October 1, 2020
Microsoft Office 365 Phishing Attack Uses Multiple CAPTCHAs
A potential HTTP request smuggling vulnerability in WEBrick was reported. WEBrick (bundled along with jruby) was too tolerant against
October 1, 2020
A potential HTTP request smuggling vulnerability in WEBrick was reported. WEBrick (bundled along with ruby2.3) was too tolerant against
October 1, 2020
Microsoft 365 services back online after hours‑long outage
Microsoft resolves a service disruption that affected Office 365, Outlook.com, Teams and other cloud-based services The post Microsoft 365 services back online after hours‑long outage appeared first on WeLiveSecurity
October 1, 2020
APT‑C‑23 group evolves its Android spyware
ESET researchers uncover a new version of Android spyware used by the APT-C-23 threat group against targets in the Middle East The post APT‑C‑23 group evolves its Android spyware appeared first on WeLiveSecurity
October 1, 2020
NFL, NBA Players Hacked in Would-Be Cyber-Slam-Dunk
October 1, 2020
Spammers Smuggle LokiBot Via URL Obfuscation Tactic
October 1, 2020
An update that solves two vulnerabilities and has one errata is now available.
October 1, 2020
An update that fixes 12 vulnerabilities is now available.
October 1, 2020
The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string. Therefore, there was a need to explicitly specify the number
October 1, 2020
This package allowed ../ directory traversal to access private resources because resource matching did not ensure that pathnames were in a canonical format.
October 1, 2020
What to do first when your company suffers a ransomware attack
October 1, 2020
#BeCyberSmart – why friends don’t let friends get scammed
October 1, 2020
InterPlanetary Storm Botnet Infects 13K Mac, Android Devices
October 1, 2020
Smashing Security podcast #198: Chucky the coffee maker
October 1, 2020
GitHub adds code scanning for security bugs
September 30, 2020
OAuth Consent Phishing Ramps Up with Microsoft Office 365 Attacks
September 30, 2020
Android Spyware Variant Snoops on WhatsApp, Telegram Messages
September 30, 2020
FBI, CISA warn of disinformation campaigns about hacked voting systems
Threat actors may spread false claims about compromised voting systems in order to undermine confidence in the electoral process The post FBI, CISA warn of disinformation campaigns about hacked voting systems appeared first on WeLiveSecurity
September 30, 2020
Facebook Small Business Grants Spark Identity-Theft Scam
September 30, 2020
Microsoft Exchange Servers Still Open to Actively Exploited Flaw
September 30, 2020
An update that fixes one vulnerability is now available.
September 30, 2020
An update that fixes two vulnerabilities is now available.
September 30, 2020
Updated OpenShift Container Storage packages fixing various security issues and other bugs are now available for Red Hat OpenShift Container Storage with 3.11.z Async update. Red Hat Product Security has rated this update as having a security impact
September 30, 2020
An update that solves four vulnerabilities and has two fixes is now available.
September 30, 2020
Several security improvements were added to Samba.
September 30, 2020
Several security issues were fixed in Tomcat.
September 30, 2020
Why Web Browser Padlocks Shouldn’t Be Trusted
September 29, 2020
security update
September 29, 2020
Reading Time: ~ 2 min. DHS Announces Massive Increase in LokiBot Attacks By monitoring and tracking of cyberattacks over 2020, U.S. Department of Homeland Security (DHS) officials have uncovered a significant increase in cyberattacks being carried out by LokiBot, a malicious info-stealer of stored passwords and cryptocurrency information. The increase in LokiBot attacks can likely […]
September 29, 2020
Zerologon Attacks Against Microsoft DCs Snowball in a Week
September 29, 2020
The Network Perimeter: This Time, It’s Personal
September 29, 2020
Las Vegas Students’ Personal Data Leaked, Post-Ransomware Attack
September 29, 2020
The package podman before version 2.1.0-1 is vulnerable to information disclosure.
September 29, 2020
The package firefox before version 81.0-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing, cross-site scripting and denial of service.
September 29, 2020
The package chromium before version 85.0.4183.121-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution, information disclosure and insufficient validation.
September 29, 2020
The package libvirt before version 6.5.0-2 is vulnerable to privilege escalation.
September 29, 2020
An update that solves 11 vulnerabilities and has one errata is now available.
September 29, 2020
An update that solves 10 vulnerabilities and has one errata is now available.
September 29, 2020
Telehealth Poll: How Risky Are Remote Doctor Visits?
September 29, 2020
2 egregious cloud security threats the CSA missed
September 29, 2020
McAfee seeks $2bn return to stock market after Intel unpleasantness
September 29, 2020
Windows 7 ‘Upgrade’ Emails Steal Outlook Credentials
September 28, 2020
Mac, Linux Users Now Targeted by FinSpy Variants
September 28, 2020
Universal Health Services Ransomware Attack Impacts Hospitals Nationwide
September 28, 2020
Joker Trojans Flood the Android Ecosystem
September 28, 2020
Twitter Warns Developers of API Bug That Exposed App Keys, Tokens
September 28, 2020
REvil ransomware crew dangles $1,000,000 cybercrime carrot
September 28, 2020
Should your employer know who you’re dating *outside* work?
September 28, 2020
Several security issues were fixed in iTALC.
September 28, 2020
libuv could be made to crash or execute arbitrary code if it received a specially crafted path.
September 28, 2020
Reading Time: ~ 2 min. “Ten years ago, you didn’t see state actors attacking [small businesses]. But it’s happening now,” warns George Anderson, product marketing director at Carbonite + Webroot, OpenText companies. Sadly, many of today’s managed service providers who serve small and medium-sized businesses now have to concern themselves with these very threats. Independent […]
September 28, 2020
ImageMagick could be made to crash if it opened a specially crafted file.
September 28, 2020
Several vulnerabilities were discovered in the Perl5 Database Interface (DBI). An attacker could trigger a denial-of-service (DoS) and possibly execute arbitrary code.
September 28, 2020
An update that solves one vulnerability and has one errata is now available.
September 28, 2020
An update that solves one vulnerability and has one errata is now available.
September 28, 2020
Are injection flaws the Bohemian Rhapsody of cybersecurity?
September 28, 2020
Putin to Trump: Let’s collude to stop election hacking
September 28, 2020
An update that solves one vulnerability and has 6 fixes is now available.
September 27, 2020
An update that fixes 7 vulnerabilities is now available.
September 27, 2020
grub2 updates for boothole vulnerabilities in f31/f32.
September 26, 2020
security update
September 26, 2020
x86 pv: Crash when handling guest access to MSR_MISC_ENABLE [XSA-333, CVE-2020-25602] (#1881619) Missing unlock in XENMEM_acquire_resource error path [XSA-334, CVE-2020-25598] (#1881616) race when migrating timers between x86 HVM vCPU-s [XSA-336, CVE-2020-25604] (#1881618) PCI passthrough code reading back hardware registers [XSA-337, CVE-2020-25595] (#1881587) once valid event
September 26, 2020
An update that fixes 7 vulnerabilities is now available.
September 26, 2020
Two issues have been found in yaws, a high performance HTTP 1.1 webserver written in Erlang.
September 26, 2020
Two issues have been found in nfdump, a netflow capture daemon. Both issues are related to either a buffer overflow or an integer overflow, which could result in a denial of service or a local code
September 26, 2020
An issue has been found in curl, a command line tool for transferring data with URL syntax. In rare circumstances, when using the multi API of curl in combination
September 26, 2020
An update that fixes four vulnerabilities is now available.
September 26, 2020
Bug Bounty FAQ: Top Questions, Expert Answers
September 26, 2020
An update that fixes one vulnerability is now available.
September 26, 2020
FortiGate VPN Default Config Allows MitM Attacks
September 25, 2020
security update
September 25, 2020
Industrial Cyberattacks Get Rarer but More Complex
September 25, 2020
Ring’s Flying In-Home Camera Drone Escalates Privacy Worries
September 25, 2020