Menu

Category Archives: All

Everything

Release of OpenShift Serverless Client kn 1.14.1 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

Snowden was right, rules human rights court as it declares UK spy laws broke ECHR
Apple fixes macOS zero‑day bug that let malware take secret screenshots

You would do well to update to macOS Big Sur 11.4 post-haste The post Apple fixes macOS zero‑day bug that let malware take secret screenshots appeared first on WeLiveSecurity

Trend Micro Bugs Threaten Home Network Security
Brit watchdog shows some teeth over McAfee antivirus auto-renewals
Combatting Insider Threats with Keyboard Security
Bose Admits Ransomware Hit: Employee Data Accessed
Pulse Secure VPNs Get Quick Fix for Critical RCE
Apple patches dangerous security holes, one in active use – update now!
Apple Patches Zero-Day Flaw in MacOS that Allows for Sneaky Screenshots
DevSecOps compliance: Make your auditor’s job easier!
What ‘cross-cloud’ architects need to know
South Korea plans large scale quantum cryptography adoption, thanks in part to tech partnership with USA
Hard cheese: Stilton snap shared via EncroChat leads to drug dealer’s downfall
China’s Digital Yuan not aimed at challenging US dollar, says former People’s Bank governor
Eight suspects busted in raid on “home delivery” scamming operation
Apple patches macOS flaw exploited by malware to secretly snap screenshots
American Express Fined for Sending Millions of Spam Messages
Restaurant Reservation System Patches Easy-to-Exploit XSS Bug
Legacy data protection and modern ransomware? The odds are not in your favor
Icarus moment: Mozilla Thunderbird was saving OpenPGP keys in plaintext after encryption snafu
FBI Analyst Indicted for Theft of Osama bin Laden Threat Intel
Naked Security Live – Jacked and hacked: how safe are tracking tags?
ProxyJump is safer than SSH agent forwarding
Rom‑con: How romance fraud targets older people and how to avoid it

Online dating scams often follow the same script – here’s what senior citizens should watch out for and how their younger relatives can help them avoid falling victim The post Rom‑con: How romance fraud targets older people and how to avoid it appeared first on WeLiveSecurity

An update for openshift-serverless-1-kn-cli-artifacts-rhel8-container, openshift-serverless-1-knative-rhel8-operator-container, and openshift-serverless-1-serverless-operator-bundle-container is now available for Openshift Serveless 1.14.

Apple is happy to diss the desktop – it knows who’s got the most to lose
Air India admits to data breach impacting 4.5m customers, sat on the news for five weeks

An update that fixes one vulnerability is now available.

Roman Fiedler found that libX11, the X11 protocol client library, was vulnerable to protocol command injection due to insufficient validation of arguments to some functions.

Roman Fiedler reported that missing length validation in various functions provided by libx11, the X11 client-side library, allow to inject X11 protocol commands on X clients, leading to authentication bypass, denial of service or potentially the

Indonesia’s national health insurance scheme leaks at least a million citizens’ records

security update

– Update to 20.11.7 – Closes security issue CVE-2021-31215

– Security fix for CVE-2021-28363. – Security fix for *pip incorrectly handled unicode separators in git references*.

LinuxSecurity is in Beta: A Customized User Profile is Just the Beginning! >
American insurance giant CNA reportedly pays $40m to ransomware crooks
DarkSide Getting Taken to ‘Hackers’ Court’ For Not Paying Affiliates
Building SIEM for Today’s Threat Landscape
WP Statistics Bug Allows Attackers to Lift Data from WordPress Sites
UK Computer Misuse Act convictions declined last year despite pandemic explosion in online criminal activity
Email Campaign Spreads StrRAT Fake-Ransomware RAT
Here’s how we got persistent shell access on a Boeing 747 – Pen Test Partners
Google’s ‘Ask me anything’ on Privacy Sandbox was more about questions than answers
In search of good cybersecurity
Doncaster insurance firm One Call hit by not-dead-at-all Darkside ransomware gang
Toyota rear-ended by twin cyber attacks that left ransomware-shaped dents

security update

Cyber insurance giant CNA paid out $40 million to its ransomware attackers
100M Android Users Hit By Rampant Cloud Leaks
The Gig Economy Creates Novel Data-Security Risks
Android 12 will give you more control over how much data you share with apps

An all-new privacy dashboard and better location, microphone and camera controls are all aimed at curbing apps’ data-slurping habits The post Android 12 will give you more control over how much data you share with apps appeared first on WeLiveSecurity

Four Android Bugs Being Exploited in the Wild
2021 Attacker Dwell Time Trends and Best Defenses
S3 Ep33: Eufy camera leak, Afterburner crisis, and AirTags (again) [Podcast]
Qlocker ransomware gang shuts shop after extorting owners of QNAP NAS drives
UK data regulator fines American Express up to 0.021p per email after opted-out folk spammed 4.1 million times
Apple Exec Calls Level of Mac Malware ‘Unacceptable’
Smashing Security podcast #228: Pipeline pickle, Blockchain bollocks, and Eufy SNAFU

security update

Can Nanotech Secure IoT Devices From the Inside-Out?
Microsoft, Google Clouds Hijacked for Gobs of Phishing
Scams target families of missing persons, FBI warns

Con artists use social media to find and target victims for various nefarious ends, including to extort relatives of missing persons The post Scams target families of missing persons, FBI warns appeared first on WeLiveSecurity

Keksec Cybergang Debuts Simps Botnet for Gaming DDoS
Fake Microsoft Authenticator extension discovered in Chrome Store
Regulator fines COVID-19 tracker for turning contact data into sales leads
Windows PoC Exploit Released for Wormable RCE
Bug Exposes Eufy Camera Private Feeds to Random Users
Miscreants started scanning for Exchange Hafnium vulns five minutes after Microsoft told world about zero-days
Uptime funk: Microsoft has lifted availability of Azure Key Vault to 99.99%
Colonial Pipeline attack: Hacking the physical world

The attack is a reminder of growing cyberthreats to critical infrastructure while also showing why providers of essential services are ripe targets for cybercriminals The post Colonial Pipeline attack: Hacking the physical world appeared first on WeLiveSecurity

Australian Federal Police hiring digital evidence retrieval specialists: Being a very good boy and paws required
The Microsoft Authenticator extension in the Chrome store wasn’t actually made by Microsoft. Oops, Google
New Zealand hospitals infected by ransomware, cancel some surgeries
Scammers Pose as Meal-Kit Services to Steal Customer Data

security update

security update

Stalkerware Apps Riddled with Security Bugs
Us? Pwn SolarWinds? With our reputation? Russian spy chief makes laughable denial of supply chain attack
Business-intelligence-company-turned-Bitcoin-addict MicroStrategy grabs another $10m crypto-coin fix
It’s Time to Prepare for a Rise in Insider Threats
The UK loves cybersecurity so much, it’s going to regulate managed service providers’ infosec practices in law
Unsuccessful Conti Ransomware Attack Still Packs Costly Punch
1Password unsheathes Rusty key, hopes to unlock Linux Desktop world
Microsoft, Adobe Exploits Top List of Crooks’ Wish List
Apple rejected 215,000 iOS apps due to privacy concerns last year
Latest phones are great at thwarting Wi-Fi tracking. Other devices, not so much – study
Magecart Goes Server-Side in Latest Tactics Changeup
Eufycam Wi-Fi security cameras streamed video feeds from other people’s homes
What a Year It’s Been: RSA 2021 Embraces ‘Resilience’
DarkSide Hits Toshiba; XSS Forum Bans Ransomware
Bizarro Banking Trojan Sports Sophisticated Backdoor
CISOs Struggle to Cope with Mounting Job Stress
Axa insurance offshoots pwned as Ireland reveals second ransomware hit
“Those aren’t my kids!” – Eufy camera owners report video mixups
Take action now – FluBot malware may be on its way

Why FluBot is a major threat for Android users, how to avoid falling victim, and how to get rid of the malware if your device has already been compromised The post Take action now – FluBot malware may be on its way appeared first on WeLiveSecurity

We’d love to report on the outcome of the CREST exam cheatsheet probe, but UK infosec body won’t publish it
Cyberinsurance giant AXA hit by ransomware attack after saying it would stop covering ransom payments
7 keys to selecting a low-code platform
Android stalkerware threatens victims further and exposes snoopers themselves

ESET research reveals that common Android stalkerware apps are riddled with vulnerabilities that further jeopardize victims and expose the privacy and security of the snoopers themselves The post Android stalkerware threatens victims further and exposes snoopers themselves appeared first on WeLiveSecurity