February 3, 2022
KP Snacks Left with Crumbs After Ransomware Attack
February 2, 2022
Threat actors are becoming more sophisticated, agile and relentless in their pursuit of stealing personal information for financial gain. Rapid and evolving shifts in the threat landscape require the knowledge and solutions to prepare and prevent threats that could spell disaster for organizations’ reputations and operations. Organizations of all sizes remain at risk. Small to […]
February 2, 2022
Supply-Chain Security Is Not a Problem…It’s a Predicament
February 2, 2022
Elementor WordPress plugin has a gaping security hole – update now
February 2, 2022
Charming Kitten Sharpens Its Claws with PowerShell Backdoor
February 2, 2022
A security update is now available for Red Hat Single Sign-On 7.5 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 2, 2022
A new image is available for Red Hat Single Sign-On 7.4.10 on OpenJDK, running on OpenShift Container Platform 3.10 and 3.11, and 4.3. 2. Description: Red Hat Single Sign-On is an integrated sign-on solution, available as a
February 2, 2022
A new image is available for Red Hat Single Sign-On 7.4.10 on OpenJ9, running on OpenShift Container Platform 3.10 and 3.11, and 4.3. 2. Description: Red Hat Single Sign-On is an integrated sign-on solution, available as a
February 2, 2022
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 2, 2022
A security update is now available for Red Hat Single Sign-On 7.4 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 2, 2022
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 2, 2022
What are real organisations doing with zero trust?
February 2, 2022
FBI: Use a Burner Phone at the Olympics
February 1, 2022
The Account Takeover Cat-and-Mouse Game
February 1, 2022
security update
February 1, 2022
security update
February 1, 2022
Samba ‘Fruit’ Bug Allows RCE, Full Root User Access
February 1, 2022
How to tell if your phone has been hacked
Think your smartphone has been compromised by malware? Here’s how to spot the signs of a hacked phone and how to remove the hacker from your phone. The post How to tell if your phone has been hacked appeared first on WeLiveSecurity
February 1, 2022
Cyberattacker hits German service station petrol terminal provider
February 1, 2022
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 1, 2022
An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 1, 2022
This kernel-linus update is based on upstream 5.15.18 and fixes atleast the following security issues: A random memory access flaw was found in the Linux kernels GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU.
February 1, 2022
This kernel update is based on upstream 5.15.18 and fixes atleast the following security issues: A random memory access flaw was found in the Linux kernels GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU.
February 1, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
February 1, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
February 1, 2022
Public Exploit Released for Windows 10 Bug
January 31, 2022
Apple Pays $100.5K Bug Bounty for Mac Webcam Hack
January 31, 2022
Website operator fined for using Google Fonts “the cloudy way”
January 31, 2022
NSO Group Pegasus Spyware Aims at Finnish Diplomats
January 31, 2022
Qubit pleads with hacker to return $80 million of stolen funds
January 31, 2022
Multiple security vulnerabilities have been discovered in Apache Log4j 1.2, a Java logging framework, when it is configured to use JMSSink, JDBCAppender, JMSAppender or Apache Chainsaw which could be exploited for remote code execution.
January 31, 2022
ldns could be made to expose sensitive information if it received a specially crafted input.
January 31, 2022
An update for the nginx:1.20 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 31, 2022
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.
January 31, 2022
– Update cargo-insta to version 1.11.0. – Update the insta crate to version 1.11.0. – Update the ron crate to version 0.7.0. – Introduce a compat package for ron versions 0.6.x. – Update the similar-asserts crate to version 1.2.0. – Update the similar crate to version 2.1.0.
January 30, 2022
– Update cargo-insta to version 1.11.0. – Update the insta crate to version 1.11.0. – Update the ron crate to version 0.7.0. – Introduce a compat package for ron versions 0.6.x. – Update the similar-asserts crate to version 1.2.0. – Update the similar crate to version 2.1.0.
January 30, 2022
A security bug has been discovered and fixed in the userhelper program.
January 30, 2022
It was discovered that missing input sanitising in python-nbxmpp, a Jabber/XMPP Python library, could result in denial of service in clients based on it (such as Gajim).
January 30, 2022
The update for prosody released as DSA 5047 introduced a memory leak. Updated prosody packages are now available to correct this issue. For the oldstable distribution (buster), this problem has been fixed
January 30, 2022
Several vulnerabilities have been discovered in libraw that may lead to the execution of arbitrary code, denial of service, or information leaks.
January 30, 2022
Security fixes for CVE-2022-0351, CVE-2022-0359 —- Security fixes for CVE-2022-0213, CVE-2022-0261
January 29, 2022
Fix for CVE-2021-32765
January 29, 2022
The container suse-sles-15-sp3-chost-byos-v20220126-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
January 29, 2022
The container sles-15-sp1-chost-byos-v20220127 was updated. The following patches have been included in this update:
January 29, 2022
The container suse-sles-15-sp1-chost-byos-v20220127-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
January 29, 2022
The container suse-sles-15-sp1-chost-byos-v20220127-gen2 was updated. The following patches have been included in this update:
January 29, 2022
update to version 2.10 and enable OCV CVE-2022-23303
January 29, 2022
# New in release OpenJDK 17.0.2 (2022-01-18): Live versions of these release notes can be found at: * https://bitly.com/openjdk1702 * https://builds.shipilev.net/backports-monitor/release-notes-17.0.2.txt ## Security fixes – JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if zip has dir named “.” inside – JDK-8264934, CVE-2022-21248: Enhance cross VM
January 29, 2022
Lazarus APT Uses Windows Update to Spew Malware
January 28, 2022
Zerodium Spikes Payout for Zero-Click Outlook Zero-Days
January 28, 2022
Beyond the tick box: What to consider before agreeing to a privacy policy
The trade-off between using a free service and giving up our personal data becomes much less palatable when we think about the wider ramifications of the collection and use of our personal data The post Beyond the tick box: What to consider before agreeing to a privacy policy appeared first on WeLiveSecurity
January 28, 2022
Happy Data Privacy Day – and we really do mean “happy” :-)
January 28, 2022
Conti, DeadBolt Ransomwares Target Delta, QNAP
January 28, 2022
Real-Time Alerting with Snort>
January 28, 2022
OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934) (CVE-2022-21248) * OpenJDK: Insufficient URI checks in the XSLT TransformerImpl (JAXP, 8270492) (CVE-2022-21282) * OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813) (CVE-2022-21283) * OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (L [More…]
January 28, 2022
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:
January 28, 2022
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:
January 28, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
January 28, 2022
The container sles-15-sp3-chost-byos-v20220126 was updated. The following patches have been included in this update:
January 28, 2022
The container suse-sles-15-sp3-chost-byos-v20220126-gen2 was updated. The following patches have been included in this update:
January 28, 2022
Apple fixes Safari data leak (and patches a zero-day!) – update now
January 27, 2022
security update
January 27, 2022
Dark Overlord collaborator imprisoned for trading stolen identities
January 27, 2022
BotenaGo Botnet Code Leaked to GitHub, Impacting Millions of Devices
January 27, 2022
Every breath you take, every move you make: Do fitness trackers pose privacy risks?
Should you beware of wearables? Here’s what you should know about the potential security and privacy risks of your smartwatch or fitness tracker. The post Every breath you take, every move you make: Do fitness trackers pose privacy risks? appeared first on WeLiveSecurity
January 27, 2022
Shipment-Delivery Scams Become the Favored Way to Spread Malware
January 27, 2022
Apple patches Safari data leak (oh, and a zero-day) – patch now!
January 27, 2022
Several security issues were fixed in shadow.
January 27, 2022
Mac webcam hijack flaw wins man $100,500 from Apple
January 27, 2022
Indonesia bars financial institutions from offering crypto services
January 27, 2022
Red Hat OpenShift Container Platform release 4.6.54 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.6.
January 27, 2022
An update for httpd24-httpd is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 27, 2022