June 2, 2021
Banking Attacks Surge Along with Post-COVID Economy
REvil Ransomware Ground Down JBS: Sources
June 2, 2021
An update for glib2 is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 2, 2021
Amazon Sidewalk Poised to Sweep You Into Its Mesh
June 2, 2021
An update for openvswitch is now available for Red Hat OpenStack Platform 10 (Newton). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 2, 2021
This advisory resolves CVE issues filed against XP1 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP1 code base. NOTE: This advisory is informational only. There are no code changes
June 2, 2021
Dnsmasq could be exposed to cache poisoning.
June 2, 2021
Several security issues were fixed in Django.
June 2, 2021
Network-Bound Disk Encryption improvements in RHEL 8
June 2, 2021
Applications using Lasso could be made to allow unintended access.
June 1, 2021
Cyber-Insurance Fuels Ransomware Payment Surge
June 1, 2021
In a previous post, we talked a bit about what pen testing is and how to use the organizations that provide them to your benefit. But, what about when one of them hands a client a failing grade? Consider this, you’re an MSP and you get a letter or email from one of your customers […]
June 1, 2021
An update for rh-python36-python-jinja2 is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 1, 2021
An update is now available for Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 1, 2021
Where Bug Bounty Programs Fall Flat
June 1, 2021
5 common scams targeting teens – and how to stay safe
From knock-off designer products to too-good-to-be-true job offers, here are five common schemes fraudsters use to trick teenagers out of their money and sensitive data The post 5 common scams targeting teens – and how to stay safe appeared first on WeLiveSecurity
June 1, 2021
security update
May 31, 2021
On the Taxonomy and Evolution of Ransomware
May 31, 2021
Don’t feed the trolls and other tips for avoiding online drama
You may not be able to escape internet trolls, but you have a choice about how you will deal with them – here’s how you can handle trolls without losing your cool The post Don’t feed the trolls and other tips for avoiding online drama appeared first on WeLiveSecurity
May 31, 2021
Amir Sarabadani and Kunal Mehta discovered that the import functionality of Hyperkitty, the web user interface to access Mailman 3 archives, did not restrict the visibility of private archives during the import, i.e. that during the import of a private Mailman 2 archive the archive was
May 29, 2021
security update
May 29, 2021
8u292 update
May 28, 2021
8u292 update
May 28, 2021
Security fix for CVE-2021-30465
May 28, 2021
**Version 4.4.24** (2021-05-19) * security **CVE-2021-21424** [SecurityCore] Fix user enumeration via response body on invalid credentials (chalasr) * bug #41230 [FrameworkBundle][Validator] Fix deprecations from Doctrine Annotations+Cache (derrabus) * bug #41240 Fixed deprecation warnings about passing null as parameter (derrabus) * bug #41241 [Finder] Fix gitignore regex
May 28, 2021
**Version 3.4.49** (2021-05-19) * security **CVE-2021-21424** [SecurityCore] Fix user enumeration via response body on invalid credentials (chalasr) —- **Version 3.4.48** (2021-05-12) * security **CVE-2021-21424** [Security][Guard] Prevent user enumeration (chalasr)
May 28, 2021
Hackers Exploit Post-COVID Return to Offices
May 28, 2021
Let’s talk ransomware with the experts from Acronis
May 28, 2021
Nobelium Phishing Campaign Poses as USAID
May 28, 2021
Building Multilayered Security for Modern Threats
May 28, 2021
Most cloud security problems breathe
May 28, 2021
Luis Merino, Markus Vervier and Eric Sesterhenn discovered an off-by-one in Nginx, a high-performance web and reverse proxy server, which could result in denial of service and potentially the execution of arbitrary code.
May 28, 2021
The container caasp/v4.5/velero-restic-restore-helper was updated. The following patches have been included in this update:
May 28, 2021
The container caasp/v4.5/velero-plugin-for-microsoft-azure was updated. The following patches have been included in this update:
May 28, 2021
The container caasp/v4.5/velero-plugin-for-gcp was updated. The following patches have been included in this update:
May 28, 2021
The container caasp/v4.5/velero-plugin-for-aws was updated. The following patches have been included in this update:
May 28, 2021
The container caasp/v4.5/velero was updated. The following patches have been included in this update:
May 28, 2021
security update
May 28, 2021
You’ve likely heard of software-as-a-service (SaaS), infrastructure-as-a-service (IaaS), and numerous other “as-a-service” platforms that help support the modern business world. What you may not know is that cybercriminals often use the same business concepts and service models in their own organizations as regular, non-criminal enterprises; i.e., the same practices the majority of their intended victims […]
May 27, 2021
Fujitsu SaaS Hack Sends Govt. of Japan Scrambling
May 27, 2021
Security automation for digital transformation
May 27, 2021
I hacked my friend’s website after a SIM swap attack
Here’s how easily your phone number could be stolen, why a successful SIM swap scam is only the beginning of your problems, and how you can avoid becoming a victim of the attack The post I hacked my friend’s website after a SIM swap attack appeared first on WeLiveSecurity
May 27, 2021
Patch for CVE-2020-24119.
May 26, 2021
CVE-2021-3480: invalid BIND DN crash
May 26, 2021
Patch for CVE-2020-24119.
May 26, 2021
CVE-2021-3480: invalid BIND DN crash
May 26, 2021
An update that fixes one vulnerability is now available.
May 26, 2021
PDF Feature ‘Certified’ Widely Vulnerable to Attack
May 26, 2021
Bluetooth bugs could allow attackers to impersonate devices
Patches to remedy the vulnerabilities should be released over the coming weeks The post Bluetooth bugs could allow attackers to impersonate devices appeared first on WeLiveSecurity
May 26, 2021
Multiple vulnerabilities have been found in Ceph, the worst of which could result in privilege escalation.
May 26, 2021
BazaLoader Masquerades as Movie-Streaming Service
May 26, 2021
A Peek Inside the Underground Ransomware Economy
May 26, 2021
nginx could be made to crash or run programs if it received specially crafted network traffic.
May 26, 2021
A vulnerability in Nextcloud Desktop Client could allow a remote attacker to execute arbitrary commands.
May 26, 2021
Multiple vulnerabilities have been found in cURL, the worst of which could result in the arbitrary execution of code.
May 26, 2021
Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to execute arbitrary code.
May 26, 2021
The package thunderbird before version 78.10.2-1 is vulnerable to multiple issues including content spoofing and information disclosure.
May 26, 2021
The package hivex before version 1.3.20-1 is vulnerable to denial of service.
May 26, 2021
If you’re an admin, service provider, security executive, or are otherwise affiliated with the world of IT solutions, then you know that one of the biggest challenges to overcome is efficacy. Especially in terms of cybersecurity, efficacy is something of an amorphous term; everyone wants it to be better, but what exactly does that mean? […]
May 25, 2021
An update that fixes one vulnerability is now available.
May 25, 2021
Red Hat OpenShift Container Platform release 4.7.12 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.7.
May 25, 2021
Red Hat OpenShift Container Platform release 4.7.12 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.7.12.
May 25, 2021
Red Hat OpenShift Container Platform release 4.7.12 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.7.12.
May 25, 2021