March 24, 2023
Danger USB! Journalists sent exploding flash drives
March 23, 2023
Understanding Managed Detection and Response – and what to look for in an MDR solution
Why your organization should consider an MDR solution and five key things to look for in a service offering The post Understanding Managed Detection and Response – and what to look for in an MDR solution appeared first on WeLiveSecurity
March 23, 2023
Secure mail
March 23, 2023
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
March 23, 2023
The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:
March 23, 2023
The container suse/sle15 was updated. The following patches have been included in this update:
March 23, 2023
The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:
March 23, 2023
The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:
March 23, 2023
Bogus ChatGPT extension steals Facebook cookies
March 23, 2023
Several security issues were fixed in amanda.
March 23, 2023
Journalist hurt by exploding USB bomb drive
March 22, 2023
The hidden danger to zero trust: Excessive cloud permissions
March 22, 2023
Splunk adds new security and observability features
March 22, 2023
Observability will transform cloud security
March 22, 2023
The container bci/golang was updated. The following patches have been included in this update:
March 22, 2023
The container suse/389-ds was updated. The following patches have been included in this update:
March 22, 2023
The container suse/sles12sp5 was updated. The following patches have been included in this update:
March 22, 2023
The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:
March 22, 2023
India’s absurd infosec reporting rules get just 15 followers
March 22, 2023
Xi, Putin, declare intent to rule the world of AI, infosec
March 22, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 22, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 22, 2023
Twitter ends free SMS 2FA: Here’s how you can protect your account now
Twitter’s ditching of free text-message authentication doesn’t mean that you should forgo using 2FA. Instead, switch to another – and, indeed, better – 2FA option. The post Twitter ends free SMS 2FA: Here’s how you can protect your account now appeared first on WeLiveSecurity
March 21, 2023
Bringing observability to cloud security
March 21, 2023
USN-5904-1 caused a minor regression in SoX.
March 21, 2023
The container bci/nodejs was updated. The following patches have been included in this update:
March 21, 2023
Google suspends top Chinese shopping app Pinduoduo
March 21, 2023
TigerVNC could be made to expose sensitive information over the network.
March 21, 2023
Ferrari in a spin as crims steal a car-load of customer data
March 21, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 20, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 20, 2023
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 20, 2023
Several security issues were fixed in Vim.
March 20, 2023
Python could be made to bypass blocklisting methods if a specially crafted URL was provided.
March 20, 2023
One of the security fixes released as DLA 3315 introduced a regression in the processing WAV files with variable bitrate encoding. Updated sox packages are available to correct this issue.
March 20, 2023
Multiple security issues were discovered in Thunderbird, which could result in denial of service, the execution of arbitrary code or spoofing.
March 20, 2023
The newest upstream commit Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264.
March 20, 2023
Update to 1.15.4 * Fix CVE-2023-28100 and CVE-2023-28101
March 20, 2023
Update to 102.9.0 ; https://www.mozilla.org/en- US/security/advisories/mfsa2023-11/ ; https://www.thunderbird.net/en- US/thunderbird/102.9.0/releasenotes/
March 19, 2023
Denial of service using crafted input. (CVE-2022-40152) References: – https://bugs.mageia.org/show_bug.cgi?id=31665 – https://lists.suse.com/pipermail/sle-security-updates/2023-March/013995.html
March 18, 2023
Remote code execution on feed enrichment. If “Extract full content from HTML5 and Google AMP” has been enabled for one or more feed subscriptions it is possible for a an attacker to inject a script command that runs with user priveleges. (CVE-2023-1350)
March 18, 2023
An out-of-bounds write vulnerability exists in TPM2.0’s Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in
March 18, 2023
A potential buffer overflow exists in the file src/w_help.c at line 55. Specifically, the length of the string returned by getenv(“LANG”) may become very long and cause a buffer overflow while executing the sprintf() function. This vulnerability could potentially allow an attacker to execute arbitrary code or cause a denial-of-service condition.
March 18, 2023
Some mod_proxy configurations on Apache HTTP Server allow a HTTP request smuggling attack. Configurations are affected when mod_proxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern matches some portion of the user-supplied request-target (URL) data and is then re-inserted into the proxied
March 18, 2023
Banking turmoil opens opportunities for fraud – Week in security with Tony Anscombe
Scammers are looking to cash in on the chaos that has set in following the startling meltdowns of Silicon Valley Bank and Signature Bank and the crisis at Credit Suisse The post Banking turmoil opens opportunities for fraud – Week in security with Tony Anscombe appeared first on WeLiveSecurity
March 18, 2023
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
March 18, 2023
The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:
March 18, 2023
update to 111.0.5563.64. Fixes the following security issues: CVE-2023-0927 CVE-2023-0928 CVE-2023-0929 CVE-2023-0930 CVE-2023-0931 CVE-2023-0932 CVE-2023-0933 CVE-2023-0941 CVE-2023-1213 CVE-2023-1214 CVE-2023-1215 CVE-2023-1216 CVE-2023-1217 CVE-2023-1218 CVE-2023-1219 CVE-2023-1220 CVE-2023-1221 CVE-2023-1222 CVE-2023-1223 CVE-2023-1224 CVE-2023-1225
March 18, 2023
CVE-2022-37454: Fix buffer overflows in _sha3 module
March 18, 2023
Update to OWSLib-0.28.1, fixes CVE-2023-27476.
March 18, 2023
Security fix for CVE-2022-41717
March 18, 2023
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
March 17, 2023
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
March 17, 2023
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing.
March 17, 2023
SVB collapse is a scammer’s dream: Don’t get caught out
How cybercriminals can exploit Silicon Valley Bank’s downfall for their own ends and at your expense The post SVB collapse is a scammer’s dream: Don’t get caught out appeared first on WeLiveSecurity
March 17, 2023
One of the security fixes released as DSA 5356 introduced a regression in the processing of specific WAV files. Updated sox packages are available to correct this issue.
March 17, 2023
Multiple security issues were discovered in Thunderbird, which could result in denial of service, the execution of arbitrary code or spoofing.
March 17, 2023
The container bci/python was updated. The following patches have been included in this update:
March 17, 2023
security update
March 17, 2023
FTX inner circle helped itself to $3.2B, liquidators say
March 16, 2023