May 19, 2021
Windows PoC Exploit Released for Wormable RCE
Colonial Pipeline attack: Hacking the physical world
The attack is a reminder of growing cyberthreats to critical infrastructure while also showing why providers of essential services are ripe targets for cybercriminals The post Colonial Pipeline attack: Hacking the physical world appeared first on WeLiveSecurity
May 19, 2021
security update
May 18, 2021
security update
May 18, 2021
Stalkerware Apps Riddled with Security Bugs
May 18, 2021
It’s Time to Prepare for a Rise in Insider Threats
May 18, 2021
Magecart Goes Server-Side in Latest Tactics Changeup
May 17, 2021
DarkSide Hits Toshiba; XSS Forum Bans Ransomware
May 17, 2021
Bizarro Banking Trojan Sports Sophisticated Backdoor
May 17, 2021
CISOs Struggle to Cope with Mounting Job Stress
May 17, 2021
Take action now – FluBot malware may be on its way
Why FluBot is a major threat for Android users, how to avoid falling victim, and how to get rid of the malware if your device has already been compromised The post Take action now – FluBot malware may be on its way appeared first on WeLiveSecurity
May 17, 2021
7 keys to selecting a low-code platform
May 17, 2021
Android stalkerware threatens victims further and exposes snoopers themselves
ESET research reveals that common Android stalkerware apps are riddled with vulnerabilities that further jeopardize victims and expose the privacy and security of the snoopers themselves The post Android stalkerware threatens victims further and exposes snoopers themselves appeared first on WeLiveSecurity
May 17, 2021
**MariaDB 10.5.10** Release notes: https://mariadb.com/kb/en/mariadb-10510-release-notes/
May 16, 2021
Several vulnerabilities were discovered in jetty, a Java servlet engine and webserver. An attacker may reveal cryptographic credentials such as passwords to a local user, disclose installation paths, hijack user sessions or tamper with collocated webapps.
May 16, 2021
An update that solves two vulnerabilities and has one errata is now available.
May 16, 2021
Multiple security issues have been discovered in the PostgreSQL database system, which could result in the execution of arbitrary code or disclosure of memory content.
May 16, 2021
One security issue has been discovered in libgetdata CVE-2021-20204
May 16, 2021
Red Hat AMQ Streams 1.6.4 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 16, 2021
An update that fixes 20 vulnerabilities is now available.
May 15, 2021
An update that contains security fixes can now be installed.
May 15, 2021
– New upstream version (88.0.1) – Fixes CVE-2021-29952 (https://www.mozilla.org/en-US/security/advisories/mfsa2021-20/) —- – Fixed WebRTC indicator (mozbz#1705048). —- – Enable Wayland backend on Plasma/KDE by default (rhbz#1922608)
May 15, 2021
Update to Chromium 90.0.4430.93. Fixes the following security issues: CVE-2021-21206 CVE-2021-21220 CVE-2021-21201 CVE-2021-21202 CVE-2021-21203 CVE-2021-21204 CVE-2021-21221 CVE-2021-21207 CVE-2021-21208 CVE-2021-21209 CVE-2021-21210 CVE-2021-21211 CVE-2021-21212 CVE-2021-21213 CVE-2021-21214 CVE-2021-21215 CVE-2021-21216 CVE-2021-21217 CVE-2021-21218 CVE-2021-21219
May 15, 2021
Exiv2 update fixing security issues.
May 15, 2021
An update that fixes four vulnerabilities is now available.
May 14, 2021
security update
May 14, 2021
security update
May 14, 2021
Verizon’s 2021 DBIR: Phishing and ransomware threats looming ever larger
The report provides unique insights into how the COVID-19 pandemic affected the data breach landscape The post Verizon’s 2021 DBIR: Phishing and ransomware threats looming ever larger appeared first on WeLiveSecurity
May 14, 2021
FIN7 Backdoor Masquerades as Ethical Hacking Tool
May 14, 2021
European police bust major online investment fraud ring
The operation was carried out against an organized group that used online trading platforms to swindle victims out of US$36 million The post European police bust major online investment fraud ring appeared first on WeLiveSecurity
May 14, 2021
Verizon: Pandemic Ushers in ⅓ More Cyber-Misery
May 14, 2021
Ransomware’s New Swindle: Triple Extortion
May 14, 2021
Don’t migrate your problems to the cloud
May 14, 2021
Ransomware Going for $4K on the Cyber-Underground
May 13, 2021
The Red Hat Build of OpenJDK 8 (java-1.8.0-openjdk) is now available for portable Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 13, 2021
The Red Hat Build of OpenJDK 8 (java-1.8.0-openjdk) is now available for Windows. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 13, 2021
The Red Hat Build of OpenJDK 11 (java-11-openjdk) is now available for portable Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 13, 2021
The Red Hat Build of OpenJDK 11 (java-11-openjdk) is now available for Windows. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 13, 2021
Update to feature release 3003-1 for Python 3, Security fix for CVE-2021-31607
May 13, 2021
Several vulnerabilities have been discovered in the chromium web browser. CVE-2021-21201
May 13, 2021
1 million risky apps rejected or removed from Apple’s App Store in 2020
Apple also claims to have foiled US$1.5 billion worth of potentially fraudulent transactions The post 1 million risky apps rejected or removed from Apple’s App Store in 2020 appeared first on WeLiveSecurity
May 13, 2021
ESET Research goes to RSA Conference 2021 with two presentations
We will explore two threats – Android stalkerware and XP exploits The post ESET Research goes to RSA Conference 2021 with two presentations appeared first on WeLiveSecurity
May 13, 2021
Beyond MFA: Rethinking the Authentication Key
May 13, 2021
Fresh Loader Targets Aviation Victims with Spy RATs
May 13, 2021
Apple’s ‘Find My’ Network Exploited via Bluetooth
May 13, 2021
“What Bitcoin was to 2011, NFTs are to 2021.” That’s a claim from the highly respected “techno-geek” bible Ars Technica in it’s wonderful explainer on NFTs, or non-fungible tokens. Since cryptocurrencies were, are and will continue to be impactful technologies, surely NFTs are a topic worth exploring. They exploded into public consciousness this year as […]
May 12, 2021
Although they didn’t always call themselves a managed service provider, that’s exactly what T-Consulting has been since its inception. According to Vera Tucci, founder and CEO of the Italy-based MSP, it was her mission to give her clients more than a basic hardware/software bundle with a few hours of IT consultation. She knew her clients […]
May 12, 2021
Aging infrastructure in the United States is not confined to crumbling roads and bridges. Recent events have shown that connected devices in our pipelines, water treatment facilities and power grids are also vulnerable to exploitation. As of now, we still don’t know much about the ransomware attack against the operators of the Colonial Pipeline. Details […]
May 12, 2021
Manchester City win the Carabao Cup Final, many illegal streamers lose The COVID pandemic has led to a surge in content consumption as people stayed home and turned to Netflix, Youtube and other streaming services for entertainment. Not everyone agrees with paying for the latest episode or album, however, and this rise has ran parallel […]
May 12, 2021
Researchers Flag e-Voting Security Flaws
May 12, 2021
Gig Workers Being Paid $500 for Payroll Passwords
May 12, 2021
‘FragAttacks’: Wi-Fi Bugs Affect Millions of Devices
May 12, 2021