March 11, 2022
Raccoon Stealer Crawls Into Telegram
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
March 11, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
March 11, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 11, 2022
– New upstream update (98.0)
March 11, 2022
Update Chromium to 99.0.4844.51. Fixes, well, a LOT of security bugs. Sorry about that. CVE-2021-22570 CVE-2022-0096 CVE-2022-0097 CVE-2022-0098 CVE-2022-0099 CVE-2022-0100 CVE-2022-0101 CVE-2022-0102 CVE-2022-0103 CVE-2022-0104 CVE-2022-0105 CVE-2022-0106 CVE-2022-0107 CVE-2022-0108 CVE-2022-0109 CVE-2022-0110 CVE-2022-0111 CVE-2022-0112 CVE-2022-0113
March 11, 2022
Bugfix release. fixes CVE-2022-0518 2055256, 2055130 – https://github.com/radare org/radare2/commit/9650e3c352f675687bf6c6f65ff2c4a3d0e288fa fixes CVE-2022-0519 2055103, 2055104 – https://github.com/radareorg/radare2/commit/6c4428f018d385fc8 0a33ecddcb37becea685dd5 fixes CVE-2022-0520 2055145, 2055146 – https://github.co m/radareorg/radare2/commit/8525ad0b9fd596f4b251bb3d7b114e6dc7ce1ee8 fixes
March 11, 2022
Infosys, Wipro silent on their Russian operations
March 11, 2022
Moscow to issue HTTPS certs to Russian websites
March 11, 2022
Analysis of leaked Conti files blows lid off ransomware gang
March 11, 2022
Fortinet says it’s all about the security ASICs
March 10, 2022
security update
March 10, 2022
security update
March 10, 2022
security update
March 10, 2022
Malware Posing as Russia DDoS Tool Bites Pro-Ukraine Hackers
March 10, 2022
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure, spoofing or sandbox bypass.
March 10, 2022
An update that solves one vulnerability and has two fixes is now available.
March 10, 2022
True or false? How to spot – and stop – fake news
How can you tell fact from fiction and avoid falling for and spreading falsehoods about the war in Ukraine? The post True or false? How to spot – and stop – fake news appeared first on WeLiveSecurity
March 10, 2022
Ragnar Locker ransomware – what you need to know
March 10, 2022
Most Orgs Would Take Security Bugs Over Ethical Hacking Help
March 10, 2022
Russia May Use Ransomware Payouts to Avoid Sanctions
March 10, 2022
Multi-Ransomwared Victims Have It Coming–Podcast
March 10, 2022
Mitel VoIP systems used in staggering DDoS attacks
March 10, 2022
Reg reader rages over Virgin Media’s email password policy
March 10, 2022
An update that solves two vulnerabilities and has 11 fixes is now available.
March 10, 2022
Several security issues and a regression were fixed in Expat.
March 10, 2022
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure, spoofing or sandbox bypass.
March 10, 2022
New mozilla-thunderbird packages are available for Slackware 15.0, and -current to fix security issues.
March 9, 2022
security update
March 9, 2022
security update
March 9, 2022
Dell opts out of Microsoft’s Pluton security for Windows
March 9, 2022
Most ServiceNow Instances Misconfigured, Exposed
March 9, 2022
Russian APTs Furiously Phish Ukraine – Google
March 9, 2022
Millions of APC Smart-UPS devices vulnerable to TLStorm
March 9, 2022
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
March 9, 2022
Securing healthcare: An IT health check on the state of the sector
No sector or organization is immune to rapidly escalating cyberthreats, but when it comes to healthcare, the stakes couldn’t be higher The post Securing healthcare: An IT health check on the state of the sector appeared first on WeLiveSecurity
March 9, 2022
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
March 9, 2022
Where are the (serious) Russian cyberattacks?
March 9, 2022
An update that fixes two vulnerabilities is now available.
March 9, 2022
An update that fixes two vulnerabilities is now available.
March 9, 2022
An update that fixes one vulnerability is now available.
March 9, 2022
An update that fixes three vulnerabilities, contains one feature is now available.
March 9, 2022
Internet backbone provider Lumen quits Russia
March 9, 2022
Ragnar ransomware gang hit 52 critical US orgs, says FBI
March 9, 2022
Cow-counting app abused by China ‘to spy on US states’
March 9, 2022
security update
March 8, 2022
security update
March 8, 2022
security update
March 8, 2022
security update
March 8, 2022
Cyber‑readiness in the face of an escalated gray zone conflict
Organizations worldwide should remain on high alert for cyberattacks as the risk of major cyber-spillover from the crisis in Ukraine continues to loom large The post Cyber‑readiness in the face of an escalated gray zone conflict appeared first on WeLiveSecurity
March 8, 2022
The Uncertain Future of IT Automation
March 8, 2022
Google buys threat intel giant Mandiant for $5.4bn
March 8, 2022
It was discovered that SPIP, a website engine for publishing, would allow a malicious user to execute arbitrary code. For the oldstable distribution (buster), this problem has been fixed
March 8, 2022
Redis could be made to run programs if it received specially crafted network traffic from an authenticated user.
March 8, 2022
Azure flaw allowed users to control others’ accounts
March 8, 2022
Linux distros patch ‘Dirty Pipe’ make-me-root kernel bug
March 8, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
March 8, 2022
The container bci/bci-init was updated. The following patches have been included in this update:
March 8, 2022
The container bci/bci-init was updated. The following patches have been included in this update:
March 8, 2022
Novel Attack Turns Amazon Devices Against Themselves
March 7, 2022
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
March 7, 2022
UN mulls Russia’s pitch for cybercrime treaty
March 7, 2022
NVIDIA’s Stolen Code-Signing Certs Used to Sign Malware
March 7, 2022
Critical Firefox Zero-Day Bugs Allow RCE, Sandbox Escape
March 7, 2022
Forcepoint ONE simplifies your security
March 7, 2022
Nmap Firewall Evasion Techniques>
March 7, 2022
An update for the virt:rhel and virt-devel:rhel modules is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
March 7, 2022
Several security issues were fixed in OpenJDK.
March 7, 2022
Several security issues were fixed in GNU C Library.
March 7, 2022
Several vulnerabilities have been discovered in Expat, an XML parsing C library, which could result in denial of service or potentially the execution of arbitrary code, if a malformed XML file is processed.
March 7, 2022
Several security issues were fixed in PHP.
March 7, 2022
A command injection vulnerability was found in FreeCAD, a parametric 3D modeler, when importing DWF files with crafted filenames. For Debian 9 stretch, this problem has been fixed in version
March 7, 2022
Prevent hackers by getting into their heads. Here’s how.
March 7, 2022
Global consultancies quit Russia
March 7, 2022
Several issues have been found in tiff, a library and tools to manipulate and convert files in the Tag Image File Format (TIFF). CVE-2022-22844
March 6, 2022
It was discovered that the SQL plugin in cyrus-sasl2, a library implementing the Simple Authentication and Security Layer, is prone to a SQL injection attack. An authenticated remote attacker can take advantage
March 6, 2022
Removing an XSLT parameter during processing could have lead to an exploitable use-after-free (CVE-2022-26485). An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape (CVE-2022-26486).
March 6, 2022
A bug was found in containerd where containers launched through containerd’s CRI implementation with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive
March 6, 2022