January 18, 2022
Social media in the workplace: Cybersecurity dos and don’ts for employees
Do you often take to social media to broadcast details about your job, employer or coworkers? Think before you share – less may be more. The post Social media in the workplace: Cybersecurity dos and don’ts for employees appeared first on WeLiveSecurity
January 18, 2022
Critical ManageEngine Desktop Server Bug Opens Orgs to Malware
January 18, 2022
Organizations Face a ‘Losing Battle’ Against Vulnerabilities
January 18, 2022
httpd: mod_lua: Possible buffer overflow when parsing multipart content (CVE-2021-44790) * httpd: mod_session: Heap overflow via a crafted SessionHeader value (CVE-2021-26691) * httpd: NULL pointer dereference via malformed requests (CVE-2021-34798) * httpd: Out-of-bounds write in ap_escape_quotes() via malicious input (CVE-2021-39275) For more details about the security issue(s), includin [More…]
January 18, 2022
Why global DDoS protection is essential for Anycast networks
January 18, 2022
This kernel-linus update is based on upstream 5.15.15 and fixes atleast the following security issues: A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A
January 18, 2022
This kernel update is based on upstream 5.15.15 and fixes atleast the following security issues: A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A
January 18, 2022
Upstream details at : https://access.redhat.com/errata/RHSA-2022:0162
January 18, 2022
An update that fixes two vulnerabilities is now available.
January 18, 2022
An update that fixes one vulnerability is now available.
January 18, 2022
security update
January 17, 2022
security update
January 17, 2022
Successfully recovering from disruption or disaster is one of an IT administrator’s most critical duties. Whether it’s restoring servers or rescuing lost data, failure to complete a successful recovery can spell doom for a company. But mastering the recovery process happens before disaster strikes. This is especially true for large datasets. Our breakdown is here […]
January 17, 2022
New expat packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
January 17, 2022
Pulling Back the Curtain: About LinuxSecurity.com>
January 17, 2022
An update that fixes 24 vulnerabilities is now available.
January 17, 2022
Several security issues were fixed in Pillow.
January 17, 2022
An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 17, 2022
Update to 1.12.3 Fixes these two security issues: * CVE-2021-43860 or https://github.com/flatpak/flatpak/security/advisories/GHSA-qpjc-vq3c-572j * CVE-2022-21682 or https://github.com/flatpak/flatpak/security/advisories/GHSA-8ch7-5j3h-g4fx Full release notes: https://github.com/flatpak/flatpak/releases/tag/1.12.3
January 16, 2022
It was discovered that sphinxsearch, a fast standalone full-text SQL search engine, could allow arbitrary files to be read by abusing a configuration option.
January 16, 2022
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For Debian 9 stretch, these problems have been fixed in version
January 16, 2022
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure, denial of service or spoofing.
January 16, 2022
security update
January 15, 2022
security update
January 15, 2022
Security fix for CVE-2021-4122
January 15, 2022
– kombu 5.2.3: https://github.com/celery/kombu/blob/master/Changelog.rst#523 – celery 5.2.3: https://github.com/celery/celery/blob/master/Changelog.rst#523
January 15, 2022
– kombu 5.2.3: https://github.com/celery/kombu/blob/master/Changelog.rst#523 – celery 5.2.3: https://github.com/celery/celery/blob/master/Changelog.rst#523
January 15, 2022
Update to 0.9.6, see https://github.com/uriparser/uriparser/blob/uriparser-0.9.6/ChangeLog for details.
January 15, 2022
Network Intrusion Detection Using Snort>
January 15, 2022
CPAN 2.28 allows Signature Verification Bypass. (CVE-2020-16156) References: – https://bugs.mageia.org/show_bug.cgi?id=29878 – https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/
January 15, 2022
This update provides Mbed TLS 2.16.12, with a number of bug fixes and a security fix. Mbed TLS has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure. (CVE-2021-44732)
January 15, 2022
A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp. (CVE-2021-3997) References:
January 15, 2022
CWE-122 Heap-based Buffer Overflow (CVE-2021-4136) CWE-125 Out-of-bounds Read (CVE-2021-4166) CWE-416 Use After Free (CVE-2021-4173) CWE-416 Use After Free (CVE-2021-4187)
January 15, 2022
Buffer overflow vulnerability in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp. (CVE-2021-40985) References:
January 15, 2022
security update
January 14, 2022
The 5.15.14 stable kernel update contains a number of important fixes across the tree.
January 14, 2022
Top Illicit Carding Marketplace UniCC Abruptly Shuts Down
January 14, 2022
Making loyalty pay: How to keep your loyalty rewards safe from scammers
Is loyalty fraud on your radar? Here’s why your hard-earned reward points and air miles may be easy pickings for cybercriminals. The post Making loyalty pay: How to keep your loyalty rewards safe from scammers appeared first on WeLiveSecurity
January 14, 2022
Real Big Phish: Mobile Phishing & Managing User Fallibility
January 14, 2022
Critical Cisco Contact Center Bug Threatens Customer-Service Havoc
January 14, 2022
‘Be Afraid:’ Massive Cyberattack Downs Ukrainian Gov’t Sites
January 14, 2022
Talking cyber on the ManageEngine Insights podcast
January 14, 2022
Russian Security Takes Down REvil Ransomware Gang
January 14, 2022
Three Plugins with Same Bug Put 84K WordPress Sites at Risk
January 14, 2022
Adobe Cloud Abused to Steal Office 365, Gmail Credentials
January 14, 2022
kernel: perf_event_parse_addr_filter memory (CVE-2020-25704) * kernel: fuse: fuse_do_getattr() calls make_bad_inode() in inappropriate situations (CVE-2020-36322) * kernel: Heap buffer overflow in firedtv driver (CVE-2021-42739) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE Bug Fix(es): * [More…]
January 14, 2022
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
January 14, 2022
An update for samba is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 14, 2022
An update is now available for ansible-runner for Red Hat Ansible Automation Platform 2.0 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
January 14, 2022
Microsoft Yanks Buggy Windows Server Updates
January 13, 2022
North Korean APTs Stole ~$400M in Crypto in 2021
January 13, 2022
Orca Security tells AWS fail tale with a happy ending
January 13, 2022
Security fix for CVE-2021-46059, CVE-2022-0158, CVE-2022-0156
January 13, 2022
security update
January 13, 2022
security update
January 13, 2022
Security fix for CVE-2021-41500. Upstream notes for version 1.2.7 read: “Bug fixes, Python 3.10 compatibility”.
January 13, 2022
Continuous security and compliance for hybrid cloud, the Red Hat way
January 13, 2022
US Military Ties Prolific MuddyWater Cyberespionage APT to Iran
January 13, 2022
Cryptocurrency scams: What to know and how to protect yourself
As you attempt to strike it rich in the digital gold rush, make sure you know how to recognize various schemes that want to part you from your digital coins The post Cryptocurrency scams: What to know and how to protect yourself appeared first on WeLiveSecurity
January 13, 2022
New GootLoader Campaign Targets Accounting, Law Firms
January 13, 2022
Hackers are posting out malicious USB drives to businesses
January 13, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
January 13, 2022
This update upgrades Thunderbird to version 91.5.0. * Mozilla: Iframe sandbox bypass with XSLT (CVE-2021-4140) * Mozilla: Race condition when playing audio files (CVE-2022-22737) * Mozilla: Heap-buffer-overflow in blendGaussianBlur (CVE-2022-22738) * Mozilla: Use-after-free of ChannelEventQueue::mOwner (CVE-2022-22740) * Mozilla: Browser window spoof using fullscreen mode (CVE-2022-22741) [More…]
January 13, 2022
This update upgrades Firefox to version 91.5.0 ESR. * Mozilla: Iframe sandbox bypass with XSLT (CVE-2021-4140) * Mozilla: Race condition when playing audio files (CVE-2022-22737) * Mozilla: Heap-buffer-overflow in blendGaussianBlur (CVE-2022-22738) * Mozilla: Use-after-free of ChannelEventQueue::mOwner (CVE-2022-22740) * Mozilla: Browser window spoof using fullscreen mode (CVE-2022-22741) [More…]
January 13, 2022
Several security issues were fixed in Pillow.
January 13, 2022
Several security issues were fixed in Ghostscript.
January 13, 2022
Apache Log4j 1.2 could be made to crash or run programs if it received specially crafted input.
January 13, 2022
Amazon, Azure Clouds Host RAT-ty Trio in Infostealing Campaign
January 12, 2022
security update
January 12, 2022
security update
January 12, 2022
Stolen TikTok Videos, Bent on Fraud, Invade YouTube Shorts
January 12, 2022
New York AG Warns 17 Firms of Credential Attacks
January 12, 2022
Ransomware demands… a new approach to security
January 12, 2022
CES 2022: Wireless power for all
We don’t need no stinkin’ wall power as CES shows off the power and promise of usable long-range wireless charging The post CES 2022: Wireless power for all appeared first on WeLiveSecurity
January 12, 2022
Signed kernel drivers – Unguarded gateway to Windows’ core
ESET researchers look at malware that abuses vulnerabilities in kernel drivers and outline mitigation techniques against this type of exploitation The post Signed kernel drivers – Unguarded gateway to Windows’ core appeared first on WeLiveSecurity
January 12, 2022
Phishers Rip Off High-Profile EA Gamers
January 12, 2022
It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly sanitize HTML messages. This would allow an attacker to perform Cross-Site Scripting (XSS) attacks.
January 12, 2022