Menu

Category Archives: Security

Articles about security

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Cisco admits corporate network compromised by gang with links to Lapsus$
Podcast: Inside the Hackers’ Toolkit
Meta privacy red team lead: Does your business know its privacy adversaries?
Boffins rate npm and PyPI package security and it’s not good
Ex-CISA chief Krebs calls for US to get serious on security
As Black Hat kicks off, the US government is getting the message on hiring security talent

security update

Maui ransomware linked to North Korean group Andariel
Google’s bug bounty boss: Finding and patching vulns? ‘Totally useless’

When was the last time you secretly smiled when ransomware gangs had their bitcoin stolen, their malware servers shut down, or were forced to disband? We hang on to these infrequent victories because history tells us that most ransomware collectives don’t go away—they reinvent themselves under a new name, with new rules, new targets, and […]

Cloudflare: Someone tried to pull the Twilio phishing tactic on us too

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Microsoft Patches ‘Dogwalk’ Zero-Day and 17 Critical Flaws

The container suse/sle15 was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

The container bci/ruby was updated. The following patches have been included in this update:

The Story Behind the Linux Security Quick Reference Guide
Businesses should dump Windows for the Linux desktop
Patch Tuesday: Yet another Microsoft RCE bug under active exploit

security update

security update

Virtual Currency Platform ‘Tornado Cash’ Accused of Aiding APTs
APIC fail: Intel ‘Sunny Cove’ chips with SGX spill secrets
Malicious deepfakes used in attacks up 13% from last year, VMware finds

Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened.

Microsoft’s fix for ‘data damage’ risk hits PC performance

An update that fixes three vulnerabilities is now available.

Benefits & Drawbacks of Using a VPN on Linux
How to check if your PC has been hacked, and what to do next

Has your PC been hacked? Whatever happens, don’t panic. Read on for ten signs your PC has been hacked and handy tips on how to fix it. The post How to check if your PC has been hacked, and what to do next appeared first on WeLiveSecurity

An update for vim is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update that fixes 6 vulnerabilities is now available.

Chinese scammers target kids with promise of extra gaming hours

Red Hat OpenShift Container Platform release 4.10.26 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.10.

China-linked spies used six backdoors to steal info from defense, industrial enterprise orgs
US treasury whips up sanctions for crypto mixer Tornado Cash
Twilio customer data exposed after its staffers got phished
Microsoft tightens Edge security for less visited websites
Phishers Swim Around 2FA in Coinbase Account Heists
Slack leaked hashed passwords from its servers for years

Sandipan Roy discovered two vulnerabilities in InfoZIP’s unzip program, a de-archiver for .zip files, which could result in denial of service or potentially the execution of arbitrary code.

phpLiteAdmin could allow cross-site scripting (XSS) attacks.

GDK-PixBuf could be made to crash or run programs as your login if it opened a specially crafted file.

Several security issues were fixed in libjpeg-turbo.

An update for openshift-istio-kiali-rhel8-container is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Red Hat Kiali for OpenShift Service Mesh 2.2 Containers Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

Dark Utilities C2 service draws thousands of cyber criminals

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

It was discovered that libtirpc, a transport-independent RPC library, does not properly handle idle TCP connections. A remote attacker can take advantage of this flaw to cause a denial of service.

Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.

security update

security update

DuckDuckGo says Hell, Hell, No to those Microsoft trackers after web revolt
Develop a zero‑trust environment to protect your organization – Week in security with Tony Anscombe

Learn the basics of zero-trust, and how building a zero-trust environment can protect your organization. The post Develop a zero‑trust environment to protect your organization – Week in security with Tony Anscombe appeared first on WeLiveSecurity

This kernel-linus update is based on upstream 5.15.58 and fixes at least the following security issues: Kernel lockdown bypass when UEFI secure boot is disabled / unavailable and IMA appraisal is enabled (CVE-2022-21505).

This kernel update is based on upstream 5.15.58 and fixes at least the following security issues: Kernel lockdown bypass when UEFI secure boot is disabled / unavailable and IMA appraisal is enabled (CVE-2022-21505).

Jan-Niklas Sohn discovered that multiple input validation failures in the Xkb extension of the X.org X server may result in privilege escalation if the X server is running privileged.

Hi, I’ll be your ransomware negotiator today – but don’t tell the crooks that

The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

security update

Nomad to crypto thieves: Please give us back 90%, keep 10% as a reward. Deal?
Warning! Critical flaws found in US Emergency Alert System
Open Redirect Flaw Snags Amex, Snapchat User Data

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Kaspersky blames “misconfiguration” after customers receive “dear and lovely” email
Critical flaws found in four Cisco SMB router ranges – for the second time this year
Bloke robbed of $800,000 in cryptocurrency by fake wallet app wants payback from Google

Jan-Niklas Sohn discovered two out of bound memory writes in X.Org Server’s ProcXkbSetGeometry and ProcXkbSetDeviceInfo Xkb extensions. These issues could be exploited by an attacker to cause denial of service, privilege escalation or arbitrary code execution.

mod-wsgi could allow unintended access to network services.

Several security issues were fixed in GnuTLS.

Django could be made to expose sensitive information if it received an specially crafted input.

Taiwanese military reports DDoS in wake of Pelosi visit
Smashing Security podcast #286: Hackers doxxed, Pornhub probs, and Co-op security measures
I will take the Red (Hat) SLSA please: Introducing a framework for measuring supply chain security maturity
How a WAF Could Improve the Security of Your Linux Web Applications

An update that fixes two vulnerabilities is now available.

An update that fixes one vulnerability is now available.

Zero-knowledge proof finds new life in the blockchain
Don’t get singed by scammers while you’re carrying the torch for Tinder 

Are you on Tinder? With 75 million monthly active users, you might be able to find the right one. However there are also traps you need to look out for. Read more about catfishing, sextortion, phishing and other practices used by scammers. The post Don’t get singed by scammers while you’re carrying the torch for […]

India scraps data protection law in favor of better law coming … sometime
Student crashes Cloudflare beta party, redirects email, bags a bug bounty
UK Parliament bins its TikTok account over China surveillance fears
Solana, Phantom blame Slope after millions in crypto-coins stolen from 8,000 wallets
Microsoft widens enterprise access to its threat intelligence pool
Ex-T-Mobile US store owner phished staff, raked in $25m from unlocking phones
Sonatype shines light on typosquatting ransomware threat in PyPI
You can’t choose when you’ll be hit by ransomware, but you can choose how you prepare
VMWare Urges Users to Patch Critical Authentication Bypass Bug

This update upgrades Firefox to version 91.12.0 ESR. * Mozilla: Memory safety bugs fixed in Firefox 103 and 102.1 (CVE-2022-2505) * Mozilla: Directory indexes for bundled resources reflected URL parameters (CVE-2022-36318) * Mozilla: Mouse Position spoofing with CSS transforms (CVE-2022-36319) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, [More…]