Menu

Monthly Archives: February 2023

# New in release OpenJDK 19.0.2 (2023-01-17) ## CVEs Fixed * CVE-2023-21835 * CVE-2023-21843 ## Security Fixes – JDK-8286070: Improve UTF8 representation – JDK-8286496: Improve Thread labels – JDK-8287411: Enhance DTLS performance – JDK-8288516: Enhance font creation – JDK-8293554: Enhanced DH Key Exchanges – JDK-8293598: Enhance InetAddress address handling – JDK-8293717: Objective

Rebase to sudo 1.9.12p2 – security fix for CVE-2023-22809

Key takeaways from ESET’s new APT Activity Report – Week in security with Tony Anscombe

As our latest APT Activity Report makes abundantly clear, the threat of cyberespionage and stealthy attacks remains very real The post Key takeaways from ESET’s new APT Activity Report – Week in security with Tony Anscombe appeared first on WeLiveSecurity

Red Hat OpenShift sandboxed containers: Peer-pods technical deep dive
Red Hat OpenShift sandboxed containers: Peer-pods solution overview
Red Hat OpenShift sandboxed containers: Peer-pods hands-on
CSAF VEX documents now generally available

An update that fixes one vulnerability is now available.

Iran crew stole Charlie Hebdo database, says Microsoft

The 6.1.9 stable kernel update contains a number of important fixes across the tree.

Update to version 1.23.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.23.0 Additionally, this update was built with a version of golang that addresses CVE-2022-41717, and it fixes the installation of icon files.

The 6.1.9 stable kernel update contains a number of important fixes across the tree.

Update to version 1.23.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.23.0 Additionally, this update was built with a version of golang that addresses CVE-2022-41717, and it fixes the installation of icon files.

HeadCrab bots pinch 1,000+ Redis servers to mine coins
Fast-evolving Prilex POS malware can block contactless payments
Guy accused of wrecking crypto exchange now hauled into court

Several security issues were fixed in LibTIFF.

Several security issues were fixed in Long Range ZIP.

Several security issues were fixed in Apache HTTP Server.

OpenSSH fixes double-free memory bug that’s pokable over the network
Is that survey real or fake? How to spot a survey scam

“Can I tell a legitimate survey apart from a fake one?” is the single most important question you need to answer for yourself before taking any surveys online The post Is that survey real or fake? How to spot a survey scam appeared first on WeLiveSecurity

Another RAC staffer nabbed for storing and sharing road accident data
How multicloud changes devops
LockBit claims responsibility for ION ransomware attack but US/UK hounds are sniffing
Chinese ‘surveillance balloon’ over US causes fearful gasbagging

The newest upstream commit Security fix for CVE-2023-0288

Former Ubiquiti dev pleads guilty in data theft and extortion case

Update to 109.0.5414.119. Fixes the following security issues: CVE-2023-0471 CVE-2023-0472 CVE-2023-0473 CVE-2023-0474

New openssh packages are available for Slackware 15.0 and -current to fix security issues.

security update

security update

security update

security update

Malvertising attacks are distributing .NET malware loaders
S3 Ep120: When dud crypto simply won’t let go [Audio + Text]
Less is more: Conquer your digital clutter before it conquers you

Lose what you don’t use and other easy ways to limit your digital footprint and strengthen your online privacy and security The post Less is more: Conquer your digital clutter before it conquers you appeared first on WeLiveSecurity

Romance fraud losses rose 91% during the pandemic, claims UK’s TSB bank
Super Bock says ‘cyber’ nasty ‘disrupting computer services’

The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:

Rebuild for CVE-2022-41717 in golang.

Fix CVE-2022-47021

new upstream version

Rebuild for CVE-2022-41717 in golang.

Update to pgadmin4-6.19. —- Backport fix for CVE-2023-22298.

Smashing Security podcast #307: ChatGPT and the Minister for Foreign Affairs
Google boosts bounties for open source flaws found via fuzzing
Take a tour of the Edgescan Cybersecurity Platform
Microsoft sweeps up after breaking .NET with December security updates
Password-stealing “vulnerability” reported in KeePass – bug or feature?

Several security issues were fixed in Vim.

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed

ESET APT Activity Report T3 2022

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in T3 2022 The post ESET APT Activity Report T3 2022 appeared first on WeLiveSecurity

Beyond the STIG: What hardening really means

Several security issues were fixed in Slurm.

Attackers abuse Microsoft’s ‘verified publisher’ status to steal data

Update to 2.53.15