January 6, 2022
Google Voice Authentication Scam Leaves Victims on the Hook
January 6, 2022
CES 2022: More sensors than people
A sea of sensors will soon influence almost everything in your world The post CES 2022: More sensors than people appeared first on WeLiveSecurity
January 6, 2022
5 ways hackers steal passwords (and how to stop them)
From social engineering to looking over your shoulder, here are some of the most common tricks that bad guys use to steal passwords The post 5 ways hackers steal passwords (and how to stop them) appeared first on WeLiveSecurity
January 6, 2022
Partially Unpatched VMware Bug Opens Door to Hypervisor Takeover
January 6, 2022
‘Malsmoke’ Exploits Microsoft’s E-Signature Verification
January 6, 2022
Attackers Exploit Flaw in Google Docs’ Comments Feature
January 6, 2022
Several security issues were fixed in WebKitGTK.
January 6, 2022
Several security issues were fixed in Apache HTTP Server.
January 6, 2022
Several security issues were fixed in the kernel.
January 6, 2022
The container bci/openjdk was updated. The following patches have been included in this update:
January 6, 2022
The container bci/openjdk-devel was updated. The following patches have been included in this update:
January 6, 2022
The container bci/minimal was updated. The following patches have been included in this update:
January 6, 2022
1.1M Compromised Accounts Found at 17 Major Companies
January 5, 2022
Each year, as online shopping ramps up in the weeks before the holidays, so do online scams targeting the elderly. This season – in many ways unprecedented – is no different in this regard. In fact, COVID-19, Zoom meetings, vaccination recommendations and travel warnings all provide ample and unique precedent for social engineering attacks. Not […]
January 5, 2022
‘Elephant Beetle’ Lurks for Months in Networks
January 5, 2022
Broward Breach Highlights Healthcare Supply-Chain Problems
January 5, 2022
Uber Bug, Ignored for Years, Casts Doubt on Official Uber Emails
January 5, 2022
security update
January 5, 2022
FTC to Go After Companies that Ignore Log4j
January 5, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unb= reakable Linux Network:
January 5, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
January 5, 2022
Instagram and teens: A quick guide for parents to keep their kids safe
How can you help your kids navigate Instagram safely? Here are a few tips to help you protect their privacy on the app. The post Instagram and teens: A quick guide for parents to keep their kids safe appeared first on WeLiveSecurity
January 5, 2022
What You Need to Know About the Predator-OS 20.04 LTS Release>
January 5, 2022
US police warn of parking meters with phishing QR codes
January 5, 2022
Several security issues were fixed in Django.
January 5, 2022
How ransomware gangs went pro
January 5, 2022
The container sles-15-sp3-chost-byos-v20220103 was updated. The following patches have been included in this update:
January 5, 2022
The container suse-sles-15-sp3-chost-byos-v20220103-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
January 5, 2022
The container suse-sles-15-sp3-chost-byos-v20220103-gen2 was updated. The following patches have been included in this update:
January 5, 2022
Microsoft Sees Rampant Log4j Exploit Attempts, Testing
January 4, 2022
Data Skimmer Hits 100+ Sotheby’s Real-Estate Websites
January 4, 2022
Purple Fox Rootkit Dropped by Malicious Telegram Installers
January 4, 2022
Breaking the habit: Top 10 bad cybersecurity habits to shed in 2022
Be alert, be proactive and break these 10 bad habits to improve your cyber-hygiene in 2022 The post Breaking the habit: Top 10 bad cybersecurity habits to shed in 2022 appeared first on WeLiveSecurity
January 4, 2022
McMenamins Data Breach Affects 12 Years of Employee Info
January 4, 2022
Portugal Media Giant Impresa Crippled by Ransomware Attack
January 4, 2022
Two vulnerabilities have been discovered in the Apache HTTP server: CVE-2021-44224
January 4, 2022
2022: The year of software supply chain security
January 4, 2022
An update for the idm:DL1 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
January 4, 2022
An update for samba is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 4, 2022
An update for telnet is now available for Red Hat Enterprise Linux 7.6 Advanced Update Support, Red Hat Enterprise Linux 7.6 Telco Extended Update Support, and Red Hat Enterprise Linux 7.6 Update Services for SAP Solutions.
January 4, 2022
xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access (CVE-2021-4008) * xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds access (CVE-2021-4009) * xorg-x11-server: SProcScreenSaverSuspend out-of-bounds access (CVE-2021-4010) * xorg-x11-server: SwapCreateRegister out-of-bounds access (CVE-2021-4011) For more details about the security issue(s), including the impact, [More…]
January 4, 2022
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code, spoofing, information disclosure, downgrade attacks on SMTP STARTTLS connections or misleading display of OpenPGP/MIME signatures.
January 4, 2022
security update
January 3, 2022
An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 3, 2022
An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 3, 2022
An update for grafana is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 3, 2022
Fix missing TLS certificate verification. (CVE-2021-39359) References: – https://bugs.mageia.org/show_bug.cgi?id=29834 – https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/HRPPP47WRCAPAEJGRMEKYYJZBQCYXTLQ/
January 3, 2022
Several wireshark vulnerabilities have been fixed. See the release notes for details. References: – https://bugs.mageia.org/show_bug.cgi?id=29832
January 3, 2022
Fix shell expansion via crafted pathname in the ImageMagick convert fallback References: – https://bugs.mageia.org/show_bug.cgi?id=29829
January 3, 2022
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code, spoofing, information disclosure, downgrade attacks on SMTP STARTTLS connections or misleading display of OpenPGP/MIME signatures.
January 2, 2022
Security fix for CVE-2021-4008, CVE-2021-4009, CVE-2021-4010, CVE-2021-4011
January 1, 2022
The 5..15..12 stable kernel update contains a number of important fixes across the tree.
December 31, 2021
security update
December 31, 2021
The 5..15..12 stable kernel update contains a number of important fixes across the tree.
December 31, 2021
https://lib.openmpt.org/libopenmpt/2021/12/23/security- update-0.5.15-releases-0.4.27-0.3.36/
December 31, 2021
22 cybersecurity statistics to know for 2022
As we usher in the New Year, let’s take a look at some statistics that will help you stay up-to-date on recent cybersecurity trends The post 22 cybersecurity statistics to know for 2022 appeared first on WeLiveSecurity
December 31, 2021
An update that fixes one vulnerability is now available.
December 31, 2021
An update that fixes one vulnerability is now available.
December 31, 2021
An update that fixes four vulnerabilities is now available.
December 30, 2021
An update that fixes one vulnerability is now available.
December 30, 2021
Patch for CVE-2021-39359. —- Update to 5.2.10
December 30, 2021
xwayland 21.1.4 Security fix for CVE-2021-4008, CVE-2021-4009, CVE-2021-4010, CVE-2021-4011 Store EGLcontext to avoid superfluous eglMakeCurrent() calls Prefer EGLStream with NVIDIA proprietary driver if both GBM and EGLstream are available
December 30, 2021
What the Rise in Cyber-Recon Means for Your Security Strategy
December 30, 2021
APT ‘Aquatic Panda’ Targets Universities with Log4Shell Exploit Tools
December 30, 2021
5 Cybersecurity Trends to Watch in 2022
December 30, 2021
stack-based buffer overflow in handle_request() in DHT.c (CVE-2021-44847) References: – https://bugs.mageia.org/show_bug.cgi?id=29821 – https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/S7EBS3NIRYJ7V3PTNINP3PJSVUHGZTGA/
December 30, 2021
HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818) References: – https://bugs.mageia.org/show_bug.cgi?id=29817
December 30, 2021
e2guardian did not validate TLS hostnames (CVE-2021-44273) References: – https://bugs.mageia.org/show_bug.cgi?id=29811 – https://www.openwall.com/lists/oss-security/2021/12/23/2
December 30, 2021
ReDoS vulnerability in html_preprocess_rules in ebooks/conversion/preprocess.py References: – https://bugs.mageia.org/show_bug.cgi?id=29803
December 30, 2021
HTTP Request Smuggling due to spaces in headers. The http parser accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS). (CVE-2021-22959) HTTP Request Smuggling when parsing the body. The parse ignores chunk extensions when parsing the body of chunked requests. This leads […]
December 30, 2021
Authenticate active help requests to the local help web server (CVE-2020-27225) References: – https://bugs.mageia.org/show_bug.cgi?id=29048
December 30, 2021
security update
December 29, 2021
Cryptomining Attack Exploits Docker API Misconfiguration Since 2019
December 29, 2021
Two vulnerabilities were fixed in the reSIProcate SIP stack. CVE-2017-11521
December 29, 2021
An update that fixes 33 vulnerabilities is now available.
December 29, 2021
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or spoofing.
December 29, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 29, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 29, 2021
New wpa_supplicant packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
December 28, 2021
2021 in review: The biggest cybersecurity stories of the year
As we close out another year like no other, let’s look back at some of the most notable cybersecurity stories that shaped 2021 The post 2021 in review: The biggest cybersecurity stories of the year appeared first on WeLiveSecurity
December 28, 2021
That Toy You Got for Christmas Could Be Spying on You
December 28, 2021
A couple of vulnerabilites were found in paramiko, an implementation of SSHv2 protocol in Python. CVE-2018-1000805
December 28, 2021
An XSS vulnerability was discovered in noVNC, a HTML5 VNC client, in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.
December 28, 2021
A cookie prefix spoofing vulnerability in CGI::Cookie.parse and a regular expression denial of service vulnerability (ReDoS) on date parsing methods were discovered in src:ruby2.1, the Ruby interpreter.
December 28, 2021
2021 Wants Another Chance (A Lighter-Side Year in Review)
December 28, 2021
What most cloud-using CIOs want in 2022
December 28, 2021
Several vulnerabilities were discovered in djvulibre, a library and set of tools to handle documents in the DjVu format. An attacker could crash document viewers and possibly execute arbitrary code through
December 28, 2021
The python-rdflib-tools package (tools for converting to and from RDF) had wrappers that could load Python modules from the current working directory, allowing code injection.
December 28, 2021
An update that contains security fixes can now be installed.
December 28, 2021