Security fix for CVE-2019-14869
November 23, 2019
rebase to upstream version 8.1911.0 ————————————————- new modules available: * ClickHouse output * generic REST API http output * docker API input * misc. external program input (takes output of specified binary as log source)
November 23, 2019
An update that solves one vulnerability and has one errata is now available.
November 23, 2019
An update that fixes one vulnerability is now available.
November 23, 2019
Database with 1.2 billion people’s data leaked online without password
November 23, 2019
There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofx_sgml.cpp, as demonstrated by ofxdump.
November 23, 2019
It was discovered that pam-python, a PAM Module that runs the Python interpreter, has an issue in regard to the default environment variable handling of Python. This issue could allow for local root escalation in certain PAM setups.
November 23, 2019
ID Thieves Turn to Snail Mail as Juicy Target for Financial Crimes
November 22, 2019
Three Areas to Consider, to Focus Your Cyber-Plan
November 22, 2019
This update fixes CVE-2019-17545.
November 22, 2019
This update fixes CVE-2019-17545.
November 22, 2019
This update fixes CVE-2019-17545.
November 22, 2019
Update to latest stable (78.0.3904.97). This build contains a number of bug fixes and security updates. Changes can be viewed here: https://chromium.googles ource.com/chromium/src/+log/78.0.3904.86..78.0.3904.92?n=10000
November 22, 2019
Critical Flaws in VNC Threaten Industrial Environments
November 22, 2019
Type: Vulnerability. Multiple Asterisk Products are prone to an authorization-bypass vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. Asterisk Manager Interface is prone to an arbitrary command-execution vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. Asterisk Open Source is prone to a remote denial-of-service vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. Apache Shiro is prone to an information-disclosure vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. Linux Kernel is prone to an information-disclosure vulnerability and a denial-of-service vulnerability; fixes are availabl
November 22, 2019
Type: Vulnerability. Lexmark Services Monitor is prone to a directory-traversal vulnerability.
November 22, 2019
Type: Vulnerability. Apache Impala is prone to an authorization-bypass vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. ISC BIND is prone to a remote denial-of-service vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. Apache NiFi is prone to multiple information-disclosure vulnerabilities; fixes are available.
November 22, 2019
Type: Vulnerability. Cisco Email Security Appliance is prone to a remote security-bypass vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. IBM WebSphere Application Server is prone to a directory-traversal vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. IBM Cloud Pak System is prone to an information-disclosure vulnerability; fixes are available.
November 22, 2019
Reading Time: ~ 1 min. Webroot has evolved its secure login offering from a secondary security code to a full two-factor authentication (2FA) solution for both business and home users. Webroot’s 2FA has expanded in two areas. We have: Implemented a time-based, one-time password (TOTP) solution that generates a passcode which is active for only […]
November 22, 2019
Data-Enriched Profiles on 1.2B People Exposed in Gigantic Leak
November 22, 2019
VIDEO: “Not All Cybercriminals Are Evil Geniuses”
November 22, 2019
Download: 2019 Security Team Assessment Template
November 22, 2019
Google plans to take Android back to ‘mainline’ Linux kernel
November 22, 2019
Iran’s APT33 sharpens focus on industrial control systems
November 22, 2019
Raccoon Stealer Malware Scurries Past Microsoft Messaging Gateways
November 22, 2019
News Wrap: Amazon Ring Risks, Stalkerware, and D-Link Router Flaws
November 22, 2019
Reading Time: ~ 2 min. Shade Ransomware Takes Crown as Most Distributed Variant Over the course of 2019, one ransomware variant, known as Shade, has taken over 50 percent of market share for ransomware delivered via email. Otherwise known as Troldesh, this variant receives regular updates to further improve it’s encrypting and methods of generating […]
November 22, 2019
Google Will Award $1M-Plus to People Who Can Hack Titan M Security Chip
November 22, 2019
Why cryptocoin scams work, and how to avoid them
November 22, 2019
Convicted Nigerian fraudster keeps a-fraudin’ from behind bars
November 22, 2019
An update that fixes two vulnerabilities is now available.
November 22, 2019
An update that fixes two vulnerabilities is now available.
November 22, 2019
An update that fixes one vulnerability is now available.
November 21, 2019
An update that solves one vulnerability and has one errata is now available.
November 21, 2019
An update that fixes one vulnerability is now available.
November 21, 2019
An update that fixes two vulnerabilities is now available.
November 21, 2019
Senators Demand Amazon Disclose Ring Privacy Policies
November 21, 2019
Type: Vulnerability. Cisco IOS XR Software is prone to a security-bypass vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Unity Express is prone to a local command-injection vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Webex Centers are prone to an information-disclosure vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Email Security Appliance is prone to a remote security-bypass vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco SD-WAN Solution is prone to a cross-site request-forgery vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Stealthwatch Enterprise is prone to a cross-site scripting vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco DNA Spaces Connector is prone to a local command-injection vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Small Business RV Series Routers are prone to an information-disclosure vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Unified Communications Manager is prone to an SQL-injection vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Webex Teams for Windows is prone to a local arbitrary code-execution vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco DNA Spaces Connector is prone to a local privilege-escalation vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Multiple F5 BIG-IP Products are prone to multiple information-disclosure vulnerabilities; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Unified Communications Domain Manager is prone to an HTML-injection vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco DNA Spaces: Connector is prone to an SQL-injection vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Lenovo LenovoPaper software is prone to an unspecified local privilege-escalation vulnerability.
November 21, 2019
Type: Vulnerability. Lenovo System Interface Foundation is prone to multiple security vulnerabilities; fixes are available.
November 21, 2019
Type: Vulnerability. Multiple F5 BIG-IP Products are prone to a remote security vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Unbound IPSEC Module is prone to a command-injection vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Lenovo CCSDK is prone to an unspecified local privilege-escalation vulnerability.
November 21, 2019
Type: Vulnerability. Fortinet FortiOS is prone to a denial-of-service vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Multiple Fortinet products are prone to hard-coded cryptographic key vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Fortinet FortiOS is prone to a hardcoded cryptographic key vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Multiple Cloud Foundry Products are prone to a denial-of-service vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Lenovo ThinkPad USB-C Dock is prone to a unspecified denial-of-service vulnerability; fixes are available.
November 21, 2019
Microsoft Outlook for Android Bug Opens Door to XSS
November 21, 2019
Risk Level: Very Low. Type: Trojan.
November 21, 2019
Linux Webmin Servers Under Attack by Roboto P2P Botnet
November 21, 2019
Gnip Banking Trojan Shows Ongoing, Aggressive Development
November 21, 2019
DNS-over-HTTPS is coming to Windows 10
November 21, 2019
Android camera bug could have turned phones against their users
November 21, 2019
Official Monero site delivers malicious cash-grabbing wallet
November 21, 2019
Popular Apps on Google Play Store Remain Unpatched
November 21, 2019
Registers as “Default Print Monitor”, but is a malicious downloader. Meet DePriMon
ESET researchers have discovered a new downloader with a novel, not previously seen in the wild installation technique The post Registers as “Default Print Monitor”, but is a malicious downloader. Meet DePriMon appeared first on WeLiveSecurity
November 21, 2019
Smashing Security #155: Juicejacking, YouTube hacking, password slacking
November 21, 2019
Tories change Twitter name to ‘factcheckUK’ during live TV debate
November 20, 2019
Security Firms, Nonprofits Team to Fight Stalkerware
November 20, 2019
Mozilla Bug Bounty Program Doubles Payouts, Adds Firefox Monitor
November 20, 2019
security update
November 20, 2019
Apache Solr Bug Gets Bumped Up to High Severity
November 20, 2019
Type: Vulnerability. Multiple IBM Products are prone to a security bypass vulnerability; fixes are available.
November 20, 2019
Type: Vulnerability. Broadcom Brocade SANnav is prone to a security weakness; fixes are available.
November 20, 2019
Type: Vulnerability. Google Android is prone to multiple security-bypass vulnerabilities; fixes are available.
November 20, 2019
Type: Vulnerability. Schneider Electric Floating License Manager is prone to multiple security vulnerabilities; fixes are available.
November 20, 2019
Type: Vulnerability. Dell EMC iDRAC is prone to an unauthorized-access vulnerability; fixes are available.
November 20, 2019
Type: Vulnerability. Broadcom Brocade SANnav is prone to a security-bypass vulnerability; fixes are available.
November 20, 2019
Type: Vulnerability. Microsoft Outlook for Android is prone to a security vulnerability that may allow attackers to conduct spoofing attacks; fixes are available.
November 20, 2019
Type: Vulnerability. Atlassian Jira Service Desk Server and Jira Service Desk Data Center are prone to multiple security vulnerabilities; fixes are available.
November 20, 2019