April 27, 2020
GDPR Compliance Site Leaks Git Data, Passwords
security update
April 27, 2020
Microsoft Teams flaw could let attackers hijack accounts
Microsoft plugs a security hole that could have enabled attackers to weaponize a GIF in order to hijack Teams accounts and steal data The post Microsoft Teams flaw could let attackers hijack accounts appeared first on WeLiveSecurity
April 27, 2020
Hackers Mount Zero-Day Attacks on Sophos Firewalls
April 27, 2020
5 common mistakes that lead to ransomware
April 27, 2020
Eight Common OT / Industrial Firewall Mistakes
April 27, 2020
An update that solves 11 vulnerabilities and has 96 fixes is now available.
April 27, 2020
An update that solves one vulnerability and has one errata is now available.
April 27, 2020
An update that solves 12 vulnerabilities and has 139 fixes is now available.
April 27, 2020
Web shell warning issued by US and Australia
April 27, 2020
Several security issues were fixed in OpenEXR.
April 27, 2020
Single Malicious GIF Opened Microsoft Teams to Nasty Attack
April 27, 2020
Update to latest upstream OpenVPN 2.4.9 release. It contains a security fix for CVE-2020-11810. This security issue is quite hard to abuse, requiring a fairly precise timing attack combined with guessing a just assigned peer-id reference. If successful, only a single client just initiating a new connection will experience a denial of service situation. This […]
April 27, 2020
6.2.6
April 27, 2020
Three issues have been found in php5, a server-side, HTML-embedded scripting language.
April 26, 2020
Hanno Boeck discovered that it was possible to create a cross site scripting attack on the webarchives of the Mailman mailing list manager, by sending a special type of attachement.
April 26, 2020
Update to WebKitGTK 2.28.1: * Fix position of default option element popup windows under Wayland. * Fix rendering after a cross site navigation with PSON enabled and hardware acceleration forced. * Fix a crash in nested wayland compositor when closing a tab with PSON enabled. * Update Chrome and Firefox versions in user agent quirks. […]
April 25, 2020
Security fix for CVE-2020-5260 From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.5.txt): > With a crafted URL that contains a newline or empty host, or lacks > a scheme, the credential helper machinery can be fooled into > providing credential information that is not appropriate for the > protocol in use and host being
April 25, 2020
Update to WebKitGTK 2.28.1: * Fix position of default option element popup windows under Wayland. * Update Chrome and Firefox versions in user agent quirks. * Fix several crashes and rendering issues. * Security fixes: CVE-2020-11793
April 25, 2020
Update to version 1.26. Resolves CVE-2017-18640.
April 25, 2020
security update
April 25, 2020
It was discovered that python-reportlab, a Python library to create PDF documents, is prone to a code injection vulnerability while parsing a color attribute. An attacker can take advantage of this flaw to execute arbitrary code if a specially crafted document is processed.
April 25, 2020
security update
April 25, 2020
This update fixes the following security vulnerabilities: CVE-2018-20536, CVE-2018-20537, CVE-2018-20539, CVE-2018-20540
April 24, 2020
**PHP version 7.3.17** (16 Apr 2020) **Core:** * Fixed bug php#79364 (When copy empty array, next key is unspecified). (cmb) * Fixed bug php#78210 (Invalid pointer address). (cmb, Nikita) **CURL:** * Fixed bug php#79199 (curl_copy_handle() memory leak). (cmb) **Date:** * Fixed bug php#79396 (DateTime hour incorrect during DST jump forward). (Nate Brunette) **Iconv:**
April 24, 2020
3.2.3 —- New version 3.2.2 Security fix for CVE-2020-7044, CVE-2020-9428, CVE-2020-9430, CVE-2020-9431
April 24, 2020
Fix mistakes in Wayland wrapper change —- Fixes Wayland issue when running from terminal —- Update sound touch library, fixes some known security issues.
April 24, 2020
Security fix for CVE-2015-9541
April 24, 2020
Hackers set up fake NHS website to spread malware
April 24, 2020
An update that fixes one vulnerability is now available.
April 24, 2020
An update that contains security fixes can now be installed.
April 24, 2020
An update that contains security fixes can now be installed.
April 24, 2020
An update that contains security fixes can now be installed.
April 24, 2020
An update that contains security fixes can now be installed.
April 24, 2020
Following ESET’s discovery, a Monero mining botnet is disrupted
ESET researchers discover, and play a key role in the disruption of, a 35,000-strong botnet spreading in Latin America via infected USB drives The post Following ESET’s discovery, a Monero mining botnet is disrupted appeared first on WeLiveSecurity
April 24, 2020
Nintendo Confirms Breach of 160,000 Accounts
April 24, 2020
Apple Pushes Back Against Zero-Day Exploit Claims
April 24, 2020
Reading Time: ~ 2 min. Los Angeles Suburb Hit with Ransomware Last month, the City of Torrance, California fell victim to a ransomware attack that shut down many of their internal systems and demanded 100 Bitcoins to not publish the stolen data. Along with the roughly 200GB of data it stole from the city, the […]
April 24, 2020
Patch now! Microsoft issues unexpected Office fix
April 24, 2020
Shadow Broker leaked NSA files point to unknown APT group
April 24, 2020
Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in denial of service, insecure TLS handshakes, bypass of sandbox restrictions or HTTP response splitting attacks.
April 24, 2020
Reading Time: ~ 4 min. Did you know there are three primary types of hacker—white hats, black hats, and grey hats—and that there are subcategories within each one? Despite what you may have heard, not all hackers have intrinsically evil goals in mind. In fact, there are at least 300,000 hackers throughout the world who […]
April 23, 2020
iOS Mail app flaws may have left iPhone users vulnerable for years
A pair of vulnerabilities in the default email app on iOS devices is believed to have been exploited against high-profile targets The post iOS Mail app flaws may have left iPhone users vulnerable for years appeared first on WeLiveSecurity
April 23, 2020
Valve Confirms CS:GO, Team Fortress 2 Source-Code Leak
April 23, 2020
Buying a secondhand device? Here’s what to keep in mind
If you’re trying to be responsible towards the planet, also be responsible to yourself and take these steps so that the device doesn’t end up costing you more than you’ve saved The post Buying a secondhand device? Here’s what to keep in mind appeared first on WeLiveSecurity
April 23, 2020
Serious flaws found in multiple smart home hubs: Is your device among them?
In worst-case scenarios, some vulnerabilities could even allow attackers to take control over the central units and all peripheral devices connected to them The post Serious flaws found in multiple smart home hubs: Is your device among them? appeared first on WeLiveSecurity
April 23, 2020
iPhone zero day – don’t panic! Here’s what you need to know
April 23, 2020
A Dozen Nation-Backed APTs Tap COVID-19 to Cover Spy Attacks
April 23, 2020
Skype Phishing Attack Targets Remote Workers’ Passwords
April 23, 2020
iOS exploit lets attackers access default iPhone mail app
April 23, 2020
Fake Skype, Signal Apps Used to Spread Surveillanceware
April 23, 2020
Multiple vulnerabilities have been found in Git which might all allow attackers to access sensitive information.
April 23, 2020
Maze ransomware – what you need to know
April 23, 2020
The package lib32-openssl before version 1.1.1.g-1 is vulnerable to denial of service.
April 23, 2020
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code. [More…]
April 23, 2020
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.
April 23, 2020
Multiple vulnerabilities were found in OpenSSL, the worst of which could allow remote attackers to cause a Denial of Service condition.
April 23, 2020
python-twisted: HTTP request smuggling when presented with two Content-Length headers (CVE-2020-10108) * python-twisted: HTTP request smuggling when presented with a Content-Length and a chunked Transfer-Encoding header (CVE-2020-10109) SL7 x86_64 python-twisted-web-12.1.0-7.el7_8.x86_64.rpm – Scientific Linux Development Team
April 23, 2020
Fast-Moving DDoS Botnet Exploits Unpatched ZyXel RCE Bug
April 22, 2020
Apple Patches Two iOS Zero-Days Abused for Years
April 22, 2020