May 5, 2020
Reading Time: ~ 3 min. Your password passing habit may not be as be as harmless as you think. And yes, that includes Netflix login info too. That’s one finding to come out of our newly released study of 2020’s Most (and Least) Cyber-Secure States. In this year’s analysis of the cyber readiness of all […]
May 5, 2020
A Denial of Service (DoS) vulnerability was discovered in the network time protocol server/client, ntp. ntp allowed an “off-path” attacker to block unauthenticated
May 5, 2020
An update for sqlite is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 5, 2020
Update to Samba 4.12.2
May 5, 2020
Update to Samba 4.12.2
May 5, 2020
security update
May 4, 2020
A regression has been found in the patch for CVE-2016-10711 of pound, a reverse proxy, load balancer and HTTPS front-end for Web servers. Without the fix pound can be tricked to use 100% CPU.
May 4, 2020
Several vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in HTTP request smuggling and code execution in the AJP connector (disabled by default in Debian).
May 4, 2020
Tarkett floored by cyber attack
May 4, 2020
Uncle Sam to agencies: No encrypted DNS for you!
May 4, 2020
Monday review – the hot 11 stories of the week
May 4, 2020
An update for cri-o is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 4, 2020
An update for haproxy is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 4, 2020
An update that fixes two vulnerabilities is now available.
May 3, 2020
An update that fixes four vulnerabilities is now available.
May 3, 2020
Ghost blogging platform suffers security breach
May 3, 2020
A vulnerability was discovered in mailman. GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against
May 3, 2020
New seamonkey packages are available for Slackware 14.2 and -current to fix security issues.
May 3, 2020
An update that fixes 5 vulnerabilities is now available.
May 3, 2020
A security flaw was found on rubygem-json prior to 2.3.0 which was now assigned as CVE-2020-10663. This new rpm contains backport fixes for this issue.
May 3, 2020
Update to latest upstream OpenVPN 2.4.9 release. It contains a security fix for CVE-2020-11810. This security issue is quite hard to abuse, requiring a fairly precise timing attack combined with guessing a just assigned peer-id reference. If successful, only a single client just initiating a new connection will experience a denial of service situation. This […]
May 3, 2020
security update
May 2, 2020
An update that fixes two vulnerabilities is now available.
May 2, 2020
An update that solves one vulnerability and has two fixes is now available.
May 2, 2020
A vulnerability was discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. LDAP search filters with nested boolean expressions can result in denial of service (slapd daemon
May 2, 2020
The 5.6.8 stable kernel update contains a number of important fixes across the tree.
May 2, 2020
The 5.6.8 stable kernel update contains a number of important fixes across the tree.
May 1, 2020
The 5.6.8 stable kernel update contains a number of important fixes across the tree.
May 1, 2020
security update
May 1, 2020
Sextortion scammers still shilling with stolen passwords
The email includes the potential victim’s password as evidence of a hack, but there is more than meets the eye The post Sextortion scammers still shilling with stolen passwords appeared first on WeLiveSecurity
May 1, 2020
Reading Time: ~ 3 min. Anyone who has spent late nights scrolling through their social media feed or grinding on video games knows one thing is true: Technology can be a good thing, but only in moderation. Like too much of anything, spending a lot of time on the internet or social media can lead […]
May 1, 2020
Reading Time: ~ 2 min. As Oil Prices Drop, Hackers Take Aim at Producers With the recent crash in oil prices, and supply rapidly piling up, a new spear phishing campaign has begun targeting executives at several major oil producers. A massive number of emails started being distributed in late March, without the telltale signs […]
May 1, 2020
An update that solves two vulnerabilities and has one errata is now available.
May 1, 2020
Several vulnerabilities have been discovered in otrs2 (Open source Ticket Request System)
May 1, 2020
An update that fixes one vulnerability is now available.
May 1, 2020
OpenJDK 14 April CPU update
May 1, 2020
Security fix for CVE-2020-5260 and CVE-2020-11008 CVE-2020-5260 – From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.4.txt): > With a crafted URL that contains a newline in it, the credential > helper machinery can be fooled to give credential information for > a wrong host. The
May 1, 2020
Update to 2.9.10 * Fix CVE-2019-19956, CVE-2019-20388 and CVE-2020-7595
May 1, 2020
Microsoft Sway Abused in Office 365 Phishing Attack
April 30, 2020
Salt Bugs Allow Full RCE as Root on Cloud Servers
April 30, 2020
security update
April 30, 2020
security update
April 30, 2020
security update
April 30, 2020
security update
April 30, 2020
security update
April 30, 2020
ESET Threat Report
A view of the Q1 2020 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts The post ESET Threat Report appeared first on WeLiveSecurity
April 30, 2020
“Zero-click” mobile phone attacks – and how to avoid them
April 30, 2020
New Android Malware Targets PayPal, CapitalOne App Users
April 30, 2020
It was discovered that there was a integer signedness error in the miniupnpc UPnP client that could allow remote attackers to cause a denial of service attack.
April 30, 2020
An issue has been found in pound, A request smuggling vulnerability was discovered in pound, a everse proxy, load balancer and HTTPS front-end for Web servers, that may allow
April 30, 2020
Two issues have been found in w3m, WWW browsable pager with excellent tables/frames support.
April 30, 2020
An issue has been found in yodl, a pre-document language. Hanno Bock discovered that there was a buffer over-read vulnerability.
April 30, 2020