Menu

Category Archives: All

Everything

security update

LockBit suspect’s arrest sheds more light on ‘trustworthy’ gang
Android GravityRAT goes after WhatsApp backups

ESET researchers analyzed an updated version of Android GravityRAT spyware that steals WhatsApp backup files and can receive commands to delete files The post Android GravityRAT goes after WhatsApp backups appeared first on WeLiveSecurity

USN-6156-1 introduced a regression in SSSD.

An update that fixes four vulnerabilities is now available.

Capita faces first legal Letter of Claim over mega breach

Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, information disclosure or bypass of sandbox restrictions.

The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:

The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:

The container bci/python was updated. The following patches have been included in this update:

Microsoft: Russia sent its B team to wipe Ukrainian hard drives
EU boss Breton: There’s no Huawei that Chinese comms kit is safe to use in Europe
US government hit by Russia’s Clop in MOVEit mass attack
MOVEit mayhem 3: “Disable HTTP and HTTPS traffic immediately”
Chinese spies blamed for data-harvesting raids on Barracuda email gateways
S3 Ep139: Are password rules like running through rain?

The Migration Toolkit for Containers (MTC) 1.7.10 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

New packages for Red Hat Ceph Storage 6.1 are now available on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for jenkins and jenkins-2-plugins is now available for OpenShift Developer Tools and Services for OCP 4.13. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Red Hat compliance certifications and attestations achieved

Requests could be made to expose sensitive information over the network.

The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2023-28204

Click-jacking certificate exceptions through rendering lag (CVE-2023-34414) Memory safety bugs fixed in Thunderbird 102.12 (CVE-2023-34416) References: – https://bugs.mageia.org/show_bug.cgi?id=31996

North Korea created very phishy evil twin of Naver, South Korea’s top portal

security update

Decision to hold women-in-cyber events in abortion-banning states sparks outcry
Smashing Security podcast #326: Right Royal security threats and MOVEit mayhem

security update

security update

LockBit victims in the US alone paid over $90m in ransoms since 2020
Cyber insurance: What is it and does my company need it?

While not a ‘get out of jail free card’ for your business, cyber insurance can help insulate it from the financial impact of a cyber-incident The post Cyber insurance: What is it and does my company need it? appeared first on WeLiveSecurity

Lethal weather
Talking cybersecurity on “Learning Curve”
Capita wins £50M fraud reporting contract with City of London cops

An update for .NET 7.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for python3.11 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for nodejs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions.

An update for .NET 7.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.

Bringing security to account: why identity must be unified
Florida man insists he didn’t violate the law by keeping Top Secret docs

security update

Patch Tuesday fixes 4 critical RCE bugs, and a bunch of Office holes
June Patch Tuesday: VMware vuln under attack by Chinese spies, Microsoft kinda meh
Last of the Gozi 3 sentenced over Windows info-stealing malware ops
Gozi banking malware “IT chief” finally jailed after more than 10 years
The commonality of criminal intrusion
These Microsoft Office security signatures are ‘practically worthless’
As MOVEit hackers’ deadline approaches, Ofcom reveals it is amongst victims
Malicious hackers are weaponizing generative AI
Russia-Ukraine war sending shockwaves into cyber-ecosystem

The container bci/bci-init was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container bci/ruby was updated. The following patches have been included in this update:

The container bci/python was updated. The following patches have been included in this update:

The container bci/python was updated. The following patches have been included in this update:

The container bci/python was updated. The following patches have been included in this update:

US charges two men with Mt. Gox heist, the world’s largest cryptocurrency hack
UK telco watchdog Ofcom, Minnesota Dept of Ed named as latest MOVEit victims
China’s cyber now aimed at infrastructure, warns CISA boss
India probes medical info ‘leak’ to Telegram
Unsealed: Charges against Russians blamed for Mt Gox crypto-exchange collapse
Fortinet squashes hijack-my-VPN bug in FortiOS gear

security update

Posing as journalists, Pink Drainer pilfers $3.3M in crypto
Surprise! Staff don’t like receiving phishing tests from their firms that pose as salary increases
Microsoft stole our stolen dark web data, says security outfit
History revisited: US DOJ unseals Mt. Gox cybercrime charges

SSSD could allow unintended access to network services.

Requests could be made to expose sensitive information over the network.

Lantum S3 bucket leak is prescription for chaos for thousands of UK doctors

Several security issues were fixed in Vim.

Hold it – more vulnerabilities found in MOVEit file transfer software

Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For Debian 10 buster, these problems have been fixed in version

The container sles-15-sp4-chost-byos-v20230606-arm64 was updated. The following patches have been included in this update:

The container suse-sles-15-sp4-chost-byos-v20230606-x86_64-gen2 was updated. The following patches have been included in this update:

Introduction to confidential virtual machines
Confidential containers on Azure with OpenShift: setup guide

update to 114.0.5735.106. Fixes the following security issue: CVE-2023-3709

Update to 102.12.0 ; https://www.thunderbird.net/en- US/thunderbird/102.12.0/releasenotes/ ; https://www.thunderbird.net/en- US/thunderbird/102.11.2/releasenotes/ ; https://www.thunderbird.net/en- US/thunderbird/102.11.1/releasenotes/ ; https://www.thunderbird.net/en- US/thunderbird/102.11.0/releasenotes/

Update to sympa 6.2.72 Fixes CVE-2021-32850 For details, see: https://github.com/sympa-community/sympa/releases/tag/6.2.72

Update to 1.14.8

Update to sympa 6.2.72 Fixes CVE-2021-32850 For details, see: https://github.com/sympa-community/sympa/releases/tag/6.2.72

Security fix for CVE-2022-39335

An update that fixes 14 vulnerabilities is now available.

python: urllib.parse url blocklisting bypass (CVE-2023-24329) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 python3-3.6.8-19.el7_9.x86_64.rpm python3-debuginfo-3.6.8-19.el7_9.i686.rpm python3-debuginfo-3.6.8-19.el7_9.x86_64.rpm python3-libs-3.6.8-19.el7_9.i686.rpm [More…]

python: urllib.parse url blocklisting bypass (CVE-2023-24329) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 python-2.7.5-93.el7_9.x86_64.rpm python-debuginfo-2.7.5-93.el7_9.i686.rpm python-debuginfo-2.7.5-93.el7_9.x86_64.rpm python-libs-2.7.5-93.el7_9.i686.rpm [More…]

Mixing cybercrime and cyberespionage – Week in security with Tony Anscombe

A crimeware group that usually targets individuals and SMBs in North America and Europe adds cyberespionage to its activities The post Mixing cybercrime and cyberespionage – Week in security with Tony Anscombe appeared first on WeLiveSecurity

**MariaDB 10.5.20** Release notes: https://mariadb.com/kb/en/mariadb-10-5-20-release-notes/

An update for openshift-gitops-kam is now available for Red Hat OpenShift GitOps 1.9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Online muggers make serious moves on unpatched Microsoft bugs
More MOVEit mitigations: new patches published for further protection

Sebastian Krause discovered that manipulated inline images can force PyPDF2, a pure Python PDF library, into an infinite loop, if a maliciously crafted PDF file is processed.

FBI: FISA Section 702 ‘absolutely critical’ to spy on, err, protect Americans

New packages of am-utils are available for all Red Hat Linux platforms. This version includes an important security fix for a buffer overrun problem which is being actively exploited on the Internet.

Ransomware scum hit Japanese pharma giant Eisai Group
Thoughts on scheduled password changes (don’t call them rotations!)
Asylum Ambuscade: crimeware or cyberespionage?

A curious case of a threat actor at the border between crimeware and cyberespionage The post Asylum Ambuscade: crimeware or cyberespionage? appeared first on WeLiveSecurity

Seven steps for using zero trust to protect your multicloud estate