Menu

Category Archives: All

Everything

An update that fixes one vulnerability is now available.

An update that solves 14 vulnerabilities and has 90 fixes is now available.

An update that fixes four vulnerabilities is now available.

An update that solves one vulnerability and has one errata is now available.

Bots rigged Russian finale of ‘The Voice Kids’ talent show

An update is now available for Red Hat Quay 3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

Firms, stop sending out automated emails that look suspicious as hell!
Let adware be treated as malware, Canuck boffins declare after breaking open Wajam ad injector

gnome-desktop 3.30.2.3 release, fixing thumbnailer sandbox escape, CVE-2019-11460

Multiple vulnerabilities have been discovered in graphicsmagick, the image processing toolkit: CVE-2019-11473

A vulnerability was discovered in libspring-security-2.0-java, a modular Java/J2EE application security framework, when using SecureRandomFactoryBean#setSeed to configure a SecureRandom instance,

The update for ghostscript released as DLA-1792-1 uncovered an issue in cups-filters which was using the undocumented Ghostscript internal “pdfdict” now hidden in the ghostscript update. Updated cups-filters

* Fix rendering of emojis copy-pasted from GTK emoji chooser. * Fix space characters not being rendered with some CJK fonts. * Fix adaptive streaming playback with older GStreamer versions. * Set a maximum zoom level for pinch zooming gesture. * Fix navigation gesture to not interfere with scrolling. * Fix SSE2 detection at compile […]

CIA traitor spy thrown in the clink for selling secrets to China. Stack Overflow, TeamViewer admit: We were hacked…
Giga-hurts radio: Terrorists build Wi-Fi bombs to dodge cops’ cellphone jammers
WordPress WP Live Chat Support Plugin Fixes XSS Flaw
It’s not chicken feed: Million-dollar meal deal for livestock sabotaged by hackers… and, er, exchange rates
Ransomware ‘Remediation’ Firm Exposed: Researchers Weigh in on Paying
How Decoding Network Traffic Can Save Your Data Bacon

Reading Time: ~2 min. WhatsApp Exploited to Install Spyware through Calls A serious flaw has been discovered in the messaging app WhatsApp that would allow an attacker to install spyware on a victim’s device by manipulating the packets being sent during the call. Further disguising the attack, the malicious software could be installed without the […]

Get out of Huawei, it’s an avalanche of news from everyone’s favourite Chinese bogeyman

An update that fixes 6 vulnerabilities is now available.

The minified jquery library was broken in version 1.7.2+dfsg-3.2+deb8u6 due to an error during the build. This problem has now been fixed in version 1.7.2+dfsg-3.2+deb8u7

News Wrap: WhatsApp, Microsoft, Intel and Cisco Flaws
Google recalls Titan Bluetooth keys after finding security flaw
Hacking gang stole millions in cryptocurrency via SIM swaps
Europol arrests end GozNym banking malware gang
Trump seeks tales of social media bias – and your phone number

An update that fixes 8 vulnerabilities is now available.

Good heavens, is it time to patch Cisco kit again? Prime Infrastructure root privileges hole plugged
Freed whistleblower Chelsea Manning back in jail for refusing to testify before secret grand jury
Bank-account-raiding Goznym malware bust: Five suspects collared, five still on the run. $100m feared stolen

– [3.1.1](https://github.com/TYPO3/phar-stream-wrapper/releases/tag/v3.1.1) – [TYPO3-PSA-2019-007](https://typo3.org/security/advisory/typo3-psa-2019-007/) / [CVE-2019-11831](https://nvd.nist.gov/vuln/detail/CVE-2019-11831) – [TYPO3-PSA-2019-008](https://typo3.org/security/advisory/typo3-psa-2019-008/) / [CVE-2019-11830](https://nvd.nist.gov/vuln/detail/CVE-2019-11830) –

The plane, it’s ‘splained, falls mainly without the brain: We chat to boffins who’ve found a way to disrupt landings using off-the-shelf radio kit
The Future of Wi-Fi Security: Assessing Vulnerabilities in WPA3
Mobile Risks Boom in a Post-Perimeter World
Forbes Becomes Latest Victim of Magecart Payment Card Skimmer
Office 365 user security practices are woeful, yet it’s still ‘Microsoft’s fault’ when an org is breached
Survey: What should companies do to restore trust post-breach?

The ESET survey among thousands of people in Asia-Pacific (APAC) provides valuable insight into their perceptions of cyber-threats and various common aspects of online security The post Survey: What should companies do to restore trust post-breach? appeared first on WeLiveSecurity

$100 million GozNym cybercrime network dismantled as suspects charged
Forbes subscribers warned of Magecart threat skimming credit card details

An update that fixes 6 vulnerabilities is now available.

An update that solves 11 vulnerabilities and has 20 fixes is now available.

Cisco Service Provider, WebEx Bugs Offer Up Remote Code Execution
Cybercrime Gang Behind GozNym Banking Malware Dismantled
Facebook restores disabled ‘View As’ feature used in 2018 breach
Oh, the irony… Malware spread via Best of the Web security seals
Severe Linux kernel flaw found in RDS
San Francisco bans police use of facial recognition

An update that fixes one vulnerability is now available.

An update that solves four vulnerabilities and has 6 fixes is now available.

An update that fixes four vulnerabilities is now available.

An update that solves three vulnerabilities and has 8 fixes is now available.

An update that solves four vulnerabilities and has three fixes is now available.

An update that fixes 6 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

Smashing Security #128: Shackled ankles, photo scrapes, and SIM card swaps

An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

An update for rh-python35-python-jinja2 is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

This update provides the Intel 20190514 microcode release that adds the microcode side mitigations for the Microarchitectural Data Sampling (MDS, also called ZombieLoad attack) vulnerabilities in Intel processors that can allow attackers to retrieve data being processed inside a CPU.

Breaking news: Bank-card-slurping malware sneaks into Forbes’ mag subscription website
Amazon, Apple, Google & Microsoft issue patches to fix ZombieLoad bug

security update

security update

security update

security update

Google Titan Security Key Recalled After Bluetooth Pairing Bug
Titan-ic disaster: Bluetooth blunder sinks Google’s 2FA keys, free replacements offered

Type: Vulnerability. Microsoft Internet Explorer is prone to a security-bypass vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft SharePoint Server is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Azure Active Directory Connect is prone to a remote privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Office Access Connectivity Engine is prone to a remote code-execution vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft SharePoint Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft SharePoint Server is prone to a remote code-execution vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft .NET is prone to a remote denial-of-service vulnerability; fixes are available.

Type: Vulnerability. Microsoft SharePoint Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

We like transparency and we’re a CA, hackers hack all night and we log all day
Intel ZombieLoad Side-Channel Attack: 10 Takeaways
Hackers interrupt Eurovision webcast in Israel with missile attack alert

Reading Time: ~3 min. It’s a familiar story in tech: new technologies and shifting preferences raise new security challenges. One of the most pressing challenges today involves monitoring and securing all of the applications and data currently undergoing a mass migration to public and private cloud platforms. Malicious actors are motivated to compromise and control […]

Billions of Malicious Bot Attacks Take to Cipher-Stunting to Hide
Supreme Court says secret UK spy court’s judgments can be overruled after all

An update for ruby is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Ice Hockey World Championship: The risks of free live streaming

You think you’re watching the games for free, but are you sure that’s the case? Let’s review some of the risks that may come with free live streaming websites The post Ice Hockey World Championship: The risks of free live streaming appeared first on WeLiveSecurity

UPDATE NOW! Critical, remote, ‘wormable’ Windows vulnerability
Microsoft fixes Intel ZombieLoad bug with Patch Tuesday updates
MI5 slapped on the wrist for ‘serious’ surveillance data breach
Israeli TV’s Eurovision webcast hijacked by hackers. Hamas blamed
A deeper look at the MDS vulnerability
Modern IT security: Sometimes caring is NOT sharing