An update that fixes two vulnerabilities is now available.
June 27, 2021
security update
June 27, 2021
An update that fixes one vulnerability is now available.
June 27, 2021
An update that fixes one vulnerability is now available.
June 27, 2021
Two vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service or the execution of arbitrary code if malformed image files are processed.
June 27, 2021
An update that fixes three vulnerabilities is now available.
June 27, 2021
An update that contains security fixes can now be installed.
June 27, 2021
Two issues have been found in bluez, a package with Bluetooth tools and daemons. One issue is about a man-in-the-middle attack during secure pairing, the other is about information disclosure due to improper access
June 26, 2021
An update that fixes two vulnerabilities is now available.
June 26, 2021
This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for security vulnerabilities which could result in privilege escalation in combination with VT-d and various side channel attacks.
June 26, 2021
For many U.S. workers the switch to remote work is a permanent one. That means more high-stakes work is being conducted on self-configured home networks. For others, home networks are simply hosting more devices as smart doorbells, thermostats and refrigerators now connect to the internet. Security experts warn that while the internet of things (IoT) […]
June 25, 2021
Mercedes-Benz Customer Data Flies Out the Window
June 25, 2021
Add fix to CVE-2021-28041
June 25, 2021
**Version 6.5.0** (June 16th, 2021) * **SECURITY** Fixes **CVE-2021-34551**, a complex RCE affecting Windows hosts. See SECURITY.md for details. * The fix for this issue changes the way that language files are loaded. While they remain in the same PHP-like format, they are processed as plain text, and any code in them will not be […]
June 25, 2021
**Version 6.5.0** (June 16th, 2021) * **SECURITY** Fixes **CVE-2021-34551**, a complex RCE affecting Windows hosts. See SECURITY.md for details. * The fix for this issue changes the way that language files are loaded. While they remain in the same PHP-like format, they are processed as plain text, and any code in them will not be […]
June 25, 2021
An update that solves three vulnerabilities and has three fixes is now available.
June 25, 2021
Password predictability is one of the most significant challenges to overall online security. Well aware of this trend, hackers often seek to exploit what they assume are the weak passwords of the average computer user. With a little bit of background information, “brute forcing” a simple password is a straightforward undertaking. How are passwords cracked? […]
June 25, 2021
Gaming industry under siege from cyberattacks during pandemic
Cyberattacks targeting the gaming industry skyrocket, with web attacks more than tripling year-on-year in 2020 The post Gaming industry under siege from cyberattacks during pandemic appeared first on WeLiveSecurity
June 25, 2021
Cisco ASA Bug Now Actively Exploited as PoC Drops
June 25, 2021
Hackers Crack Pirated Games with Cryptojacking Malware
June 25, 2021
A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability (CVE-2020-27840).
June 25, 2021
Updated graphicsmagick packages fix security vulnerabilities: The graphicsmagick package has been updated to version 1.3.36, fixing several security issues and other bugs. See the upstream NEWS file for details.
June 25, 2021
A memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does not consider the rank==0 case (CVE-2019-20052). References: – https://bugs.mageia.org/show_bug.cgi?id=27969
June 25, 2021
Several security issues were fixed in Thunderbird.
June 25, 2021
Application analysis in the DevSecOps life cycle
June 25, 2021
Cloud security is still a work in progress
June 25, 2021
An update that fixes one vulnerability is now available.
June 25, 2021
An update that fixes two vulnerabilities is now available.
June 25, 2021
Spam Downpour Drips New IcedID Banking Trojan Variant
June 25, 2021
Brave launches its own, privacy‑focused search engine
The Brave Search engine takes on Google, promising to let users surf the web without leaving a trace The post Brave launches its own, privacy‑focused search engine appeared first on WeLiveSecurity
June 24, 2021
The package pigeonhole before version 0.5.15-1 is vulnerable to denial of service.
June 24, 2021
The package dovecot before version 2.3.15-1 is vulnerable to information disclosure.
June 24, 2021
The package tpm2-tools before version 5.1.1-1 is vulnerable to man-in- the-middle.
June 24, 2021
The package exiv2 before version 0.27.4-1 is vulnerable to multiple issues including arbitrary code execution, denial of service and information disclosure.
June 24, 2021
The package keycloak before version 14.0.0-1 is vulnerable to certificate verification bypass.
June 24, 2021
The package helm before version 3.6.1-1 is vulnerable to information disclosure.
June 24, 2021
Tulsa’s Police-Citation Data Leaked by Conti Gang
June 24, 2021
Atlassian Bugs Could Have Led to 1-Click Takeover
June 24, 2021
30M Dell Devices at Risk for Remote BIOS Attacks, RCE
June 24, 2021
Pandemic-Bored Attackers Pummeled Gaming Industry
June 23, 2021
REvil Ransomware Code Ripped Off by Rivals
June 23, 2021
An update is now available for Red Hat OpenShift Jaeger 1.17. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
June 23, 2021
SonicWall ‘Botches’ October Patch for Critical VPN Bug
June 23, 2021
An update for qemu-kvm-rhev is now available for Red Hat Virtualization for Red Hat Virtualization Host 7. Red Hat Product Security has rated this update as having a security impact of
June 23, 2021
How to tell if a website is safe
It can be difficult to tell a legitimate website apart from an unsafe one – follow these steps to identify and protect yourself from bad websites The post How to tell if a website is safe appeared first on WeLiveSecurity
June 23, 2021
The components for Windows Container Support for Red Hat OpenShift 2.0.1 are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
June 23, 2021
Several security issues were fixed in the Linux kernel.
June 23, 2021
The system could be made to run programs as an administrator.
June 23, 2021
Several security issues were fixed in the Linux kernel.
June 23, 2021
BEC Losses Top $1.8B as Tactics Evolve
June 22, 2021
Email Bug Allows Message Snooping, Credential Theft
June 22, 2021
Kids’ Apps on Google Play Rife with Privacy Violations
June 22, 2021
An update for kernel is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 22, 2021
Six Flags to Pay $36M Over Collection of Fingerprints
June 22, 2021
An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact
June 22, 2021
An update for the virt:8.2 and virt-devel:8.2 modules is now available for Advanced Virtualization for RHEL 8.2.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
June 22, 2021
An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 22, 2021