Menu

Monthly Archives: July 2023

The container bci/ruby was updated. The following patches have been included in this update:

Stolen Microsoft key may have opened up a lot more than US govt email inboxes
VirusTotal: We’re sorry someone fat-fingered and exposed 5,600 users

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.10.14 on Red Hat Enterprise Linux 8 from Red Hat Container Registry. Red Hat Product Security has rated this update as having a security impact

Lawyer sees almost 1,000 complainants sign up to Capita breach class action

The container suse/sle15 was updated. The following patches have been included in this update:

The container bci/python was updated. The following patches have been included in this update:

The container bci/python was updated. The following patches have been included in this update:

The container bci/php was updated. The following patches have been included in this update:

The container bci/php-fpm was updated. The following patches have been included in this update:

MOVEit body count closes in on 400 orgs, 20M+ individuals
RIP Kevin Mitnick: Former most-wanted hacker dies at 59
Child identity theft: how do I keep my kids’ personal data safe?

Why is kids’ personal information in high demand, how do criminals steal it, and what can parents do to help prevent child identity theft? The post Child identity theft: how do I keep my kids’ personal data safe? appeared first on WeLiveSecurity

Estée Lauder – internal data stolen after being hit by two separate ransomware attacks
S3 Ep144: When threat hunting goes down a rabbit hole

An update for java-11-openjdk is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for java-17-openjdk is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Under CISA pressure collaboration, Microsoft makes cloud security logs available for free
Tech support scammers trick victims into old-school offline money transfer
Ukraine busts bot farm spreading Russian infowar propaganda and fraud

security update

Smashing Security podcast #331: Boris Johnson’s WhatsApps, and sextorting party girls
Tech support scammers go analog, ask victims to mail bundles of cash
JFrog Curation blocks malicious open source software packages

Several security issues were fixed in curl.

Several security issues were fixed in ConnMan.

It was discovered that there was a potential denial of service attack in Django, the popular Python-based web development framework. EmailValidator and URLValidator were subject to potential regular

Building security certifications into your image builder blueprint
INTERSECT ’23: Network Security Summit unveils cutting-edge strategies to safeguard digital assets

It was discovered that there was a potential denial of service (DoS) in bind9, the popular Domain Name Server (DNS) server. Shoham Danino, Anat Bremler-Barr, Yehuda Afek and Yuval Shavitt

Red Hat OpenShift Container Platform release 4.11.45 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11.

VolSync v0.7.3 enhancements and security fixes Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

US adds Euro spyware makers to export naughty list
Google Virus Total leaks list of spooky email addresses

security update

Microsoft hit by Storm season – a tale of two semi-zero days

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Recycling giant TOMRA pulls systems offline following ‘extensive cyberattack’
What You Need to Know about Open-Source Software Supply Chain Security

The container bci/golang was updated. The following patches have been included in this update:

The container bci/golang was updated. The following patches have been included in this update:

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for kpatch-patch-4_18_0-193_100_1, kpatch-patch-4_18_0-193_105_1, kpatch-patch-4_18_0-193_95_1, and kpatch-patch-4_18_0-193_98_1 is now available for Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.

Protect yourself from ticketing scams ahead of the Premier League Summer Series USA Tour

There is a significant secondary marketplace where tickets can sell for several times their original value, opening the opportunity for scammers and fraud The post Protect yourself from ticketing scams ahead of the Premier League Summer Series USA Tour appeared first on WeLiveSecurity

Cybercrime – big in Asia Pacific
Quick: Manually patch this Zimbra bug that’s under attack

security update

security update

Beijing wants to make the Great Firewall of China even greater

CUPS could be made to crash or expose sensitive information over the network.

Boris Johnson pleads ignorance, which just might work

Riccardo Bonafede discovered that the Kanboard project management software was susceptible to SQL injection. For the stable distribution (bookworm), this problem has been fixed in

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

A bug has been found in OpenSSH’s buffer handling where a buffer could be marked as grown when the actual reallocation failed.

Updated Kerberos packages for Red Hat Linux 9 fix a number of vulnerabilities found in MIT Kerberos.

OpenSSL has been found to vulnerable to a timing-based attack on CBC ciphersuites used in SSL and TLS.

Several vulnerabilities have been discovered concerning bind 8.

Errors in smrsh’s handling of command arguments with “||” or spaces may allow the execution of commands outside of those in its target directory.

rebase to bugfix release 10.01.2 (rhbz#2182090)

security update

Several security issues were fixed in the Linux kernel.

Key findings from ESET Threat Report H1 2023 – Week in security with Tony Anscombe

Here’s how cybercriminals have adjusted their tactics in response to Microsoft’s stricter security policies and other interesting findings from ESET’s new Threat Report The post Key findings from ESET Threat Report H1 2023 – Week in security with Tony Anscombe appeared first on WeLiveSecurity

Infosec watchers: TeamTNT crew may blast holes in Azure, Google Cloud users
Golang vulnerability checker flags Go vulnerabilities

Quadratic runtime with malformed PDFs missing xref marker has been fixed in PyPDF2, a pure Python PDF library. For Debian 10 buster, this problem has been fixed in version

Multiple security issues were discovered in the GPAC multimedia framework which could result in denial of service or the execution of arbitrary code.

Former contractor accused of remotely accessing town’s water treatment facility
Zimbra Collaboration Suite warning: Patch this 0-day right now (by hand)!
The danger within: 5 steps you can take to combat insider threats

Some threats may be closer than you think. Are security risks that originate from your own trusted employees on your radar? The post The danger within: 5 steps you can take to combat insider threats appeared first on WeLiveSecurity

Red Hat: Building a quantum-ready world
OpenShift sandboxed containers on-prem: Going nested without nested

Issues were discovered in Lemonldap::NG, an OpenID-Connect, CAS and SAML compatible Web-SSO system, which could lead to impersonation of users with a second factor authentication.

The container bci/ruby was updated. The following patches have been included in this update:

The container bci/python was updated. The following patches have been included in this update:

The container bci/python was updated. The following patches have been included in this update:

The container bci/openjdk-devel was updated. The following patches have been included in this update:

The container bci/openjdk-devel was updated. The following patches have been included in this update:

British teens accused of hacks against Uber and Rockstar Games’s Grand Theft Auto 6
Smashing Security podcast #330: Deepfake Martin Lewis, and a deadly jog in the park
Cybersecurity pro charged with $9 million cryptocurrency exchange hack
Celsius feels the heat: Ex-CEO arrested, watchdogs line up to sue bankrupt crypto biz
S3 Ep143: Supercookie surveillance shenanigans

An update for firefox is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.

An update for thunderbird is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for .NET 7.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Microsoft patches four zero-days, finally takes action against crimeware kernel drivers
Microsoft whips up unrest after revealing Azure AD name change
ESET Threat Report H1 2023

A view of the H1 2023 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts The post ESET Threat Report H1 2023 appeared first on WeLiveSecurity

Rogue IT security worker who impersonated ransomware gang is sentenced to jail

An update for the python38:3.8 and python38-devel:3.8 modules is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.

An update for bind9.16 is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for the python38:3.8 and python38-devel:3.8 modules is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,