security update
September 10, 2021
security update
September 10, 2021
security update
September 10, 2021
MyRepublic Data Breach Raises Data-Protection Questions
September 10, 2021
Top Steps for Ransomware Recovery and Preparation
September 10, 2021
Firefox could be made to crash or run programs as your login if it opened a malicious website.
September 10, 2021
Yandex Pummeled by Potent Meris DDoS Botnet
September 10, 2021
SOVA, Worryingly Sophisticated Android Trojan, Takes Flight
September 10, 2021
5 Steps For Securing Your Remote Work Space
September 10, 2021
* New upstream version (92.0)
September 10, 2021
Update to latest upstream release 2.0.12
September 10, 2021
Applying DevSecOps practices to Kubernetes: software supply chain
September 10, 2021
Stolen Credentials Led to Data Theft at United Nations
September 10, 2021
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
September 10, 2021
Ghostscript could be made to crash, access files, or run programs if it opened a specially crafted file.
September 10, 2021
It was discovered that Ghostscript, the GPL PostScript/PDF interpreter, does not properly validate access for the “%pipe%”, “%handle%” and “%printer%” io devices, which could result in the execution of arbitrary code if a malformed Postscript file is processed (despite the -dSAFER
September 10, 2021
security update
September 10, 2021
Thousands of Fortinet VPN Account Credentials Leaked
September 9, 2021
McDonald’s Email Blast Includes Password to Monopoly Game Database
September 9, 2021
Howard University suffers cyberattack, suspends online classes in aftermath
The university suffered a ransomware attack, however there is no evidence so far of data being accessed or stolen. The post Howard University suffers cyberattack, suspends online classes in aftermath appeared first on WeLiveSecurity
September 9, 2021
Financial Cybercrime: Why Cryptocurrency is the Perfect ‘Getaway Car’
September 9, 2021
‘Azurescape’ Kubernetes Attack Allows Cross-Container Cloud Compromise
September 9, 2021
SideWalk Backdoor Linked to China-Linked Spy Group ‘Grayfly’
September 9, 2021
Kevin Israel discovered that Postorius, the administrative web frontend for Mailman 3, didn’t validate whether a logged-in user owns the email address when unsubscribing.
September 9, 2021
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
September 9, 2021
Update to CVE release 3003.3-1 https://saltproject.io/security_announcements/salt-security- advisory-2021-sep-02/ CVE-2021-21996 CVE-2021-22004 CVE-2021-31607
September 9, 2021
Build of libtpms 0.8.5
September 9, 2021
8u302 update
September 9, 2021
Update to CVE release 3003.3-1 https://saltproject.io/security_announcements/salt-security- advisory-2021-sep-02/ CVE-2021-21996 CVE-2021-22004 CVE-2021-31607
September 9, 2021
Zoho Password Manager Zero-Day Bug Under Active Attack Gets a Fix
September 9, 2021
BladeHawk Attackers Target Kurds with Android Apps
September 9, 2021
What Ragnar Locker Got Wrong About Ransomware Negotiators – Podcast
September 8, 2021
security update
September 8, 2021
Tooling Network Detection & Response for Ransomware
September 8, 2021
Spoofing Bug Highlights Cybersecurity for Digital Vaccine Passports
September 8, 2021
TeamTNT’s New Tools Target Multiple OS
September 8, 2021
ProtonMail forced to log user’s IP address after an order from Swiss authorities
Following the incident the company has updated its website and privacy policy to clarify its legal obligations to its userbase The post ProtonMail forced to log user’s IP address after an order from Swiss authorities appeared first on WeLiveSecurity
September 8, 2021
BladeHawk group: Android espionage against Kurdish ethnic group
ESET researchers have investigated a targeted mobile espionage campaign against the Kurdish ethnic group, and that has been active since at least March 2020. The post BladeHawk group: Android espionage against Kurdish ethnic group appeared first on WeLiveSecurity
September 8, 2021
Microsoft, CISA Urge Mitigations for Zero-Day RCE Flaw in Windows
September 8, 2021
kernel: use-after-free in route4_change() in net/sched/cls_route.c (CVE-2021-3715) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE Bug Fix(es): * [SL 7.8][s390x][DASD]Crash in __list_del_entry, alias_pav_group list corrupt when running dasd_alias_remove_device() * EMBARGOED CVE-2021-3715 kern [More…]
September 8, 2021
Update to v1.41.1 Fix CVE-2021-39163, CVE-2021-39164 —- Update to v1.41.0
September 8, 2021
Cumulative bug-fix release from upstream.
September 8, 2021
– fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
September 8, 2021
Cumulative bug-fix release from upstream.
September 8, 2021
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 8, 2021
Patch now? Why enterprise exploits are still partying like it’s 1999
September 8, 2021
Ransomware attacks are inevitable. Paying the ransom isn’t
September 8, 2021
Ragnar Locker Gang Warns Victims Not to Call the FBI
September 7, 2021
Netgear Smart Switches Open to Complete Takeover
September 7, 2021
Jenkins Hit as Atlassian Confluence Cyberattacks Widen
September 7, 2021
ProtonMail Forced to Log IP Address of French Activist
September 7, 2021
Authorities Arrest Another TrickBot Gang Member in South Korea
September 7, 2021
An update for kernel is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 7, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs
September 7, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs
September 7, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs
September 7, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs
September 7, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs
September 7, 2021
Holy Grail of Security: Answers to ‘Did XYZ Work?’ – Podcast
September 7, 2021
An issue has been found in btrbk, a backup tool for btrfs subvolumes. Due to mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys an arbitrary code execution would
September 6, 2021
IOMMU page mapping issues on x86 [XSA-378, CVE-2021-28694, CVE-2021-28695, CVE-2021-28696] (#1997531) (#1997568) (#1997537) grant table v2 status pages may remain accessible after de-allocation [XSA-379, CVE-2021-28697] (#1997520) long running loops in grant table handling [XSA-380, CVE-2021-28698] (#1997526) inadequate grant-v2 status frames array bounds check [XSA-382, CVE-2021-28699]
September 6, 2021
An update that fixes two vulnerabilities is now available.
September 6, 2021
IOMMU page mapping issues on x86 [XSA-378, CVE-2021-28694, CVE-2021-28695, CVE-2021-28696] (#1997531) (#1997568) (#1997537) grant table v2 status pages may remain accessible after de-allocation [XSA-379, CVE-2021-28697] (#1997520) long running loops in grant table handling [XSA-380, CVE-2021-28698] (#1997526) inadequate grant-v2 status frames array bounds check [XSA-382, CVE-2021-28699]
September 6, 2021
Human Fraud: Detecting Them Before They Detect You
September 6, 2021
IoT Attacks Skyrocket, Doubling in 6 Months
September 6, 2021
An update that fixes one vulnerability is now available.
September 6, 2021
When the bits hit the fan: What to do when ransomware strikes
September 6, 2021
security update
September 5, 2021
Etienne Stalmans discovered that unsquashfs in squashfs-tools, the tools to create and extract Squashfs filesystems, does not validate filenames for traversal outside of the destination directory. An attacker can take advantage of this flaw for writing to arbitrary files to the filesystem
September 5, 2021
Update to 2.0.1 (fix RHBZ#1998578); fix RHBZ#1932066 (unsafe use of strncpy)
September 5, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs —- New upstream development version 1.45.7. —- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
September 5, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs —- New upstream development version 1.45.7. —- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
September 5, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs —- New upstream development version 1.45.7. —- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
September 5, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs —- New upstream development version 1.45.7. —- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
September 5, 2021