Menu

Category Archives: All

Everything

Microsoft claims to love open source – this alleged leak of Windows XP code is probably not what it had in mind, tho
Spain’s highway agency is monitoring speeding hotspots using bulk phone location data
Ray‑Ban parent company reportedly suffers major ransomware attack

There is no evidence that cybercriminals were also able to steal customer data The post Ray‑Ban parent company reportedly suffers major ransomware attack appeared first on WeLiveSecurity

Blast from the past! Windows XP source code allegedly leaked online
Microsoft Kills 18 Azure Accounts Tied to Nation-State Attacks

An update that solves one vulnerability and has one errata is now available.

Several security issues were fixed in Gnuplot.

Multiple security issues were discovered in MediaWiki, a website engine for collaborative work: SpecialUserRights could leak whether a user existed or not, multiple code paths lacked HTML sanitisation allowing for cross-site scripting and TOTP validation applied insufficient rate

Sanitize could be made to perform XSS attacks if it received specially crafted input.

Disable pkcs11 related test case running into GnuTLS locking bug

CVE-2020-12100: Parsing mails with a large number of MIME parts could have resulted in excessive CPU usage or a crash due to running out of stack memory. CVE-2020-12673: Dovecot’s NTLM implementation does not correctly check message buffer size, which leads to reading past allocation which can lead to crash. CVE-2020-10967: lmtp/submission:

The Windows XP and Windows Server 2003 source code leaks online
Big US election coming up, security is vital and, oh look… a federal agency just got completely pwned for real
Want to stop cybercrimes tearing through your network? First check your privileges
You know that Microsoft ZeroLogon bug you’ve been dragging your feet on? It’s getting pwned in the wild now
Feds Hit with Successful Cyberattack, Data Stolen
Cisco Patch-Palooza Tackles 29 High-Severity Bugs
Doppelpaymer ransomware crew fingered for attack on German hospital that caused death of a patient
We need to talk about criminal hackers using Cobalt Strike, says Cisco Talos
Free Apple iPhone 12? Chatbot Scam Spreads Via Texts
179 arrested in massive dark web bust

The sting is said to be the US Government’s largest operation targeting crime in the internet’s seedy underbelly The post 179 arrested in massive dark web bust appeared first on WeLiveSecurity

Wondering how to tell the world you’ve been hacked? Here’s a handy guide from infosec academics

Reading Time: ~ 5 min. Guest blog by Mit Patel, Managing Director of London based IT Support company, Netstar. In this article, Webroot sits down with Mit Patel, Managing Director of London-based MSP partner, Netstar, to discuss the topic of remote work during a pandemic and tips to stay cyber resilient. Why is it important […]

Alien Android Banking Trojan Sidesteps 2FA

An update that solves 6 vulnerabilities and has two fixes is now available.

An update that fixes 14 vulnerabilities is now available.

Microsoft warns hackers are actively targeting Zerologon vulnerability. Patch pronto!
UK ICO fines biz profiteering from COVID-19 crisis by sending unsolicited marketing texts to Joe Public

Several security issues were fixed in SPIP.

Instagram photo flaw could have helped hackers spy via users’ cameras and microphones

An update that fixes 19 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that contains security fixes can now be installed.

Smashing Security podcast #197: Greedy bosses, game cheats, and virtual beheadings
Ex-eBay global intel staffers to admit they cyberstalked online tat bazaar’s critics – who got pig heads, funeral wreath, and more in the mail
Zerologon Patches Roll Out Beyond Microsoft
Gamer Credentials Now a Booming, Juicy Target for Hackers
Doppelpaymer ransomware crew fingered over attack on German hospital that allegedly caused death of a patient
Critical Industrial Flaws Pose Patching Headache For Manufacturers
CISA: LokiBot Stealer Storms Into a Resurgence
OldGremlin Ransomware Group Bedevils Russian Orgs

An update that fixes 19 vulnerabilities is now available.

Microsoft leaks 6.5TB in Bing search data via unsecured Elastic server. *Insert ‘Wow… that much?’ joke here*

RDFLib could be made to made to execute arbitrary code if it were running in a directory with a specially crafted file.

– New upstream version (81.0)

Security fixes for CVE-2020-1472

Fix CVE-2020-25219

Fix for #1876738 and #1876689

Rogue Shopify staff accessed customer records, says ecommerce platform investigating security breach

Reading Time: ~ 4 min. Phishing has been around for ages and continues to be one of the most common threats that businesses and home users face today. But it’s not like we haven’t all been hearing about the dangers of phishing for years. So why do people still click? That’s what we wanted to […]

Proposed US fix for Boeing 737 Max software woes does not address Ethiopian crash scenario, UK pilot union warns
Your latest security headache? Ed from accounting using his kid as an unpaid helpdesk
FBI boasts of dark-web drug bust: 179 collared around the world, $6.5m in cash and 500kg of narcotics seized

Reading Time: ~ 2 min. Magecart Launches Largest E-commerce Attack to Date Roughly 2000 e-commerce sites were compromised in the latest Magecart campaign targeting an out-of-date version of Magento software. It’s believed an additional 95,000 sites that haven’t patched to the latest Magento version could also be targeted by the payment skimming malware. The campaign […]

As you’re scrambling to patch the scary ZeroLogon hole in Windows Server, don’t forget Samba – it’s also affected
It’s been a vintage year for bug bounty hunters, says HackerOne as it boasts of $40m+ passing through its treasure chests
Google Chrome Bugs Open Browsers to Attack
Known Citrix Workspace Bug Open to New Attack Vector
New tool helps companies assess why employees click on phishing emails

NIST’s tool can help organizations improve the testing of their employees’ phish-spotting prowess The post New tool helps companies assess why employees click on phishing emails appeared first on WeLiveSecurity

Mozilla fixes flaw that let attackers hijack Firefox for Android via Wi‑Fi

Attackers could have exploited the flaw to steal victims’ login credentials or install malware on their devices The post Mozilla fixes flaw that let attackers hijack Firefox for Android via Wi‑Fi appeared first on WeLiveSecurity

Microsoft Overhauls Patch Tuesday Security Update Guide
Firefox 81 Release Kills High-Severity Code-Execution Bugs
Activision Refutes Claims of 500K-Account Hack

An update that solves four vulnerabilities and has one errata is now available.

Google Cloud Buckets Exposed in Rampant Misconfiguration

Reading Time: ~ 4 min. People’s fears and fantasies about artificial intelligence predate even computers. Before the term was coined in 1956, computing pioneer Alan Turing was already speculating about whether machines could think. By 1997 IBM’s Deep Blue had beaten chess champion Gary Kasparov at his own game, prompting hysterical headlines and the game […]

Ransomware attack foiled, but details of 540,000 sports referees still stolen by hackers
Securing a Linux Web Server: A Primer>
The new BLESA Bluetooth security flaw can keep billions of devices vulnerable>

An update that fixes 19 vulnerabilities is now available.

An update that solves four vulnerabilities and has one errata is now available.

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

Activision denies reports 500,000 Call of Duty accounts have been hacked

Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet.

Several security issues were fixed in FreeImage.

UK Parliament’s human rights committee pushes for better protections of coronavirus contact-tracing data in law
This year’s biggest security flaws – coming soon to a screen near you
Does your business have a Well-Known URL for changing passwords? It should!
‘I don’t want to see another computer for the rest of my life’… Brit Dark Overlord cyber-extortionist thrown in an American clink for five years
Contractor convicted of pinching supercomputer cycles to mine cryptocurrency
TANSTAAFL! The Tragedy of the Commons Meets Open-Source Software>
Fileless Malware Tops Critical Endpoint Threats for 1H 2020
Announcement of the passing of Jari Fredriksson>
Unsecured Microsoft Bing Server Leaks Search Queries, Location Data
DHS Issues Dire Patch Warning for ‘Zerologon’
Firefox for Android Bug Allows ‘Epic Rick-Rolling’
Android Malware Bypasses 2FA And Targets Telegram, Gmail Passwords

An update that fixes one vulnerability is now available.

MP promises to grill UK.gov over revelations that Uber handed ‘2,000 pieces’ of user data to London cops a year
Russians charged for $16.8m crypto-coin heist, but traders warned their cash is only as safe as their security is tight
I’m not interested in this Nigerian restaurant’s emails…

pam_tacplus could be made to expose sensitive information.

An update that fixes 14 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that solves one vulnerability and has one errata is now available.

Tesla wins defamation counterclaim against Gigafactory whistleblower
WFH is the new religion – though blind faith isn’t enough to keep your infrastructure secure
US cybersecurity agency issues super-rare emergency directive to patch Windows Server flaw ASAP
Amazon staffers took bribes, manipulated marketplace, leaked data including search algorithms – DoJ claims