November 25, 2022
Bahamut cybermercenary group targets Android users with fake VPN apps
Malicious apps used in this active campaign exfiltrate contacts, SMS messages, recorded phone calls, and even chat messages from apps such as Signal, Viber, and Telegram The post Bahamut cybermercenary group targets Android users with fake VPN apps appeared first on WeLiveSecurity
November 24, 2022
JBIG-KIT could be made to crash if it opened a specially crafted file.
November 24, 2022
Meta links US military to fake social media influence campaigns
November 24, 2022
Exim could be made to crash or run programs if it processed specially crafted regular expressions.
November 24, 2022
Exim could be made to crash or run programs if it processed specially crafted regular expressions.
November 24, 2022
Several security issues were fixed in ImageMagick.
November 24, 2022
Several security issues were fixed in ImageMagick.
November 24, 2022
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
November 24, 2022
European Parliament Putin things back together after cyber attack
November 24, 2022
The risk of becoming a victim of identity theft has never been greater We are increasingly living our lives in the digital realm. Whether we’re banking, purchasing or browsing, our daily activities are most likely taking place online. Not only has this sped up our efficiency, but it has also expanded our exposure to a […]
November 24, 2022
security update
November 23, 2022
Hive ransomware has extorted $100 million in 18 months, FBI warns
November 23, 2022
Security fatigue is real: Here’s how to overcome it
Do your employees take more risks with valuable data because they’ve become desensitized to security guidance? Spot the symptoms before it’s too late. The post Security fatigue is real: Here’s how to overcome it appeared first on WeLiveSecurity
November 23, 2022
Several security issues were fixed in MariaDB.
November 23, 2022
Expat could be made to crash or execute arbitrary code.
November 23, 2022
Expat could be made to crash or execute arbitrary code.
November 23, 2022
APR-util could be made to crash or leak sensitive information if it opened a specially crafted SDBM file.
November 23, 2022
APR-util could be made to crash or leak sensitive information if it opened a specially crafted SDBM file.
November 23, 2022
Understanding open source software supply chain risks
November 23, 2022
An update that fixes one vulnerability is now available.
November 23, 2022
‘Pig butchering’ romance scam domains seized and slaughtered by the Feds
November 23, 2022
DraftKings gamblers lose $300,000 to credential stuffing attack
November 22, 2022
AWS fixes ‘confused deputy’ vulnerability in AppSync
November 22, 2022
Latest insights on APT activity – Week in security with Tony Anscombe
What have some of the world’s most notorious APT groups been up to lately? A new ESET report released this week has the answers. The post Latest insights on APT activity – Week in security with Tony Anscombe appeared first on WeLiveSecurity
November 22, 2022
Several security issues were fixed in FreeRDP.
November 22, 2022
Several security issues were fixed in FreeRDP.
November 22, 2022
An update that fixes one vulnerability is now available.
November 22, 2022
An update that fixes one vulnerability is now available.
November 22, 2022
An update that solves 10 vulnerabilities and has two fixes is now available.
November 22, 2022
An update that fixes one vulnerability is now available.
November 22, 2022
World Cup phishing emails spike in Middle Eastern countries
November 21, 2022
US offshore oil and gas installation at ‘increasing’ risk of cyberattack
November 21, 2022
Cyber security pros: move to the next level next year
November 21, 2022
Keeping Your Private Files Private: An Introduction to GNU Privacy Guard
November 21, 2022
An update that fixes two vulnerabilities is now available.
November 21, 2022
An update that solves 10 vulnerabilities, contains 10 features and has three fixes is now available.
November 21, 2022
An update that solves 10 vulnerabilities, contains 10 features and has three fixes is now available.
November 21, 2022
An update that fixes two vulnerabilities is now available.
November 21, 2022
An update that fixes two vulnerabilities is now available.
November 21, 2022
An update that contains security fixes can now be installed.
November 21, 2022
Google looking outside the usual channels to fix security skills gap
November 20, 2022
Serendipitous discovery nets security researcher $70k bounty
November 20, 2022
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
November 20, 2022
The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:
November 20, 2022
The container bci/rust was updated. The following patches have been included in this update:
November 20, 2022
The container bci/rust was updated. The following patches have been included in this update:
November 20, 2022
The container bci/rust was updated. The following patches have been included in this update:
November 20, 2022
The container bci/rust was updated. The following patches have been included in this update:
November 20, 2022
Tor vs. VPN: Which should you choose?
Both Tor and a VPN can greatly help you keep prying eyes away from your online life, but they’re also two very different beasts. Which is better for you? The post Tor vs. VPN: Which should you choose? appeared first on WeLiveSecurity
November 19, 2022
Greg Hudson discovered integer overflow flaws in the PAC parsing in krb5, the MIT implementation of Kerberos, which may result in remote code execution (in a KDC, kadmin, or GSS or Kerberos application server process), information exposure (to a cross-realm KDC acting
November 19, 2022
Greg Hudson discovered integer overflow flaws in the PAC parsing in krb5, the MIT implementation of Kerberos, which may result in remote code execution (in a KDC, kadmin, or GSS or Kerberos application server process), information exposure (to a cross-realm KDC acting
November 19, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
November 19, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
November 19, 2022
The container bci/rust was updated. The following patches have been included in this update:
November 19, 2022
The container bci/rust was updated. The following patches have been included in this update:
November 19, 2022
security update
November 19, 2022
Hive ransomware crooks extort $100m from 1,300 global victims
November 18, 2022
security update
November 18, 2022
security update
November 18, 2022
Red Hat Enterprise Linux and Microsoft security update of November 2022
November 18, 2022
Hardware-assisted encryption of data in use gets confidential
November 18, 2022
An update that fixes 18 vulnerabilities, contains one feature is now available.
November 18, 2022
An update that fixes 18 vulnerabilities, contains one feature is now available.
November 18, 2022
An update that fixes 18 vulnerabilities, contains one feature is now available.
November 18, 2022
An update that fixes 18 vulnerabilities, contains one feature is now available.
November 18, 2022
An update that fixes 52 vulnerabilities, contains one feature is now available.
November 18, 2022
An update that fixes 52 vulnerabilities, contains one feature is now available.
November 18, 2022
Israel sets robotic target-tracking turrets in the West Bank
November 18, 2022
Security firms hijack New York trees to monitor private workforce
November 17, 2022
security update
November 17, 2022
Open banking: Tell me what you buy, and I’ll tell you who you are
The convenience with which you manage all your financial wants and needs may come at a cost The post Open banking: Tell me what you buy, and I’ll tell you who you are appeared first on WeLiveSecurity
November 17, 2022
Google wins lawsuit against alleged Russian botnet herders
November 17, 2022
It was discovered that php-phpseclib, a pure-PHP implementation of various cryptographic and arithmetic algorithms (v2), mishandles RSA PKCS#1 v1.5 signature verification. An attacker may get invalid signatures accepted, bypassing authorization control in specific
November 17, 2022
It was discovered that phpseclib, a pure-PHP implementation of various cryptographic and arithmetic algorithms (v1), mishandles RSA PKCS#1 v1.5 signature verification. An attacker may get invalid signatures accepted, bypassing authorization control in specific situations.
November 17, 2022
It was discovered that phpseclib, a pure-PHP implementation of various cryptographic and arithmetic algorithms (v1), mishandles RSA PKCS#1 v1.5 signature verification. An attacker may get invalid signatures accepted, bypassing authorization control in specific situations.
November 17, 2022
Expat could be made to crash or execute arbitrary code.
November 17, 2022
Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler,
November 17, 2022
Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler,
November 17, 2022
Notorious Emotet botnet returns after a few months off
November 17, 2022
security update
November 17, 2022
Iranian cyberspies exploited Log4j to break into a US govt network
November 16, 2022
Germany says nein to Qatari World Cup spyware, err, apps
November 16, 2022
security update
November 16, 2022
security update
November 16, 2022
security update
November 16, 2022
WASP malware stings Python developers
November 16, 2022
An update that fixes one vulnerability is now available.
November 16, 2022
An update that fixes one vulnerability is now available.
November 16, 2022
An update that fixes one vulnerability is now available.
November 16, 2022