Menu

Category Archives: All

Everything

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

Why should I pay for that security option? Hijacking only happens to planes
UK, Australia, to build ‘network of liberty that will deter cyber attacks before they happen’
Japan’s Supreme Court rules cryptojacking scripts are not malware
Russia’s Putin out the idea of a broad cryptocurrency ban

security update

2FA Bypassed in $34.6M Crypto.com Heist
Crypto.com now says someone tried to drain $34m from hundreds of accounts
For those worried about Microsoft’s Pluton TPM chip: Lenovo won’t even switch it on by default in latest ThinkPads
Critical Cisco StarOS Bug Grants Root Access via Debug Mode
Understand Diffie-Hellman key exchange
Microsoft: Attackers Tried to Login to SolarWinds Serv-U Via Log4j Bug
S3 Ep66: Cybercrime busts, wormable Windows, and the crisis of featuritis [Podcast + Transcript]
UK mulls making MSPs subject to mandatory security standards where they provide critical infrastructure
Pervasive Apple Safari Bug Exposes Web-Browsing Data, Google IDs
Red Cross Begs Attackers Not to Leak Stolen Data for 515K People
Privacy is for paedophiles, UK government seems to be saying while spending £500k demonising online chat encryption
‘Now’ would be the right time to patch Ubuntu container hosts and ditch 21.04 thanks to heap buffer overflow bug
SEC Filing Reveals Fortune 500 Firm Targeted in Ransomware Attack
Jail for prolific romance fraudster who fleeced besotted lonely hearts

An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which

An update is now available for Red Hat build of Eclipse Vert.x. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For

Smashing Security podcast #258: Tesla remote hijacks and revolting YouTubers
Fileless Malware on Linux: Anatomy of an Attack>

The container suse/sle15 was updated. The following patches have been included in this update:

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

Overcoming vulnerabilities with live kernel patching in Red Hat Enterprise Linux 8.5
NortonLifeLock and Avast tie-up falls under UK competition regulator’s spotlight

AIDE could be made to crash or run programs as an administrator if it opened a specially crafted file.

Red Cross forced to shutter family reunion service following cyberattack and data leak
Being ‘Threat-Led’ is the answer. Your ISO certificate won’t save you from a breach!
McAfee and FireEye rename themselves ‘Trellix’
Singapore gives banks two-week deadline to fix SMS security

The onset of COVID-19 accelerated growth of the digital nomad. No longer just for bloggers and influencers, the global workforce is increasingly becoming more highly connected and widely dispersed. As workforces become more globally linked, businesses large and small need to protect themselves from evolving threats. Employees represent the first line of defense from malicious […]

Need to prioritize security bug patches? Don’t forget to scan Twitter as well as use CVSS scores
Destructive Wiper Targeting Ukraine Aimed at Eroding Trust, Experts Say
Sniff those Ukrainian emails a little more carefully, advises Uncle Sam in wake of Belarusian digital vandalism
Faker NPM package back on track after malicious coding incident
Box 2FA Bypass Opens User Accounts to Attack
Vulnerabilities and censorship tools among hot new features in Beijing’s Olympics app
DoNot Go! Do not respawn!

ESET researchers take a deep look into recent attacks carried out by Donot Team throughout 2020 and 2021, targeting government and military entities in several South Asian countries The post DoNot Go! Do not respawn! appeared first on WeLiveSecurity

Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks
US mergers doubled in 2021 so FTC and DoJ seek new guidelines to stop illegal ones

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite. 2. Relevant releases/architectures: Red Hat Satellite 6.10 – noarch, x86_64

Red Hat OpenShift Container Platform release 4.7.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7.

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Cloned Dept. of Labor Site Hawks Fake Government Contracts

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

Nine-year-old kids are launching DDoS attacks against schools
Will 2022 Be the Year of the Software Bill of Materials?
Crypto.com acknowledges ‘unauthorized activity’ on servers, maintains no funds have been lost
The Log4j Vulnerability Puts Pressure on the Security World
Cybercriminals Actively Target VMware vSphere with Cryptominers
Suse open sources NeuVector container security platform
Serious Security: Apple Safari leaks private data via database API – what you need to know
‘White Rabbit’ Ransomware May Be FIN8’s Latest Tool
International police shut down 15 server infrastructures as part of VPNLab.net’s takedown
Social media in the workplace: Cybersecurity dos and don’ts for employees

Do you often take to social media to broadcast details about your job, employer or coworkers? Think before you share – less may be more. The post Social media in the workplace: Cybersecurity dos and don’ts for employees appeared first on WeLiveSecurity

Critical ManageEngine Desktop Server Bug Opens Orgs to Malware
More contractor pain: Parasol’s sister firms, SJD Accountancy and Nixon Williams, confirm cyberattack
Organizations Face a ‘Losing Battle’ Against Vulnerabilities
Singapore monetary authority threatens action on bank over widespread phishing scam

httpd: mod_lua: Possible buffer overflow when parsing multipart content (CVE-2021-44790) * httpd: mod_session: Heap overflow via a crafted SessionHeader value (CVE-2021-26691) * httpd: NULL pointer dereference via malformed requests (CVE-2021-34798) * httpd: Out-of-bounds write in ap_escape_quotes() via malicious input (CVE-2021-39275) For more details about the security issue(s), includin [More…]

Why global DDoS protection is essential for Anycast networks

This kernel-linus update is based on upstream 5.15.15 and fixes atleast the following security issues: A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A

This kernel update is based on upstream 5.15.15 and fixes atleast the following security issues: A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A

Microsoft patches the patch that broke VPNs, Hyper-V, and left servers in boot loops

Upstream details at : https://access.redhat.com/errata/RHSA-2022:0162

An update that fixes two vulnerabilities is now available.

An update that fixes one vulnerability is now available.

security update

security update

Successfully recovering from disruption or disaster is one of an IT administrator’s most critical duties. Whether it’s restoring servers or rescuing lost data, failure to complete a successful recovery can spell doom for a company. But mastering the recovery process happens before disaster strikes. This is especially true for large datasets. Our breakdown is here […]

Bug in WebKit’s IndexedDB implementation makes Safari 15 leak Google account info… and more

New expat packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.

Ukraine blames Belarus for PC-wiping ‘ransomware’ that has no recovery method and nukes target boxen
Romance scammer who targeted 670 women gets 28 months in jail
Pulling Back the Curtain: About LinuxSecurity.com>
Umbrella company Parasol Group confirms cyber attack as ‘root cause’ of prolonged network outage

An update that fixes 24 vulnerabilities is now available.

Several security issues were fixed in Pillow.

An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

A bad day in the office for the REvil ransomware gang, as Russia arrests 14 members
Data-wiping malware hitting Ukrainian computers displays fake ransom demand

Update to 1.12.3 Fixes these two security issues: * CVE-2021-43860 or https://github.com/flatpak/flatpak/security/advisories/GHSA-qpjc-vq3c-572j * CVE-2022-21682 or https://github.com/flatpak/flatpak/security/advisories/GHSA-8ch7-5j3h-g4fx Full release notes: https://github.com/flatpak/flatpak/releases/tag/1.12.3

It was discovered that sphinxsearch, a fast standalone full-text SQL search engine, could allow arbitrary files to be read by abusing a configuration option.

North Korea pulled in $400m in cryptocurrency heists last year – report

Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For Debian 9 stretch, these problems have been fixed in version

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure, denial of service or spoofing.

security update

security update

Security fix for CVE-2021-4122

– kombu 5.2.3: https://github.com/celery/kombu/blob/master/Changelog.rst#523 – celery 5.2.3: https://github.com/celery/celery/blob/master/Changelog.rst#523

– kombu 5.2.3: https://github.com/celery/kombu/blob/master/Changelog.rst#523 – celery 5.2.3: https://github.com/celery/celery/blob/master/Changelog.rst#523

Update to 0.9.6, see https://github.com/uriparser/uriparser/blob/uriparser-0.9.6/ChangeLog for details.

Network Intrusion Detection Using Snort>