Menu

Category Archives: Security

Articles about security

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

security update

security update

security update

ESET Threat Report T3 2022

A view of the T3 2022 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts The post ESET Threat Report T3 2022 appeared first on WeLiveSecurity

Bungling Optus scammer was no criminal mastermind
Smashing Security podcast #308: Jail after VPN fail, criminal messaging apps, and wolf-crying watches

The container suse/sle15 was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

The container bci/ruby was updated. The following patches have been included in this update:

The container suse/rmt-server was updated. The following patches have been included in this update:

The container suse/rmt-nginx was updated. The following patches have been included in this update:

Codebreakers decipher Mary, Queen of Scots’ secret letters 436 years after her execution
Uncle Sam wants to strip the IoS out of IoT with light crypto
Among the thousands of ESXiArgs ransomware victims? FBI and CISA to the rescue

security update

security update

security update

Into the void: Your tech and security in digital darkness

No internet, perfect security? Two ESET researchers perform a thought experiment where they consider the implications of being plunged into digital darkness. The post Into the void: Your tech and security in digital darkness appeared first on WeLiveSecurity

Scammers steal $4 million in crypto during face-to-face meeting

Helmut Grohne discovered a flaw in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. The backports of fixes for CVE-2022-3437 accidentally inverted important memory comparisons in the arcfour-hmac-md5 and rc4-hmac integrity check

This release fixes various issues in shim bootloader and updates it to a supported version. Older versions of the shim may eventually be blocked by Secure Boot, so it is strongly advised for Secure Boot enabled systems to upgrade to this newer version to keep the system bootable.

I discovered a flaw in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. The backports of fixes for CVE-2022-3437 accidentally inverted important memory comparisons in the arcfour-hmac-md5 and rc4-hmac integrity check handlers for gssapi,

The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:

The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:

Suspect in Finnish psychotherapy center blackmail hack arrested

An update that fixes two vulnerabilities is now available.

Online safety laws: What’s in store for children’s digital playgrounds?

As children’s safety and privacy online becomes a matter of increasing urgency, lawmakers around the world push ahead on new regulations in the digital realm The post Online safety laws: What’s in store for children’s digital playgrounds? appeared first on WeLiveSecurity

History of Malware on Linux and What’s Being Done to Stop It

Red Hat OpenShift Container Platform release 4.11.26 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

The container bci/python was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

Eurocops shut down Exclu encrypted messaging app, arrest dozens

Jan-Niklas Sohn, working with Trend Micro Zero Day Initiative, discovered a vulnerability in the X.Org X server. A potential use after free mighty result in local privilege escalation if

It was discovered that there were a number of issues in graphite-web, a tool provide realtime graphing of system statistics etc. A series of cross-site scripting (XSS) vulnerabilties existed that

NULL pointer dereferences in op_get_data() and op_open1() in opusfile.c (CVE-2022-47021) References: – https://bugs.mageia.org/show_bug.cgi?id=31505

Embarrassment as US cyber ambassador’s Twitter account is hacked
Here’s a list of proxy IPs to help block KillNet’s DDoS bots

security update

Ikeda Soji reported that libhtml-stripscripts-perl, a Perl module for removing scripts from HTML, is prone to a regular expression denial of service, due to catastrophic backtracking for HTML content with specially crafted style attributes.

How to remove yourself from the internet and from people search sites
Ex-Ubiquiti worker pleads guilty to data theft, extortion, and smear plot
Hackers hit Vesuvius, UK engineering company shuts down affected systems
Keeping unstructured data safe and sound
The tech leader’s guide to 2023

EditorConfig Core C could be made to crash or run programs if it received specially crafted input.

Trust, not tech, is holding back a safer internet
School laptop auction devolves into extortion allegation
Ransomware scum launch wave of attacks on critical, but old, VMWare ESXi vuln

Several security issues were fixed in Thunderbird.

USN-5825-1 caused some minor regressions in PAM.

USN-5816-1 caused some minor regressions in Firefox.

Have we learnt nothing from SolarWinds supply chain attacks? Not yet it appears

Security fix for CVE-2022-4510

# New in release [OpenJDK 8u362](https://bit.ly/openjdk8u362) (2023-01-17) ## CVEs Fixed – CVE-2023-21830 – CVE-2023-21843 ## Security Fixes – JDK-8285021: Improve CORBA communication – JDK-8286496: Improve Thread labels – JDK-8288516: Enhance font creation – JDK-8289350: Better media supports – JDK-8293554: Enhanced DH Key Exchanges – JDK-8293598: Enhance InetAddress

# New in release [OpenJDK 11.0.18](https://bit.ly/openjdk11018) (2023-01-17) ## CVEs Fixed – CVE-2023-21835 – CVE-2023-21843 ## Security Fixes – JDK-8286070: Improve UTF8 representation – JDK-8286496: Improve Thread labels – JDK-8287411: Enhance DTLS performance – JDK-8288516: Enhance font creation – JDK-8289350: Better media supports – JDK-8293554: Enhanced DH Key Exchanges

# New in release [OpenJDK 17.0.6](https://bit.ly/openjdk1706) (2023-01-17) ## CVEs Fixed – CVE-2023-21835 – CVE-2023-21843 ## Security Fixes – JDK-8286070: Improve UTF8 representation – JDK-8286496: Improve Thread labels – JDK-8287411: Enhance DTLS performance – JDK-8288516: Enhance font creation – JDK-8289350: Better media supports – JDK-8293554: Enhanced DH Key Exchanges

# New in release OpenJDK 19.0.2 (2023-01-17) ## CVEs Fixed * CVE-2023-21835 * CVE-2023-21843 ## Security Fixes – JDK-8286070: Improve UTF8 representation – JDK-8286496: Improve Thread labels – JDK-8287411: Enhance DTLS performance – JDK-8288516: Enhance font creation – JDK-8293554: Enhanced DH Key Exchanges – JDK-8293598: Enhance InetAddress address handling – JDK-8293717: Objective

Rebase to sudo 1.9.12p2 – security fix for CVE-2023-22809

Key takeaways from ESET’s new APT Activity Report – Week in security with Tony Anscombe

As our latest APT Activity Report makes abundantly clear, the threat of cyberespionage and stealthy attacks remains very real The post Key takeaways from ESET’s new APT Activity Report – Week in security with Tony Anscombe appeared first on WeLiveSecurity

Red Hat OpenShift sandboxed containers: Peer-pods technical deep dive
Red Hat OpenShift sandboxed containers: Peer-pods solution overview
Red Hat OpenShift sandboxed containers: Peer-pods hands-on
CSAF VEX documents now generally available

An update that fixes one vulnerability is now available.

Iran crew stole Charlie Hebdo database, says Microsoft

The 6.1.9 stable kernel update contains a number of important fixes across the tree.

Update to version 1.23.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.23.0 Additionally, this update was built with a version of golang that addresses CVE-2022-41717, and it fixes the installation of icon files.

The 6.1.9 stable kernel update contains a number of important fixes across the tree.

Update to version 1.23.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.23.0 Additionally, this update was built with a version of golang that addresses CVE-2022-41717, and it fixes the installation of icon files.

HeadCrab bots pinch 1,000+ Redis servers to mine coins
Fast-evolving Prilex POS malware can block contactless payments
Guy accused of wrecking crypto exchange now hauled into court

Several security issues were fixed in LibTIFF.

Several security issues were fixed in Long Range ZIP.

Several security issues were fixed in Apache HTTP Server.

Is that survey real or fake? How to spot a survey scam

“Can I tell a legitimate survey apart from a fake one?” is the single most important question you need to answer for yourself before taking any surveys online The post Is that survey real or fake? How to spot a survey scam appeared first on WeLiveSecurity

Another RAC staffer nabbed for storing and sharing road accident data
How multicloud changes devops
LockBit claims responsibility for ION ransomware attack but US/UK hounds are sniffing
Chinese ‘surveillance balloon’ over US causes fearful gasbagging

The newest upstream commit Security fix for CVE-2023-0288

Former Ubiquiti dev pleads guilty in data theft and extortion case

Update to 109.0.5414.119. Fixes the following security issues: CVE-2023-0471 CVE-2023-0472 CVE-2023-0473 CVE-2023-0474

New openssh packages are available for Slackware 15.0 and -current to fix security issues.

security update

security update

security update

security update

Malvertising attacks are distributing .NET malware loaders
Less is more: Conquer your digital clutter before it conquers you

Lose what you don’t use and other easy ways to limit your digital footprint and strengthen your online privacy and security The post Less is more: Conquer your digital clutter before it conquers you appeared first on WeLiveSecurity

Romance fraud losses rose 91% during the pandemic, claims UK’s TSB bank
Super Bock says ‘cyber’ nasty ‘disrupting computer services’

The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:

Rebuild for CVE-2022-41717 in golang.

Fix CVE-2022-47021

new upstream version