February 5, 2020
Coronavirus “safety measures” email is a phishing scam
PayPal SMS scams – don’t fall for them!
February 5, 2020
WhatsApp Bug Allows Malicious Code-Injection, One-Click RCE
February 5, 2020
Critical Cisco ‘CDPwn’ Protocol Flaws Explained: Podcast
February 5, 2020
Critical Cisco ‘CDPwn’ Flaws Break Network Segmentation
February 5, 2020
An update that solves two vulnerabilities and has one errata is now available.
February 5, 2020
Several security issues were fixed in systemd.
February 5, 2020
Someone else may have your videos, Google tells users
February 5, 2020
Critical Android flaws patched in February bulletin
February 5, 2020
Twitter admits to raid on users’ phone numbers
February 5, 2020
How to catch a cybercriminal: Tales from the digital forensics lab
What is it like to defeat cybercrime? A peek into how computer forensics professionals help bring cybercriminals to justice. The post How to catch a cybercriminal: Tales from the digital forensics lab appeared first on WeLiveSecurity
February 5, 2020
An update that fixes one vulnerability is now available.
February 5, 2020
OpenSMTPD could be made to run programs as root if it received specially crafted input over the network.
February 5, 2020
ipa: Denial of service in IPA server due to wrong use of ber_scanf() (CVE-2019-14867) * ipa: Batch API logging user passwords to /var/log/httpd/error_log (CVE-2019-10195) SL7 x86_64 ipa-client-4.6.5-11.el7_7.4.x86_64.rpm ipa-debuginfo-4.6.5-11.el7_7.4.x86_64.rpm ipa-server-4.6.5-11.el7_7.4.x86_64.rpm ipa-server-trust-ad-4.6.5-11.el7_7.4.x86_64.rpm noarch ipa-client-co [More…]
February 5, 2020
hw: TSX Transaction Asynchronous Abort (TAA) (CVE-2019-11135) * QEMU: slirp: heap buffer overflow during packet reassembly (CVE-2019-14378) SL7 x86_64 qemu-img-1.5.3-167.el7_7.4.x86_64.rpm qemu-kvm-1.5.3-167.el7_7.4.x86_64.rpm qemu-kvm-common-1.5.3-167.el7_7.4.x86_64.rpm qemu-kvm-debuginfo-1.5.3-167.el7_7.4.x86_64.rpm qemu-kvm-tools-1.5.3-167.el7_7.4.x86_64.rpm – Scien [More…]
February 5, 2020
Welp – Google sent your photos & videos to strangers
February 4, 2020
Community Housing Nonprofit Hit with $1.2M Loss in BEC Scam
February 4, 2020
Ransomware Attack Hinders Toll Group Operations
February 4, 2020
security update
February 4, 2020
7 best practices for managing a multi-cloud environment
February 4, 2020
Two Critical Android Bugs Get Patched in February Update
February 4, 2020
Medtronic Patches Implanted Device, CareLink Programmer Bugs
February 4, 2020
Israeli government’s Gov.il DNS server found vulnerable
February 4, 2020
Open-Source Security Projects: Choosing a Brandable .com Domain>
February 4, 2020
Electric scooters vulnerable to remote hacks
A helmet may not be enough to keep you safe(r) while riding an e-scooter The post Electric scooters vulnerable to remote hacks appeared first on WeLiveSecurity
February 4, 2020
Twitter API Abused to Uncover User Identities
February 4, 2020
An update that fixes three vulnerabilities is now available.
February 4, 2020
An update that fixes three vulnerabilities is now available.
February 4, 2020
An update that fixes three vulnerabilities is now available.
February 4, 2020
NIST tests methods of recovering data from smashed smartphones
February 4, 2020
Use Off-Facebook tool to stop Facebook from tracking your activities
February 4, 2020
Man admits hacking Nintendo, leaking details of Switch games console
February 4, 2020
Twitter hands over student’s account to his college
February 4, 2020
Several security issues were fixed in SpamAssassin.
February 4, 2020
Google’s Super Bowl ad will make you cry. Or wince.
February 4, 2020
Facebook privacy settings: Protect your data with these tips
As Facebook turns 16, we look at how to keep your personal information safe from prying eyes The post Facebook privacy settings: Protect your data with these tips appeared first on WeLiveSecurity
February 4, 2020
Google’s OpenSK lets you BYOSK – burn your own security key
February 4, 2020
An update that fixes 5 vulnerabilities is now available.
February 4, 2020
An update that fixes one vulnerability is now available.
February 4, 2020
AZORult Campaign Adopts Novel Triple-Encryption Technique
February 3, 2020
security update
February 3, 2020
Tesla Autopilot Duped By ‘Phantom’ Images
February 3, 2020
Ashley Madison Breach Extortion Scam Targets Hundreds
February 3, 2020
Man uses 99 smartphones to cause traffic jam on Google Maps
February 3, 2020
Would you get hooked by a phishing scam? Test yourself
As the tide of phishing attacks rises, improving your scam-spotting skills is never a bad idea The post Would you get hooked by a phishing scam? Test yourself appeared first on WeLiveSecurity
February 3, 2020
An update that solves 10 vulnerabilities and has 11 fixes is now available.
February 3, 2020
Apple proposes simple security upgrade for SMS 2FA codes
February 3, 2020
Coronavirus – hackers exploit fear of infection to spread malware
February 3, 2020
FTC warns VoIP providers that help robocallers: we can and will sue
February 3, 2020
TrickBot Switches to a New Windows 10 UAC Bypass to Evade Detection
February 3, 2020
Fraudsters posed as art dealer, bilked museum for millions
February 3, 2020
Google launches open-source security key project, OpenSK
February 3, 2020
Sudo could allow unintended access to the administrator account.
February 3, 2020
git: arbitrary code execution via .gitmodules (CVE-2018-17456) SL6 x86_64 git-1.7.1-10.el6_10.x86_64.rpm git-daemon-1.7.1-10.el6_10.x86_64.rpm git-debuginfo-1.7.1-10.el6_10.x86_64.rpm i386 git-1.7.1-10.el6_10.i686.rpm git-daemon-1.7.1-10.el6_10.i686.rpm git-debuginfo-1.7.1-10.el6_10.i686.rpm noarch emacs-git-1.7.1-10.el6_10.noarch.rpm emacs-git-el-1.7.1- [More…]
February 3, 2020
Several security issues were fixed in the kernel.
February 3, 2020
An update for git is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 3, 2020
security update
February 2, 2020
Fixes **CVE-2017-18189**.
February 2, 2020
This update fixes CVE-2020-6851.
February 1, 2020
This update fixes CVE-2020-6851.
February 1, 2020
Fix a potential out of bounds write when checking a maliciously corrupted file system. This is probably not exploitable on 64-bit platforms, but may be exploitable on 32-bit binaries depending on how the compiler lays out the stack variables. (Addresses CVE-2019-5188) A maliciously corrupted file systems can trigger buffer overruns in the quota code used […]
February 1, 2020
security update
February 1, 2020
January 2020 CPU security update. See http://mail.openjdk.java.net/pipermail/jdk8u-dev/2020-January/010979.html https://openjdk.java.net/groups/vulnerability/advisories/2020-01-14
February 1, 2020
Update to Samba 4.11.6 —- Update to Samba 4.11.5 – Security fixes for CVE-2019-14902, CVE-2019-14907 and CVE-2019-19344
February 1, 2020
A stack-based buffer overflow vulnerability in sudo, a program designed to provide limited super user privileges to specific users, triggerable when configured with the pwfeedback option enabled. An unprivileged user
February 1, 2020
Joe Vennix discovered a stack-based buffer overflow vulnerability in sudo, a program designed to provide limited super user privileges to specific users, triggerable when configured with the “pwfeedback” option enabled. An unprivileged user can take advantage of this flaw to obtain
February 1, 2020
A heap-based buffer overflow vulnerability was discovered in the idn2_to_ascii_4i() function in libidn2, the GNU library for Internationalized Domain Names (IDNs), which could result in denial of service, or the execution of arbitrary code when processing a long
February 1, 2020
An issue was found in the IonMonkey JIT compiler of the Mozilla Firefox web browser which could lead to arbitrary code execution. For Debian 8 “Jessie”, this problem has been fixed in version
February 1, 2020
security update
February 1, 2020
security update
February 1, 2020
Advanced Obfuscation Marks Widespread Info-Stealing Campaign
January 31, 2020
Evil Corp Returns With New Malware Infection Tactic
January 31, 2020
Cyber criminals using Coronavirus emergency to spread malware
January 31, 2020
In Qt5’s plugin loader code as found in qtbase-opensource-src, it was possible to (side-)load plugins from “the” local folder in addition to a system-widely defined library path.
January 31, 2020
Iranian Hackers Target U.S. Gov. Vendor With Malware
January 31, 2020
* Fix issues while trying to play a video on NextCloud. * Make sure the GL video sink uses a valid WebKit shared GL context. * Fix vertical alignment of text containing arabic diacritics. * Fix build with icu 65.1. * Fix page loading errors with websites using HSTS. * Fix web process crash when […]
January 31, 2020
Reading Time: ~ 2 min. Indonesian Magecart Hackers Arrested At least three individuals were arrested in connection to the infamous Magecart information stealing malware. Thanks to the combined efforts of several international law enforcement agencies, numerous servers issuing commands to awaiting Magecart scripts have been taken down in both Indonesia and Singapore. While these are […]
January 31, 2020
Top 10 Best Writing Tools
January 31, 2020
Several vulnerabilities were fixed in libjackson-json-java. CVE-2017-7525
January 31, 2020
Travelex hobbles back online, one month after ransomware hit it hard
January 31, 2020
Serious Security – How ‘special case’ code blew a hole in OpenSMTPD
January 31, 2020
Zero Day Initiative Bug Hunters Rake in $1.5M in 2019
January 31, 2020