March 2, 2020
An update that fixes two vulnerabilities is now available.
March 2, 2020
An update that solves 10 vulnerabilities and has two fixes is now available.
March 2, 2020
An update that fixes two vulnerabilities is now available.
March 2, 2020
TrickBot Adds ActiveX Control, Hides Dropper in Images
March 2, 2020
Walgreens Mobile App Leaks Prescription Data
March 2, 2020
RSA 2020 – Is your machine learning/quantum computer lying to you?
And how would you know if the algorithm was tampered with? The post RSA 2020 – Is your machine learning/quantum computer lying to you? appeared first on WeLiveSecurity
March 2, 2020
Let’s Encrypt issues one billionth free certificate
March 2, 2020
Ironpie robot vacuum can suck up your privacy
March 2, 2020
Several security issues were fixed in libarchive.
March 2, 2020
An update that fixes 8 vulnerabilities is now available.
March 2, 2020
An update that solves two vulnerabilities and has two fixes is now available.
March 1, 2020
An issue has been found in libapache2-mod-auth-openidc, an OpenID Connect authentication module for Apache. Due to insufficient validatation of URLs an Open Redirect vulnerability
March 1, 2020
An issues has been found in firebird2.5, an RDBMS based on InterBase 6.0. As UDFs can be used for a remote authenticated code execution (as user firebird), UDFs have been disabled in the default configuration
March 1, 2020
security update
February 29, 2020
An update that fixes one vulnerability is now available.
February 29, 2020
Israeli firm leaks database with addresses of millions of Americans
February 29, 2020
Updated wireshark packages fix security vulnerabilities: LTE RRC dissector memory leak. WiMax DLMAP dissector crash.
February 29, 2020
This update is based on upstream 5.5.6 and fixes atleast the following security vulnerability: A flaw was found in the way KVM hypervisor handled instruction emulation for the L2 guest when nested(=1) virtualization is enabled. In the
February 29, 2020
Updated hiredis packages fix security vulnerability: async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked (CVE-2020-7105).
February 29, 2020
Updated rsync packages fix security vulnerabilities: It was discovered that rsync incorrectly handled pointer arithmetic in zlib. An attacker could use this issue to cause rsync to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2016-9840,
February 29, 2020
Updated zsh packages fix security vulnerability: A privilege escalation vulnerability was discovered in zsh, whereby a user could regain a formerly elevated privelege level even when such an action should not be permitted (CVE-2019-20044).
February 29, 2020
The package chromium before version 80.0.3987.122-1 is vulnerable to multiple issues including arbitrary code execution and information disclosure.
February 29, 2020
Bruce Schneier Proposes ‘Hacking Society’ for a Better Tomorrow
February 28, 2020
Hackers leak up to 4 TB of OnlyFans content for download
February 28, 2020
It was discovered that libusbmuxd incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to expectations.
February 28, 2020
Beware secret lovers spreading Nemty ransomware
February 28, 2020
Israeli firm leaks addresses of millions of Americans & Europeans
February 28, 2020
RSAC 2020: Ransomware a ‘National Crisis,’ CISA Says, Ramps ICS Focus
February 28, 2020
Patrick Wardle: Apple Devices Hit With Recycled macOS Malware
February 28, 2020
Ransomware wipes evidence, lets suspected drug dealers walk free
February 28, 2020
Firefox rolling out DNS-over-HTTPS privacy by default in the US
February 28, 2020
Google has right to censor conservative nonprofit on YouTube
February 28, 2020
An update that fixes 5 vulnerabilities is now available.
February 28, 2020
An update that solves 9 vulnerabilities and has one errata is now available.
February 28, 2020
An update that solves two vulnerabilities and has two fixes is now available.
February 28, 2020
An update that fixes one vulnerability is now available.
February 28, 2020
Police lose evidence to Ryuk ransomware attack; suspects walk free
February 27, 2020
Google’s War on Android App Permissions, 60 Percent Successful
February 27, 2020
RSAC 2020: GM’s Transportation Future Hinges on Cybersecurity
February 27, 2020
security update
February 27, 2020
security update
February 27, 2020
kr00k – Billions of Wi-Fi devices affected by encryption vulnerability
February 27, 2020
An uninitialized pointer vulnerability was discovered in pure-ftpd, a secure and efficient FTP server, which could result in an out-of-bounds memory read and potential information disclosure.
February 27, 2020
How one man could have flooded your phone with Microsoft spam
February 27, 2020
Facial recognition company Clearview AI hit by data theft
The startup came under scrutiny after it emerged that it had amassed 3 billion photos from social media for facial recognition software The post Facial recognition company Clearview AI hit by data theft appeared first on WeLiveSecurity
February 27, 2020
IoT Insecurity: When Your Vacuum Turns on You
February 27, 2020
Slickwraps data breach earns scorn for all
February 27, 2020
RSA 2020 – Hacking humans
What the human battle against biological viruses can teach us about fighting computer infections – and vice versa The post RSA 2020 – Hacking humans appeared first on WeLiveSecurity
February 27, 2020
Brave beats other browsers in privacy study
February 27, 2020
Chrome 80 encryption change blocks AZORult password stealer
February 27, 2020
Facebook bans coronavirus ‘miracle cure’ ads
February 27, 2020
Did someone file your taxes before you?
With tax season – and tax scams – in full swing, here’s how fraudsters can steal your tax refund, and how you can avoid becoming a victim The post Did someone file your taxes before you? appeared first on WeLiveSecurity
February 27, 2020
Billions of Devices Open to Wi-Fi Eavesdropping Attacks
February 27, 2020
RSAC 2020: Smart Baby Monitor Vulnerable to Remote Hackers
February 27, 2020
Smashing Security #167: Coronavirus scams and an exaggerated lion
February 27, 2020
Top 10 worst countries for Internet freedom & censorship
February 26, 2020
RSAC 2020: Lack of Machine Learning Laws Open Doors To Attacks
February 26, 2020
Is bug hunting a viable career choice?
With earnings of top ethical hackers surpassing hundreds of thousands of dollars, some would say yes The post Is bug hunting a viable career choice? appeared first on WeLiveSecurity
February 26, 2020
Exaggerated Lion and Business Email Compromise – Don’t send that check!
February 26, 2020
Hackers Cashing In On Healthcare Industry Security Weaknesses
February 26, 2020
Departing MI5 chief: Break chat app crypto for us, kthxbai
February 26, 2020
Apple’s iOS pasteboard leaks location data to spy apps
February 26, 2020
LTE vulnerability allows impersonation of other mobile devices
February 26, 2020
KrØØk: Serious vulnerability affected encryption of billion+ Wi‑Fi devices
ESET researchers uncover a previously unknown security flaw allowing an adversary to decrypt some wireless network packets transmitted by vulnerable devices The post KrØØk: Serious vulnerability affected encryption of billion+ Wi‑Fi devices appeared first on WeLiveSecurity
February 26, 2020
Iranian APT Targets Govs With New Malware
February 26, 2020
Unpatched Security Flaws Open Connected Vacuum to Takeover
February 26, 2020
Stalkerware Attacks Increased 50 Percent Last Year, Report
February 26, 2020
Switch to Signal for encrypted messaging, EC tells staff
February 26, 2020
Taking a GPS tracker off your car isn’t ‘theft,’ court rules
February 26, 2020
An update that fixes one vulnerability is now available.
February 26, 2020
An update that fixes four vulnerabilities is now available.
February 26, 2020
An update that fixes three vulnerabilities is now available.
February 26, 2020
An update that fixes one vulnerability is now available.
February 26, 2020
It was discovered that pysaml2, a Python implementation of SAML to be used in a WSGI environment, was susceptible to XML signature wrapping attacks, which could result in a bypass of signature verification.
February 26, 2020
Updated squid packages fix security vulnerabilities: Jeriko One discovered that Squid incorrectly handled memory when connected to an FTP server. A remote attacker could possibly use this issue to obtain sensitive information from Squid memory (CVE-2019-12528).
February 26, 2020
Mystery zero-day in Chrome – update now!
February 25, 2020
RSAC 2020: Blockchain is ‘Garbage In’, Voting Needs Paper Ballots
February 25, 2020
security update
February 25, 2020
Google Patches Chrome Browser Zero-Day Bug, Under Attack
February 25, 2020