March 31, 2022
Zlib crash-an-app bug finally squashed, 17 years later
March 30, 2022
Ubiquiti sues Krebs on Security for defamation
March 30, 2022
Forcepoint ONE helps firms simplify their security
March 30, 2022
Lapsus$ ‘Back from Vacation’
March 30, 2022
Google Chrome Bug Actively Exploited as Zero-Day
March 30, 2022
VMware Horizon platform pummeled by Log4j-fueled attacks
March 30, 2022
zlib could be made to crash or run programs if it received specially crafted input.
March 30, 2022
MSHTML Flaw Exploited to Attack Russian Dissidents
March 30, 2022
zlib could be made to crash or run programs if it received specially crafted input.
March 30, 2022
An update that solves 12 vulnerabilities and has 25 fixes is now available.
March 30, 2022
An update that fixes one vulnerability is now available.
March 30, 2022
An update that solves 12 vulnerabilities and has 25 fixes is now available.
March 30, 2022
Electric Vehicle DC charging tripped by a wireless hack
March 30, 2022
An update that solves 22 vulnerabilities and has 22 fixes is now available.
March 30, 2022
Women in tech: Unique insights from a lifelong pursuit of innovation
Leading Slovak computer scientist Mária Bieliková shares her experience working as a woman driving technological innovation and reflects on how to inspire the next generation of talent in tech The post Women in tech: Unique insights from a lifelong pursuit of innovation appeared first on WeLiveSecurity
March 30, 2022
Mutating Verblecon malware in illicit cryptomining … so far
March 29, 2022
Ransomware driving you to distraction? Here’s how to recover
March 29, 2022
Exchange Servers Speared in IcedID Phishing Campaign
March 29, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 29, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
March 29, 2022
This kernel-linus update is based on upstream 5.15.32 and fixes at least the following security issues: An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts
March 29, 2022
This kernel update is based on upstream 5.15.32 and fixes at least the following security issues: An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts
March 29, 2022
5 security considerations for edge implementations
March 29, 2022
An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 29, 2022
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 29, 2022
Cybercrooks target students with fake job opportunities
March 29, 2022
Mozilla unveils vision for web evolution
March 29, 2022
Europe’s quest for energy independence – and how cyber‑risks come into play
Soaring energy prices and increased geopolitical tensions amid the Russian invasion of Ukraine bring a sharp focus on European energy security The post Europe’s quest for energy independence – and how cyber‑risks come into play appeared first on WeLiveSecurity
March 29, 2022
security update
March 28, 2022
Sophos fixes critical hijack flaw in firewall offering
March 28, 2022
Okta Says It Goofed in Handling the Lapsus$ Attack
March 28, 2022
Critical Sophos Security Bug Allows RCE on Firewalls
March 28, 2022
Triton malware still a threat to energy sector, FBI warns
March 28, 2022
openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 openssl-1.0.2k-25.el7_9.x86_64.rpm openssl-debuginfo-1.0.2k-25.el7_9.i686.rpm openssl-debuginfo-1.0.2k-25.el7_9.x86_64.rpm ope [More…]
March 28, 2022
expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235) * expat: Namespace-separator characters in “xmlns[:prefix]” attribute values can lead to arbitrary code execution (CVE-2022-25236) * expat: Integer overflow in storeRawNames() (CVE-2022-25315) * expat: Large number of prefixed XML attributes on a single tag can crash libexpat (CVE-2021-4596 [More…]
March 28, 2022
Red Hat OpenShift Container Platform release 4.10.6 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.10.
March 28, 2022
An update for openssl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 28, 2022
An update for openssl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 28, 2022
An update for expat is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 28, 2022
Under the hood of Wslink’s multilayered virtual machine
ESET researchers describe the structure of the virtual machine used in samples of Wslink and suggest a possible approach to see through its obfuscation techniques The post Under the hood of Wslink’s multilayered virtual machine appeared first on WeLiveSecurity
March 28, 2022
Okta acknowledges ‘mistake’ in handling of Lapsus$ attack
March 28, 2022
security update
March 28, 2022
The container bci/rust was updated. The following patches have been included in this update:
March 27, 2022
This is the March 2022 update for .NET Core 3.1: SDK 3.1.417 and Runtime 3.1.23 Release notes: https://github.com/dotnet/core/blob/main/release- notes/3.1/3.1.23/3.1.23.md This includes fixes for CVE-2022-24464, CVE-2022-24512 and CVE-2020-8927
March 26, 2022
CVE-2022-24302: Creation of new private key files using `~paramiko.pkey.PKey` subclasses was subject to a race condition between file creation and mode modification, which could be exploited by an attacker with knowledge of where the Paramiko-using code would write out such files; this has been patched by using `os.open` and `os.fdopen` to ensure new files are […]
March 26, 2022
This is the March 2022 update for .NET Core 3.1: SDK 3.1.417 and Runtime 3.1.23 Release notes: https://github.com/dotnet/core/blob/main/release- notes/3.1/3.1.23/3.1.23.md This includes fixes for CVE-2022-24464, CVE-2022-24512 and CVE-2020-8927
March 26, 2022
CVE-2022-24302: Creation of new private key files using `~paramiko.pkey.PKey` subclasses was subject to a race condition between file creation and mode modification, which could be exploited by an attacker with knowledge of where the Paramiko-using code would write out such files; this has been patched by using `os.open` and `os.fdopen` to ensure new files are […]
March 26, 2022
Fix for CVE-2022-0860
March 26, 2022
The container bci/ruby was updated. The following patches have been included in this update:
March 26, 2022
The container suse/rmt-nginx was updated. The following patches have been included in this update:
March 26, 2022
The container suse/rmt-mariadb was updated. The following patches have been included in this update:
March 26, 2022
The container suse/rmt-mariadb-client was updated. The following patches have been included in this update:
March 26, 2022
The container bci/python was updated. The following patches have been included in this update:
March 26, 2022
The container bci/python was updated. The following patches have been included in this update:
March 26, 2022
security update
March 25, 2022
Think of all the important files sitting on your computer right now. If your computer crashed tomorrow, would you be able to retrieve your important files? Would your business suffer as a result? As more and more of our daily activities incorporate digital and online files, it’s important for businesses and consumers to back up […]
March 25, 2022
Is a nation‑state digital deterrent scenario so far‑fetched?
Why has the conflict in Ukraine not caused the much anticipated global cyber-meltdown? The post Is a nation‑state digital deterrent scenario so far‑fetched? appeared first on WeLiveSecurity
March 25, 2022
Crypto malware in patched wallets targeting Android and iOS devices
ESET Research uncovers a sophisticated scheme that distributes trojanized Android and iOS apps posing as popular cryptocurrency wallets The post Crypto malware in patched wallets targeting Android and iOS devices appeared first on WeLiveSecurity
March 25, 2022
Atlassian flags Bitbucket and Confluence Data Center flaws
March 25, 2022
Hackers remotely start, unlock Honda Civics with $300 tech
March 25, 2022
Google Chrome Zero-Day Bugs Exploited Weeks Ahead of Patch
March 25, 2022
How AI can fend off supply-chain attacks
March 25, 2022
The container suse/sles12sp3 was updated. The following patches have been included in this update:
March 25, 2022
The container ses/7/prometheus-webhook-snmp was updated. The following patches have been included in this update:
March 25, 2022
The container ses/7/ceph/prometheus-server was updated. The following patches have been included in this update:
March 25, 2022
The container ses/7/ceph/prometheus-node-exporter was updated. The following patches have been included in this update:
March 25, 2022
The container ses/7/ceph/prometheus-alertmanager was updated. The following patches have been included in this update:
March 25, 2022
Distributor dumps Kaspersky to show solidarity with Ukraine
March 25, 2022
We blocked North Korea’s Chrome exploit, says Google
March 25, 2022
British cops arrest seven in Lapsus$ crime gang probe
March 24, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
March 24, 2022
UK Cops Collar 7 Suspected Lapsus$ Gang Members
March 24, 2022