February 28, 2023
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 28, 2023
Red Hat OpenShift Container Platform release 4.11.29 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 28, 2023
An update for vim is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 28, 2023
An update for httpd is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 28, 2023
An update for git is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 28, 2023
An update for kubeflow, dashboard, deployer is now available for Red Hat OpenShift Data Science 1.22. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 28, 2023
News Corp outfoxed by IT intruders for years
February 28, 2023
Russian hacktivists DDoS hospitals, with pathetic results
February 28, 2023
LastPass: Keylogger on home PC led to cracked corporate password vault
February 28, 2023
Feeling VEXed by software supply chain security? You’re not alone
February 28, 2023
Dish multi-day outage rolls on as ransomware fears grow
February 27, 2023
security update
February 27, 2023
security update
February 27, 2023
security update
February 27, 2023
security update
February 27, 2023
Beware rogue 2FA apps in App Store and Google Play – don’t get hacked!
February 27, 2023
China makes it even harder for data to leave its shores
February 27, 2023
Several security issues were fixed in ZoneMinder.
February 27, 2023
How to Build an Encryption Strategy to Protect Your Online Identity
February 27, 2023
Russian charged with smuggling US counterintel tech to Motherland
February 27, 2023
Several security issues were fixed in ClamAV.
February 27, 2023
It was discovered that there was a regression in the previous fix for python-cryptography, a Python library offering a number of encryption and cryptography primitives.
February 27, 2023
Several security issues were fixed in Intel Microcode.
February 27, 2023
An update for service-binding-operator-bundle-container and service-binding-operator-container is now available for OpenShift Developer Tools and Services for OCP 4.9. Red Hat Product Security has rated this update as having a security impact
February 27, 2023
APR could possibly be made to crash or run programs if it received specially crafted network traffic.
February 27, 2023
The cloud’s worst kept secret? Vulnerabilities
February 27, 2023
Microsoft: For better security, scan more Exchange server objects
February 26, 2023
Vulnerabilities have been found in Node.js, which could result in DNS rebinding or arbitrary code execution. CVE-2022-43548
February 26, 2023
One year on, how is the war playing out in cyberspace? – Week in security with Tony Anscombe
With the conflict in Ukraine passing the one-year mark, have its cyber-war elements turned out as expected? The post One year on, how is the war playing out in cyberspace? – Week in security with Tony Anscombe appeared first on WeLiveSecurity
February 25, 2023
A year of wiper attacks in Ukraine
ESET Research has compiled a timeline of cyberattacks that used wiper malware and have occurred since Russia’s invasion of Ukraine in 2022 The post A year of wiper attacks in Ukraine appeared first on WeLiveSecurity
February 25, 2023
Triggering arbitrary code execution was possible due to .desktop files registered as application/x-ms-dos-executable MIME handlers in the open source .NET framework Mono.
February 25, 2023
‘Ethical hacker’ among ransomware suspects cuffed by Dutch cops
February 25, 2023
The container bci/nodejs was updated. The following patches have been included in this update:
February 25, 2023
The container bci/nodejs was updated. The following patches have been included in this update:
February 25, 2023
The container bci/nodejs was updated. The following patches have been included in this update:
February 25, 2023
Security fix for CVE-2023-0778 —- remove quadlet package specification completely —- bump to v4.4.0
February 25, 2023
Security fix for CVE-2023-0056, CVE-2023-25725
February 25, 2023
Telus source code, staff info for sale on dark web forum
February 25, 2023
Bitcoin mining rig found stashed in school crawlspace
February 24, 2023
Google destroyed evidence for antitrust battle, Feds complain
February 24, 2023
security update
February 24, 2023
security update
February 24, 2023
security update
February 24, 2023
security update
February 24, 2023
WinorDLL64: A backdoor from the vast Lazarus arsenal?
The targeted region, and overlap in behavior and code, suggest the tool is used by the infamous North Korea-aligned APT group The post WinorDLL64: A backdoor from the vast Lazarus arsenal? appeared first on WeLiveSecurity
February 24, 2023
An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.
February 24, 2023
HTTP multi-header compression denial of service has been fixed in curl, a command line tool and library for transferring data with URLs. For Debian 10 buster, this problem has been fixed in version
February 24, 2023
Several flaws were found in tiffcrop, a program distributed by tiff, the Tag Image File Format (TIFF) library and tools. A specially crafted tiff file can lead to an out-of-bounds write or read resulting in a denial of service.
February 24, 2023
European Commission bans TikTok from staff gadgets
February 24, 2023
Ukraine invasion blew up Russian cybercrime alliances
February 24, 2023
Fix a possible DOS involving the Qt SQL ODBC driver plugin.
February 24, 2023
Suspected Russian NLBrute malware boss extradited to US
February 23, 2023
Xi Lu discovered that missing input sanitising in Emacs (in etags, the Ruby mode and htmlfontify) could result in the execution of arbitrary shell commands.
February 23, 2023
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
February 23, 2023
Dole production plants crippled by ransomware, stores run short
February 23, 2023
security update
February 23, 2023
FTX fiasco founder SBF faces further fraud charges
February 23, 2023
Sensitive DoD emails exposed by unsecured Azure server
February 23, 2023
S3 Ep123: Crypto company compromise kerfuffle [Audio + Text]
February 23, 2023
That ticking noise is your end users’ laptops
February 23, 2023
Writing like a boss with ChatGPT and how to get better at spotting phishing scams
It’s never been easier to write a convincing message that can trick you into handing over your money or personal data The post Writing like a boss with ChatGPT and how to get better at spotting phishing scams appeared first on WeLiveSecurity
February 23, 2023
Fake ChatGPT apps spread Windows and Android malware
February 23, 2023
Security by design: Security principles and threat modeling
February 23, 2023
Several security issues were fixed in DCMTK.
February 23, 2023
Multiple security vulnerabilities have been discovered in Asterisk, an Open Source Private Branch Exchange. Buffer overflows and other programming errors could be exploited for launching a denial of service attack or the execution of arbitrary code.
February 23, 2023
A new MariaDB minor maintenance release 10.3.38 has been released. It includes fix for a major performance/memory consumption issue (MDEV-29988). For further details, see the MariaDB 10.3 release notes:
February 23, 2023
Brief introduction CVE-2023-22490
February 23, 2023
Red Hat OpenShift Container Platform release 4.9.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9.
February 23, 2023
Red Hat OpenShift Container Platform release 4.9.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9.
February 23, 2023
NPM JavaScript packages abused to create scambait links in bulk
February 22, 2023
ESET SMB Digital Security Sentiment Report: The damaging effects of a breach
SMBs need to not only reduce their odds of being hit by an attack, but also implement processes that they can follow if their defenses are breached The post ESET SMB Digital Security Sentiment Report: The damaging effects of a breach appeared first on WeLiveSecurity
February 22, 2023
* Fix large memory allocation when uploading content. * Fix scrolling after a history navigation with PSON enabled. * Always update the active uri of WebKitFrame. * Fix several crashes and rendering issues. * Security fixes: CVE-2023-23529 —- * Improve GStreamer multimedia playback across the board with improved codec selection logic, better handling of latency, […]
February 22, 2023
Update to upstream 1.1.6
February 22, 2023
Update to 2.39.2 (CVE-2023-22490, CVE-2023-23946) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.2/Documentation/RelNotes/2.30.8.txt) and the security advisories ([CVE-2023-22490](https://github.com/git/git/security/advisories/GHSA-
February 22, 2023
Rebase to upstream version 3.0.8 Resolves: CVE-2022-4203 Resolves: CVE-2022-4304 Resolves: CVE-2022-4450 Resolves: CVE-2023-0215 Resolves: CVE-2023-0216 Resolves: CVE-2023-0217 Resolves: CVE-2023-0286 Resolves: CVE-2023-0401
February 22, 2023
CVE-2023-0494: potential use-after-free in DeepCopyPointerClasses
February 22, 2023
xwayland 22.1.8 – Security fix for CVE-2023-0494
February 22, 2023
Global threats fuel cyber defence training
February 22, 2023
Coinbase breached by social engineers, employee data stolen
February 21, 2023
Will ChatGPT start writing killer malware?
AI-pocalypse soon? As stunning as ChatGPT’s output can be, should we also expect the chatbot to spit out sophisticated malware? The post Will ChatGPT start writing killer malware? appeared first on WeLiveSecurity
February 21, 2023
An update for tar is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 21, 2023
An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. An update for redhat-release-virtualization-host,
February 21, 2023
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 21, 2023
An update for the php:8.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 21, 2023
An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 21, 2023