Menu

Category Archives: All

Everything

Cloud migration and the cyber skills shortage
Don’t get scammed when buying tickets online

With hot-ticket events firmly back on the agenda, scammers selling fake tickets online have also come out in force The post Don’t get scammed when buying tickets online appeared first on WeLiveSecurity

S3 Ep105: WONTFIX! The MS Office cryptofail that “isn’t a security flaw” [Audio + Text]
BlueBleed: Microsoft customer data leak claimed to be ‘one of the largest’ in years

Security fix for CVE-2022-38784

Microsoft “BlueBleed” data breach: customer details and email content exposed

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

Red Hat OpenShift security portfolio grows with new Red Hat Insights Vulnerability service

An update for java-17-openjdk is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Biden administration wants standard cyber security labelling for smart devices
Confidentiality in the cloud: the delicate bargain of trust
Health insurer’s infosec incident diagnosis goes from ‘take a chill pill’ to emergency ward
CISA warns of security holes in industrial Advantech, Hitachi kit
Cost of a health insurance security breach? NY watchdogs say it’s $4.5m
Smashing Security podcast #294: The Virgin trains swindler, cyber clowns, and AirTag election debacle
Verizon prepaid accounts hijacked by SIM swap crooks

security update

security update

Women in Cryptology – USPS celebrates WW2 codebreakers
Millennials, Gen Z actually suck at workplace security
So, the US, China, and Russia walk into an infosec conference
Tear in Microsoft Azure Service Fabric can give attackers full admin privileges
The infinite beauty of the hive mind

libXdmcp could be made to expose sensitive information.

Perl could be made to by pass signature verification.

An update that fixes one vulnerability is now available.

An update that contains security fixes can now be installed.

This update upgrades Firefox to version 102.3.0 ESR. * expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 firefox-102.3.0-7.el7_9.x86_64.rpm firefox-debuginfo-102.3.0-7.el7_9.x86_64.rpm firefox [More…]

This update upgrades Thunderbird to version 102.3.0. * expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 thunderbird-102.3.0-4.el7_9.x86_64.rpm thunderbird-debuginfo-102.3.0-4.el7_9.x86_64.rpm – [More…]

Germany stands down cyber boss over Russian ties
FBI: Looking for Biden’s student loan forgiveness? Watch out for these scams

security update

Build some flexibility into your cyber learning

security update

‘Fully undetectable’ Windows backdoor gets detected
NSA urges enterprises to watch China, Taiwan tensions
Zoom for Mac patches sneaky “spy-on-me” bug – update now!
Dangerous hole in Apache Commons Text – like Log4Shell all over again
5 steps to protect your school from cyberattacks

What can schools, which all too often make easy prey for cybercriminals, do to bolster their defenses and keep threats at bay? The post 5 steps to protect your school from cyberattacks appeared first on WeLiveSecurity

Putting on the Red Hat

It was found that the Node XML DOM library was vulnerable to prototype pollution. For Debian 10 buster, this problem has been fixed in version

Several security issues were fixed in FRR.

Public package repos expose thousands of API security tokens—and they’re active
Ransom Cartel linked to Colonial Pipeline attacker REvil, says infosec crew

An update that solves 26 vulnerabilities, contains two features and has 89 fixes is now available.

An update for nodejs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for the nodejs:14 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Ever considered using Confidential Computing to beef up cloud data protection?
Imagine surviving a wiper attack only for ransomware to scramble your restored files
Japanese giants to offer security-as-a-service for connected cars
Cops swoop after crooks use wireless keyfob hack to steal cars
Ex-WSJ reporter says he was framed in elaborate ‘hack-and-smear’ operation
Interpol busts global ‘Black Axe’ cyber-fraud suspects
Fashion brand SHEIN fined $1.9m for lying about data breach
Fine for Shein! Fashion site hit with $1.9 million bill after lying about data breach

This update fixes a wide range of vulnerabilities. A significant portion affects character set conversion. CVE-2016-10228

China-linked Budworm burrows hole in US legislature systems
Kolide, endpoint security for teams that want to meet SOC 2 compliance goals without sacrificing privacy
Choosing the Right Remote Access Solution for Your Linux Environment

An update that fixes 6 vulnerabilities is now available.

An update for .NET 6.0 is available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for .NET 6.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Phishing works so well crims won’t bother with deepfakes, says Sophos chap
Xi Jinping hails ‘improved cyber ecology’, says state to direct strategic tech research

security update

Multiple vulnerabilities have been discovered in Rust, the worst of which could result in denial of service.

Multiple vulnerabilities have been discovered in Tcpreplay, the worst of which could result in denial of service.

A vulnerability has been found in Deluge which could result in XSS.

Multiple vulnerabilities have been discovered in libvirt, the worst of which could result in denial of service.

Multiple vulnerabilities have been discovered in virglrenderer, the worst of which could result in remote code execution.

Multiple vulnerabilities have been discovered in Wireshark, the worst of which could result in denial of service.

Several security issues were fixed in the Linux kernel.

ESET research into POLONIUM’s arsenal – Week in security with Tony Anscombe

More than a dozen organizations operating in various verticals were attacked by the threat actor The post ESET research into POLONIUM’s arsenal – Week in security with Tony Anscombe appeared first on WeLiveSecurity

Infosec still (mostly) a boys club

Multiple security issues were found in Django, a Python web development framework, which could result in denial of service, SQL injection or cross-site scripting.

‘Baby Al Capone’ to pay $22m to SIM-swap crypto-heist victim

The package linux-zen before version 6.0.1.zen2-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and denial of service.

The package linux-lts before version 5.15.73-3 is vulnerable to multiple issues including arbitrary code execution, information disclosure and denial of service.

The package linux before version 6.0.1.arch2-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and denial of service.

The package linux-hardened before version 5.19.15.hardened2-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and denial of service.

security update

FYI: Microsoft Office 365 Message Encryption relies on insecure block cipher
Store credit card numbers in a debug log, lose millions of accounts. Cost? $1.9m
Serious Security: Microsoft Office 365 attacked over feeble encryption
Life in pursuit of answers: In the words of Ada Yonath

From a little girl financially helping her family in Jerusalem to a Nobel Prize laureate. That is the exceptional life of Ada Yonath in a nutshell. The post Life in pursuit of answers: In the words of Ada Yonath appeared first on WeLiveSecurity

Several security issues were fixed in gThumb.

An update that solves 8 vulnerabilities and has 12 fixes is now available.

An update that solves 8 vulnerabilities and has 11 fixes is now available.

An update that solves 5 vulnerabilities and has two fixes is now available.

An update that fixes one vulnerability is now available.

An update that solves 9 vulnerabilities, contains 12 features and has 38 fixes is now available.

Just how critical is data sovereignty?
LockBit 3.0 malware forced NHS tech supplier to shut down hosted sites
India set to extend deadline for absurd infosec reporting requirements