October 12, 2022
Patch your iPhone now against mystery Mail crash bug
Several security issues were fixed in AdvanceCOMP.
October 12, 2022
A command injection vulnerability was found in Rexical, a lexical scanner generator for the Ruby programming language. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user
October 12, 2022
Multiple vulnerabilities were discovered in Nokogiri, an HTML/XML/SAX/Reader parser for the Ruby programming language, leading to command injection, XML external entity injection (XXE), and denial-of-service (DoS).
October 12, 2022
Red Hat AMQ Broker 7.10.1 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 12, 2022
An update for expat is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 12, 2022
How Wi-Fi spy drones snooped on financial firm
October 12, 2022
“Stealing the crown jewels” – see me talk at UK Cyber Week
October 11, 2022
Steam account stolen? Here’s how to get it back
Has your Steam account been hacked? Here are the signs to look for and what you can do to get your account back. The post Steam account stolen? Here’s how to get it back appeared first on WeLiveSecurity
October 11, 2022
Move over Patch Tuesday – it’s Ada Lovelace Day!
October 11, 2022
China could use Digital Yuan to swerve Russia-style sanctions
October 11, 2022
An update that fixes one vulnerability is now available.
October 11, 2022
An update that fixes 6 vulnerabilities is now available.
October 11, 2022
An update that fixes one vulnerability is now available.
October 11, 2022
An update that fixes one vulnerability is now available.
October 11, 2022
The Most Important Things you Can do to Quickly Secure Ubuntu Linux
October 11, 2022
An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 11, 2022
An update is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 11, 2022
Cloud security is the new battle zone
October 11, 2022
Can IAM help save on cyber insurance?
October 11, 2022
Optus data breach prompts pincer movement of twin regulatory probes
October 11, 2022
Mystery iPhone update patches against iOS 16 mail crash-attack
October 11, 2022
Intel Alder Lake BIOS code leak may contain vital secrets
October 10, 2022
Red Hat backs CNCF project, spills TEE support over Kubernetes
October 10, 2022
Evgeny Vereshchagin discovered multiple vulnerabilities in D-Bus, a simple interprocess messaging system, which may result in denial of service by an authenticated user.
October 10, 2022
Several security vulnerabilities were discovered in WordPress, a popular content management framework. Server Side Request Forgery and cross-site scripting (XSS) attacks may facilitate the bypass of access controls or the injection of client-side scripts.
October 10, 2022
Singtel confirms digital burglary at Dialog subsidiary
October 10, 2022
Criminal multitool LilithBot arrives on malware-as-a-service scene
October 10, 2022
How do you protect your online systems? Cultivate an insider threat
October 10, 2022
A security issue was fixed in nginx’s lua module.
October 10, 2022
Mastercard moves to protect ‘risky and frisky’ crypto transactions
October 10, 2022
Security fix for CVE-2022-38784
October 9, 2022
There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the ‘err_msg’ of ‘sqlite3_exec’ is not releasing after use, while libxml2 emphasizes that the caller needs to release it. (CVE-2021-42523)
October 8, 2022
A syntactically invalid type signature with incorrectly nested parentheses and curly brackets would cause an assertion failure in debug builds. Similar messages could potentially result in a crash or incorrect message processing in a production build, although we are not aware of a practical example. (CVE-2022-42010)
October 8, 2022
In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup. (CVE-2022-41322)
October 8, 2022
libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup(). (CVE-2020-29260) References: – https://bugs.mageia.org/show_bug.cgi?id=30917
October 8, 2022
Core Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) Fixed bug GH-9361 (Segmentation fault on script exit #9379). Fixed bug GH-9407 (LSP error in eval’d code refers to wrong class for static type).
October 8, 2022
Non-Responsive Delegation Attack. (CVE-2022-3204) Improves performance when under load, by cutting promiscuous queries for nameserver discovery and limiting the number of times a delegation point can look in the cache for missing records.
October 8, 2022
Key takeaways from ESET Threat Report T2 2022 – Week in security with Tony Anscombe
A look back on the key trends and developments that shaped the cyberthreat landscape from May to August of this year The post Key takeaways from ESET Threat Report T2 2022 – Week in security with Tony Anscombe appeared first on WeLiveSecurity
October 8, 2022
Update to the September 2022 update release of .NET Core 3.1 Release Notes: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.29/3.1.29.md This includes a fix for CVE-2022-38013
October 8, 2022
Security fix for CVE-2022-21797
October 8, 2022
Update to the September 2022 update release of .NET Core 3.1 Release Notes: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.29/3.1.29.md This includes a fix for CVE-2022-38013
October 8, 2022
Open source incident response solutions
October 8, 2022
What is the Confidential Containers project?
October 8, 2022
Biden’s Privacy Shield 2.0 order may not satisfy Europe
October 8, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
October 8, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
October 8, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
October 8, 2022
security update
October 7, 2022
security update
October 7, 2022
security update
October 7, 2022
Binance robbed of $600 million in crypto-tokens
October 7, 2022
The need to change cybersecurity for the next generation
Healthy habits that are instilled and nurtured at an early age bring lifelong benefits – the same applies to good cybersecurity habits The post The need to change cybersecurity for the next generation appeared first on WeLiveSecurity
October 7, 2022
ESET Threat Report T2 2022
A view of the T2 2022 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts The post ESET Threat Report T2 2022 appeared first on WeLiveSecurity
October 7, 2022
WhatsApp goes after Chinese password scammers via US court
October 7, 2022
Security fix for CVE-2022-38784
October 7, 2022
Some stability fixes. —- Update to 2.53.14 Note that besides the ordinary builds for the current Fedora and EPEL branches, there is an additional distro- independed build available at https://buc.fedorapeople.org/seamonkey . So if you have friends who use other Linux distro, but that distro does not provide SeaMonkey yet, you can recommend it for them.
October 7, 2022
Rebase to 2.4.9
October 7, 2022
**Version 3.4.3** (2022-09-28) * Fix a security issue on filesystem loader (possibility to load a template outside a configured directory)
October 7, 2022
**Version 2.15.3** (2022-09-28) * Fix a security issue on filesystem loader (possibility to load a template outside a configured directory)
October 7, 2022
Updated to version 0.10.2 with CVE fix.
October 7, 2022
Hardening data security in the cloud
October 7, 2022
Lloyd’s of London reboots after dodgy network activity detected
October 7, 2022
expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 expat-2.1.0-15.el7_9.i686.rpm expat-2.1.0-15.el7_9.x86_64.rpm expat-debuginfo-2.1.0-15.el7_9.i686.rpm expat-debuginfo-2.1.0-15.el7_9.x86_ [More…]
October 6, 2022
squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 squid-3.5.20-17.el7_9.8.x86_64.rpm squid-debuginfo-3.5.20-17.el7_9.8.x86_64.rpm squid-migration-script-3.5.20-17.el7_9.8.x86_64.rpm squid-sysvinit [More…]
October 6, 2022
An update that fixes two vulnerabilities is now available.
October 6, 2022
An update that fixes two vulnerabilities is now available.
October 6, 2022
An update that fixes one vulnerability is now available.
October 6, 2022
An update that fixes three vulnerabilities is now available.
October 6, 2022
Smashing Security podcast #292: Trussterflucks and eBay stalking
October 6, 2022
Learning from real life situations
October 6, 2022
Former Uber CSO convicted of covering up megabreach back in 2016
October 6, 2022
NetWalker ransomware scumbag jailed for 20 years
October 5, 2022
security update
October 5, 2022
security update
October 5, 2022
security update
October 5, 2022