March 6, 2020
sudo: Stack based buffer overflow when pwfeedback is enabled (CVE-2019-18634) SL6 x86_64 sudo-1.8.6p3-29.el6_10.3.x86_64.rpm sudo-debuginfo-1.8.6p3-29.el6_10.3.x86_64.rpm sudo-debuginfo-1.8.6p3-29.el6_10.3.i686.rpm sudo-devel-1.8.6p3-29.el6_10.3.i686.rpm sudo-devel-1.8.6p3-29.el6_10.3.x86_64.rpm i386 sudo-1.8.6p3-29.el6_10.3.i686.rpm sudo-debuginfo-1.8.6p3-29.e [More…]
March 6, 2020
Run ANDROID on an iPhone? Are you SERIOUS?!?
March 6, 2020
The updated package fixes a security vulnerability: A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a slash and backslash at the beginning. (CVE-2019-20479)
March 6, 2020
Updated pure-ftpd packages fix security vulnerabilities: An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the *lookup_alias(const char alias) or print_aliases(void) function is called,
March 6, 2020
The updated packages fix several issues including security vulnerabilities: In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive. (CVE-2019-19221)
March 6, 2020
Updated dojo package fixes security vulnerability: dojox was vulnerable to Cross-site Scripting. This was due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them (CVE-2019-10785).
March 6, 2020
The updated packages fix a security vulnerability: Mutation XSS in bleach.clean when noscript and raw tag whitelisted. (CVE-2020-6802)
March 6, 2020
High-Severity Cisco Webex Flaws Fixed
March 5, 2020
Coronavirus warning spreads computer virus
March 5, 2020
Facebook: No, we are not killing Libra
March 5, 2020
An update that fixes two vulnerabilities is now available.
March 5, 2020
It was discovered that there was an out-of-bounds write vulnerability in pdfresurrect, a tool for extracting or scrubbing versioning data from PDF documents.
March 5, 2020
Ethical hackers swarm Pentagon websites
March 5, 2020
xerces-c: XML parser contains a use-after-free error triggered during the scanning of external DTDs (CVE-2018-1311) SL7 x86_64 xerces-c-3.1.1-10.el7_7.i686.rpm xerces-c-3.1.1-10.el7_7.x86_64.rpm xerces-c-debuginfo-3.1.1-10.el7_7.i686.rpm xerces-c-debuginfo-3.1.1-10.el7_7.x86_64.rpm xerces-c-devel-3.1.1-10.el7_7.i686.rpm xerces-c-devel-3.1.1-10.el7_7.x86_64.rpm noar [More…]
March 5, 2020
nodejs: HTTP request smuggling using malformed Transfer-Encoding header (CVE-2019-15605) SL7 x86_64 http-parser-2.7.1-8.el7_7.2.i686.rpm http-parser-2.7.1-8.el7_7.2.x86_64.rpm http-parser-debuginfo-2.7.1-8.el7_7.2.i686.rpm http-parser-debuginfo-2.7.1-8.el7_7.2.x86_64.rpm http-parser-devel-2.7.1-8.el7_7.2.i686.rpm http-parser-devel-2.7.1-8.el7_7.2.x86_64.rpm – Scient [More…]
March 5, 2020
Trump, Sanders Are the Top Brands for Cybercriminals
March 5, 2020
An update for the virt:8.1 and virt-devel:8.1 modules is now available for Advanced Virtualization for RHEL 8.1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 5, 2020
Guildma: The Devil drives electric
The fourth installment of our occasional series demystifying Latin American banking trojans The post Guildma: The Devil drives electric appeared first on WeLiveSecurity
March 5, 2020
An update that fixes one vulnerability is now available.
March 5, 2020
Time to limber up in the battle against cybercriminals
March 5, 2020
Smashing Security #168: The Bitcoin fraud factory
March 5, 2020
Critical Netgear Bug Impacts Flagship Nighthawk Router
March 4, 2020
Microsoft OneNote Used To Sidestep Phishing Detection
March 4, 2020
CIA’s 11-year old hacking campaign against China exposed
March 4, 2020
Fraud Prevention Month: How to protect yourself from scams
ESET Chief Security Evangelist Tony Anscombe sat down with us to share his insights on how to avoid falling prey to online fraud The post Fraud Prevention Month: How to protect yourself from scams appeared first on WeLiveSecurity
March 4, 2020
Loyalty Cards Targeted in Tesco Clubcard Attack
March 4, 2020
Voice assistants can be hacked with ultrasonic waves
With access to text messages and the ability to make fraudulent phone calls, attackers could wreak more damage than you’d think The post Voice assistants can be hacked with ultrasonic waves appeared first on WeLiveSecurity
March 4, 2020
An update for http-parser is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 4, 2020
An update for http-parser is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 4, 2020
NCSC: Secure your webcams now
March 4, 2020
Google fixes MediaTek bug in Android March patches
March 4, 2020
An update that solves 22 vulnerabilities and has 152 fixes is now available.
March 4, 2020
An update that solves 22 vulnerabilities and has 152 fixes is now available.
March 4, 2020
Tech support scammers hacked back by vigilante
March 4, 2020
An update that solves two vulnerabilities and has one errata is now available.
March 4, 2020
An update that fixes one vulnerability is now available.
March 4, 2020
Cobalt Ulster Strikes Again With New ForeLord Malware
March 3, 2020
Let’s Encrypt to Revoke Millions of TLS Certs
March 3, 2020
Why ‘free’ Wi-Fi isn’t really free
March 3, 2020
Have I Been Pwned No Longer For Sale
March 3, 2020
Brave comes out on top in browser privacy study
By contrast, two web browsers share identifiers that are tied to the device hardware and so persist even across fresh installs The post Brave comes out on top in browser privacy study appeared first on WeLiveSecurity
March 3, 2020
Apple removes Clearview AI iPhone app from App Store
March 3, 2020
Digital piggy bank sevice broken into by cybercrooks
March 3, 2020
An update that solves one vulnerability and has one errata is now available.
March 3, 2020
An update that fixes one vulnerability is now available.
March 3, 2020
An update that contains security fixes can now be installed.
March 3, 2020
Rake could be made run arbitrary commands it received a specially crafted file.
March 3, 2020
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 3, 2020
An update is now available for Red Hat build of Eclipse Vert.x. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each
March 3, 2020
XSS plugin vulnerabilities plague WordPress users
March 3, 2020
5 reasons to consider a career in cybersecurity
From competitive salaries to ever-evolving job descriptions, there are myriad reasons why a cybersecurity career could be right for you The post 5 reasons to consider a career in cybersecurity appeared first on WeLiveSecurity
March 3, 2020
Gamer Alert: Serious Nvidia Flaw Plagues Graphics Driver
March 2, 2020
Forrester: Keeping Smart Cities Safe From Hacks
March 2, 2020