May 14, 2020
Login with Facebook Bug Earns $20K Bounty
May 14, 2020
An update that solves 35 vulnerabilities and has 21 fixes is now available.
May 14, 2020
Update now! Windows gets another bumper patch update
May 14, 2020
NOTE: This DLA was intially sent on 2020-04-14 but for reasons unknown failed to reach the mailing list. It is being re-sent now to ensure that it appears in the mailing list archive. No new version of
May 14, 2020
An update that fixes one vulnerability is now available.
May 14, 2020
An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 14, 2020
security update
May 14, 2020
Texas Courts Won’t Pay Up in Ransomware Attack
May 13, 2020
WannaCryptor remains a global threat three years on
WannaCryptor is still alive and kicking, so much so that it sits atop the list of the most commonly detected ransomware families The post WannaCryptor remains a global threat three years on appeared first on WeLiveSecurity
May 13, 2020
Lukas Stefanko: How we fought off a DDoS attack from a mobile botnet
Hot on the heels of his research into an attack that attempted to take down ESET’s website, Lukas Stefanko sheds more light on threats posed by mobile botnets The post Lukas Stefanko: How we fought off a DDoS attack from a mobile botnet appeared first on WeLiveSecurity
May 13, 2020
Ramsay Malware Targets Air-Gapped Networks
May 13, 2020
Feds Reveal Hidden Cobra’s Trove of Espionage Tools
May 13, 2020
Reading Time: ~ 3 min. If you’ve been working in the technology space for any length of time, you’ve undoubtedly heard about the rising importance of artificial intelligence (AI) and machine learning (ML). But what can these tools really do for you? More specifically, what kinds of benefits do they offer for cybersecurity and business […]
May 13, 2020
An update for .NET Core is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 13, 2020
An update that solves one vulnerability and has one errata is now available.
May 13, 2020
Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic (CVE-2020-10711) SL6 x86_64 kernel-2.6.32-754.29.2.el6.x86_64.rpm kernel-debug-2.6.32-754.29.2.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-754.29.2.el6.i686.rpm kernel-debug-debuginfo-2.6.32-754.29.2.el6.x86_64.rpm kernel-debug-devel-2.6.32-754.29.2.el6.i686 [More…]
May 13, 2020
USN-3911-1 introduced a regression in file.
May 13, 2020
Several security issues were fixed in Squid.
May 13, 2020
IPRoute could be made to execute arbitrary code if it received a specially crafted input.
May 13, 2020
Thunderbolt flaws open millions of PCs to physical hacking
A new attack method enables bad actors to access data on a locked computer via an evil maid attack within 5 minutes The post Thunderbolt flaws open millions of PCs to physical hacking appeared first on WeLiveSecurity
May 12, 2020
REvil Ransomware Attack Hits A-List Celeb Law Firm
May 12, 2020
Microsoft Addresses 111 Bugs for May Patch Tuesday
May 12, 2020
Reading Time: ~ 2 min. Adult Website Leaks Trove of Sensitive Data An recently discovered unsecured database belonging to the adult streaming site Cam4 was found to contain nearly 11 billion unique records amounting to seven terabytes of data. For a site with billions of visitors each year, the exposed data could affect millions who […]
May 12, 2020
Over 160 million user records put up for sale on the dark web
Eleven companies, ranging from online marketplaces to news websites, have had their user databases poached The post Over 160 million user records put up for sale on the dark web appeared first on WeLiveSecurity
May 12, 2020
Breaking news? App promises news feeds, brings DDoS attacks instead
After being targeted by an Android DDoS app, ESET seized the opportunity to analyze the attack and to help put an end to it The post Breaking news? App promises news feeds, brings DDoS attacks instead appeared first on WeLiveSecurity
May 12, 2020
Dating app user logins found on hacking forum
May 12, 2020
An update that solves 53 vulnerabilities and has 32 fixes is now available.
May 12, 2020
An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 12, 2020
An update that fixes one vulnerability is now available.
May 12, 2020
An update for libreswan is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 12, 2020
An update for libreswan is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 12, 2020
An update for libreswan is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 12, 2020
Sphinx Malware Returns to Riddle U.S. Targets
May 11, 2020
Multiple CVE(s) were discovered in the src:wordpress package. CVE-2020-11026
May 11, 2020
Celebrity personal data taken in ransomware attack
May 11, 2020
An update that fixes two vulnerabilities is now available.
May 11, 2020
Mailman could be made to inject arbitrary content in the login page if it received a specially crafted input.
May 11, 2020
The Internet of Things in 2020: More vital than ever
May 11, 2020
Open Liberty 20.0.0.5 Runtime is now available from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 11, 2020
Microsoft opens IoT bug bounty program
May 11, 2020
An update that fixes two vulnerabilities is now available.
May 11, 2020
An update that fixes 6 vulnerabilities is now available.
May 11, 2020
The package firefox before version 76.0-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing and insufficient validation.
May 10, 2020
Chromium-browser 81.0.4044.138 fixes security issues: Multiple flaws were found in the way Chromium 81.0.4044.129 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code,
May 10, 2020
**MySQL 8.0.20** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-20.html CVEs fixed: CVE-2020-2759 CVE-2020-2761 CVE-2020-2762 CVE-2020-2763 CVE-2020-2765 CVE-2020-2770 CVE-2020-2774 CVE-2020-2779 CVE-2020-2780 CVE-2020-2804 CVE-2020-2812 CVE-2020-2814 CVE-2020-2853 CVE-2020-2892 CVE-2020-2893
May 10, 2020
**MySQL 8.0.20** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-20.html CVEs fixed: CVE-2020-2759 CVE-2020-2761 CVE-2020-2762 CVE-2020-2763 CVE-2020-2765 CVE-2020-2770 CVE-2020-2774 CVE-2020-2779 CVE-2020-2780 CVE-2020-2804 CVE-2020-2812 CVE-2020-2814 CVE-2020-2853 CVE-2020-2892 CVE-2020-2893
May 10, 2020
Are you ready, kids? I said, are you ready? Whoooooo has another update for you to see? Google Chromium! For browsing and tweeting (but not FTP) Google Chromium! If improved security be something you wish Google Chromium! Then run dnf while you flop like a fish! Google Chromium! Google Chromium! Google Chromium! Google Chromium! Ahem. […]
May 9, 2020
**MySQL 8.0.20** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-20.html CVEs fixed: CVE-2020-2759 CVE-2020-2761 CVE-2020-2762 CVE-2020-2763 CVE-2020-2765 CVE-2020-2770 CVE-2020-2774 CVE-2020-2779 CVE-2020-2780 CVE-2020-2804 CVE-2020-2812 CVE-2020-2814 CVE-2020-2853 CVE-2020-2892 CVE-2020-2893
May 9, 2020
security update
May 9, 2020
security update
May 9, 2020
Multiple security issues have been found in Thunderbird which could result in spoofing the displayed sender email address, denial of service or potentially the execution of arbitrary code.
May 9, 2020
– Release 0.24.1
May 9, 2020
**Version 1.4.4** This is a **service and security update** to the stable version 1.4 of Roundcube Webmail. It contains four fixes for recently reported security vulnerabilities as well a number of general improvements from our issue tracker. – Fix bug where attachments with Content-Id were attached to the message on reply (#7122) – Fix identity […]
May 9, 2020
**Version 1.4.4** This is a **service and security update** to the stable version 1.4 of Roundcube Webmail. It contains four fixes for recently reported security vulnerabilities as well a number of general improvements from our issue tracker. – Fix bug where attachments with Content-Id were attached to the message on reply (#7122) – Fix identity […]
May 8, 2020
– Release 0.24.1
May 8, 2020