December 30, 2020
Taking a Neighborhood Watch Approach to Retail Cybersecurity
Lawsuit Claims Flawed Facial Recognition Led to Man’s Wrongful Arrest
December 29, 2020
An update that contains security fixes can now be installed.
December 29, 2020
6 Questions Attackers Ask Before Choosing an Asset to Exploit
December 29, 2020
Japanese Aerospace Firm Kawasaki Warns of Data Breach
December 29, 2020
2020 Work-for-Home Shift: What We Learned
December 29, 2020
Fixes stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious content. (CVE-2020-35730). References: – https://bugs.mageia.org/show_bug.cgi?id=27957
December 29, 2020
In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation (CVE-2020-0499).
December 29, 2020
Multiple buffer overflow flaws were found in pngcheck 2.4.0 and older (rhbz#1902806). References: – https://bugs.mageia.org/show_bug.cgi?id=27922
December 29, 2020
There’s a flaw in openjpeg in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability (CVE-2020-27841).
December 29, 2020
In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP (CVE-2020-27619). References: – https://bugs.mageia.org/show_bug.cgi?id=27868
December 29, 2020
posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 has a “double file descriptor close” issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which can result in unintended information disclosure, crashes, or file corruption due to having the wrong file associated with the […]
December 29, 2020
security update
December 28, 2020
Hackers Amp Up COVID-19 IP Theft Attacks
December 28, 2020
Ransomware in 2020: A Banner Year for Extortion
December 28, 2020
An issue was discovered in roundcube where in a cross-site scripting (XSS) via HTML or plain text messages with malicious content was possible.
December 28, 2020
Alex Birnberg discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, is prone to a cross-site scripting vulnerability in handling HTML or Plain text messages with malicious content.
December 28, 2020
An update that fixes two vulnerabilities is now available.
December 28, 2020
An update that fixes three vulnerabilities is now available.
December 28, 2020
security update
December 28, 2020
security update
December 27, 2020
An update that fixes three vulnerabilities is now available.
December 27, 2020
An update that fixes two vulnerabilities is now available.
December 27, 2020
The update for python-apt released as DSA 4809-1 introduced a regression when passing a file descriptor to apt_inst.ArFile or apt_inst.DebFile causing a segmentation fault. Updated python-apt packages are now available to correct this issue.
December 27, 2020
https://lists.wikimedia.org/pipermail/mediawiki- announce/2020-December/000268.html
December 26, 2020
Backport patches for CVE-2020-16592 and CVE-2020-16598
December 26, 2020
Backport patches for CVE-2020-16592 and CVE-2020-16598
December 26, 2020
Update to latest upstream version.
December 26, 2020
An update that fixes one vulnerability is now available.
December 26, 2020
Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS command injection via URL parameter of dependency specification (CVE-2020-13802). References: – https://bugs.mageia.org/show_bug.cgi?id=27511
December 26, 2020
Smart tech gifts: How to keep your kids and family safe
Cyberthreats can take the fun out of connected gadgets – here’s how to make sure your children enjoy the tech without putting themselves or their family at risk The post Smart tech gifts: How to keep your kids and family safe appeared first on WeLiveSecurity
December 26, 2020
The update for python-apt released as 2488-1 introduced a regression by causing a segmentation fault, which is now fixed with this update. For Debian 9 stretch, this problem has been fixed in version
December 26, 2020
December 26, 2020
An update that solves 7 vulnerabilities and has two fixes is now available.
December 26, 2020
New version 1.4.3. Security fix for CVE-2020-28241.
December 25, 2020
New version 1.4.3. Security fix for CVE-2020-28241.
December 25, 2020
An update that fixes 8 vulnerabilities is now available.
December 25, 2020
An update that fixes 8 vulnerabilities is now available.
December 25, 2020
security update
December 24, 2020
xenstore watch notifications lacking permission checks [XSA-115, CVE-2020-29480] (#1908091) Xenstore: new domains inheriting existing node permissions [XSA-322, CVE-2020-29481] (#1908095) Xenstore: wrong path length check [XSA-323, CVE-2020-29482] (#1908096) Xenstore: guests can crash xenstored via watchs [XSA-324, CVE-2020-29484] (#1908088) Xenstore: guests can disturb domain cleanup
December 24, 2020
xenstore watch notifications lacking permission checks [XSA-115, CVE-2020-29480] (#1908091) Xenstore: new domains inheriting existing node permissions [XSA-322, CVE-2020-29481] (#1908095) Xenstore: wrong path length check [XSA-323, CVE-2020-29482] (#1908096) Xenstore: guests can crash xenstored via watchs [XSA-324, CVE-2020-29484] (#1908088) Xenstore: guests can disturb domain cleanup
December 24, 2020
Several vulnerabilities were discovered in Sympa, a mailing list manager, which could result in local privilege escalation, denial of service or unauthorized access via the SOAP API.
December 24, 2020
A vulnerability in NSS might allow remote attackers to cause a Denial of Service condition.
December 24, 2020
7 ways malware can get into your device
You know that malware is bad, but are you also aware of the various common ways in which it can infiltrate your devices? The post 7 ways malware can get into your device appeared first on WeLiveSecurity
December 24, 2020
Windows Zero-Day Still Circulating After Faulty Fix
December 24, 2020
Multiple vulnerabilities have been found in Samba, the worst of which could result in a Denial of Service condition.
December 24, 2020
A vulnerability has been discovered in Apache Tomcat that allows for the disclosure of sensitive information.
December 24, 2020
A buffer overflow in HAProxy might allow an attacker to execute arbitrary code.
December 24, 2020
Lazarus Group Hits COVID-19 Vaccine-Maker in Espionage Attack
December 23, 2020
It was found that spip, a website engine for publishing, did not correctly validate its input (couleur, display, display_navigation, display_outils, imessage, and spip_ecran) allowing authenticated users to execute arbitrary code.
December 23, 2020
Third-Party APIs: How to Prevent Enumeration Attacks
December 23, 2020
Hey Alexa, Who Am I Messaging?
December 23, 2020
Emotet Returns to Hit 100K Mailboxes Per Day
December 23, 2020
Police bring down “bulletproof” VPN services beloved by cybercriminals
December 23, 2020
It was discovered that Awstats, a web server log analyzer, was vulnerable to path traversal attacks. A remote unauthenticated attacker could leverage that to perform arbitrary code execution. The previous fix did not fully address the issue when the default
December 23, 2020
How to bring zero-trust security to microservices
December 23, 2020
The container ses/7/ceph/ceph was updated. The following patches have been included in this update:
December 23, 2020
Holiday Puppy Swindle Has Consumers Howling
December 22, 2020
Previous fix for buffer overrun printing the contents of the sPLT chunk in certain malformed inputs (RHBZ#1905775) was incomplete; it should be properly fixed now. —- Security fix for multiple buffer overflows from crafted file input (RHBZ#1902786,1902806,1902810: no CVE yet assigned), and for buffer overrun printing the contents of the sPLT chunk in certain malformed […]
December 22, 2020
Update to 2.16.9 Release notes: https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.9
December 22, 2020
Previous fix for buffer overrun printing the contents of the sPLT chunk in certain malformed inputs (RHBZ#1905775) was incomplete; it should be properly fixed now. —- Security fix for multiple buffer overflows from crafted file input (RHBZ#1902786,1902806,1902810: no CVE yet assigned), and for buffer overrun printing the contents of the sPLT chunk in certain malformed […]
December 22, 2020
An update that fixes 8 vulnerabilities is now available.
December 22, 2020
Does a friend “need money urgently”? Check your facts before paying out…
December 22, 2020
Cybersecurity Advent calendar: Stay aware, stay safe!
When it comes to holiday gifts, surprise and wonder are always welcome. When it comes to protecting your security, however, you don’t want to leave anything to chance. The post Cybersecurity Advent calendar: Stay aware, stay safe! appeared first on WeLiveSecurity
December 22, 2020
Tech Giants Lend WhatsApp Support in Spyware Case Against NSO Group
December 22, 2020
UK cryptocurrency exchange EXMO suffers breach, funds stolen
December 22, 2020
Joker’s Stash Carding Site Taken Down
December 22, 2020
Security awareness training is one of the most straightforward ways to improve a business’ overall resilience against cyberattacks. That is, when you get it just right. Thanks to the disruptions to “normal” work routines that COVID-19 has brought, launching a company-wide training program to teach end users how to avoid phishing scams and online risks […]
December 22, 2020
An update that fixes one vulnerability is now available.
December 22, 2020
An update that solves 7 vulnerabilities and has two fixes is now available.
December 22, 2020
A few issues have been found in the OpenJDK 8u272 update, including LDAP connection failures and application crash. For Debian 9 stretch, this problem has been fixed in version
December 22, 2020
An update for kernel is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 22, 2020
An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 22, 2020
An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 22, 2020
Nosy Ex-Partners Armed with Instagram Passwords Pose a Serious Threat
December 21, 2020
Smart Doorbell Disaster: Many Brands Vulnerable to Attack
December 21, 2020
Defending Against State and State-Sponsored Threat Actors
December 21, 2020
Zero-Click Apple Zero-Day Uncovered in Pegasus Spy Attack
December 21, 2020
Simplifying Proactive Defense With Threat Playbooks
December 21, 2020
Dark Web Pricing Skyrockets for Microsoft RDP Servers, Payment-Card Data
December 21, 2020
Dell Wyse Thin Client scores two perfect 10 security flaws
December 21, 2020
Hacker Dumps Crypto Wallet Customer Data; Active Attacks Follow
December 21, 2020
Telemed Poll Uncovers Biggest Risks and Best Practices
December 21, 2020
It was discovered that there was an issue in node-ini, a .ini format parser and serializer for Node.js, where an application could be exploited by a malicious input file.
December 21, 2020
An update for thunderbird is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 21, 2020
Red Hat OpenShift Container Platform release 4.6.9 is now available with updates to packages and images that fix several bugs and add enhancements. This release also includes a security update for Red Hat OpenShift Container Platform 4.6.
December 21, 2020
An update for openssl is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 21, 2020
An update for thunderbird is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 21, 2020