accessed 10 million customers’ data
If a locked filing cabinet is stolen along with its key, can you still say it’s locked? GoTo thinks you can
Hackers steal 10 million customer details from JD Sports
We are the weakest link
A Complete Guide to Security Automation & Reporting Using Open Source Tools
Data Privacy Day, every day

The components for Red Hat OpenShift support for Windows Container 7.0.0 are now available. This product release includes bug fixes and a moderate security update for the following packages: windows-machine-config-operator and

The container bci/rust was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

Gee, tanks: Russian hackers DDoS Germany for aiding Ukraine

Update to 1.3.2 (CVE-2022-29187, CVE-2022-24765)

* CVE-2022-47318

Update 1.2.6

security update

Several buffer overflow, divide by zero or out of bounds read/write vulnerabilities were discovered in tiff, the Tag Image File Format (TIFF) library and tools, which may cause denial of service when processing a crafted TIFF image.

Two vulnerabilities were found in dojo, a modular JavaScript toolkit, that could result in information disclosure. CVE-2020-4051

The container bci/python was updated. The following patches have been included in this update:

The container bci/python was updated. The following patches have been included in this update:

The container suse/pcp was updated. The following patches have been included in this update:

The container bci/openjdk-devel was updated. The following patches have been included in this update:

security update

In Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.

In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.

The container bci/dotnet-runtime was updated. The following patches have been included in this update:

The container bci/dotnet-sdk was updated. The following patches have been included in this update:

The container bci/dotnet-sdk was updated. The following patches have been included in this update:

The container bci/dotnet-sdk was updated. The following patches have been included in this update:

Mon Dieu! Suspected French ShinyHunters gang member in the dock
Microsoft to enterprises: Patch your Exchange servers
Uncle Sam slaps $10m bounty on Hive while Russia ban-hammers FBI, CIA

security update

security update

Are you in control of your personal data? – Week in security with Tony Anscombe

Data Privacy Week is a reminder to protect your data – all year round. Here are three privacy-boosting habits you can start today. The post Are you in control of your personal data? – Week in security with Tony Anscombe appeared first on WeLiveSecurity

Hive ransomware servers shut down at last, says FBI
SwiftSlicer: New destructive wiper malware strikes Ukraine

Sandworm continues to conduct attacks against carefully chosen targets in the war-torn country The post SwiftSlicer: New destructive wiper malware strikes Ukraine appeared first on WeLiveSecurity

Why your data is more valuable than you may realize

The data trail you leave behind whenever you’re online is bigger – and more revealing – than you may think The post Why your data is more valuable than you may realize appeared first on WeLiveSecurity

An update that fixes four vulnerabilities is now available.

Update to 1.3.2 (CVE-2022-29187, CVE-2022-24765)

https://www.mediawiki.org/wiki/Release_notes/1.38 https://lists.wikimedia.org/hyperkitty/list/mediawiki- announce@lists.wikimedia.org/message/UEMW64LVEH3BEXCJV43CVS6XPYURKWU3/

The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:

Savvy cybersecurity pros benefit from host of free resources to step up fight against hackers and cyber threats

**Redis 6.2.10** Released Mon Jan 17 12:00:00 IST 2023 Upgrade urgency: MODERATE, a quick followup fix for a recently released 6.2.9. Bug Fixes * Revert the change to KEYS in the recent client output buffer limit fix (#11676) —- **Redis 6.2.9** Released Mon Jan 16 12:00:00 IDT 2023 Upgrade urgency: SECURITY, contains fixes to security […]

The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:

UK Cyber Security Centre’s scary new story: One phish, two phish, Russia phish, Iran phish
Google slays thousands of fake news vids posted by pro-China group Dragonbridge
Dutch suspect locked up for alleged personal data megathefts

security update

security update

security update

FBI smokes ransomware Hive after secretly buzzing around gang’s network for months
Mastodon vs. Twitter: Know the differences

Looking for an alternative to Twitter and thinking about joining the folks flocking to Mastodon? Here’s how the two platforms compare to each other. The post Mastodon vs. Twitter: Know the differences appeared first on WeLiveSecurity

Hive ransomware leak site and decryption keys seized in police sting
S3 Ep119: Breaches, patches, leaks and tweaks! [Audio + Text]
ShinyHunters suspect extradited to United States from Morocco, could face 116 years in jail if convicted
Canonical security subscriptions for Ubuntu Linux now available
Bloke allegedly stole, sold private info belonging to ‘tens of millions’ globally
Months after NSA disclosed Microsoft cert bug, datacenters remain unpatched

libXpm 3.5.15, fixes CVE-2022-46285, CVE-2022-44617, CVE-2022-4883

**Redis 7.0.8** Released Mon Jan 16 12:00:00 IDT 2023 Security Fixes: * (**CVE-2022-35977**) Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands can drive Redis to OOM panic * (**CVE-2023-22458**) Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands can lead to denial-of- service Bug Fixes * Avoid possible hang when client issues long KEYS,

Several security issues were fixed in the Linux kernel.

Smashing Security podcast #306: No Fly lists, cell phones, and the end of ransomware riches?

An update is now available for Red Hat OpenShift GitOps 1.6.4 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update is now available for Red Hat OpenShift GitOps 1.5.9 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update is now available for Red Hat OpenShift GitOps 1.7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Microsoft closes another door to attackers by blocking Excel XLL files from the internet
5 valuable skills your children can learn by playing video games

Gaming can help your children build and sharpen a range of life skills that will stand them in good stead in the future The post 5 valuable skills your children can learn by playing video games appeared first on WeLiveSecurity

Strengthening the human element

PAM would allow unintended access to the machine over network.

An update for go-toolset-1.18 and go-toolset-1.18-golang is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Cybersecurity professionals upskill in Brazil and Mexico
Go to security school, GoTo – theft of encryption keys shows you need it

The container bci/rust was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

Logfile management is no fun. Now it’s a nightmare thanks to critical-rated VMware flaws

Update to 42.6

GoTo admits: Customer cloud backups stolen together with decryption key
Apple emits emergency patch for older iPhones after snoops pounce on WebKit hole