Menu

Category Archives: Security

Articles about security

Aging infrastructure in the United States is not confined to crumbling roads and bridges. Recent events have shown that connected devices in our pipelines, water treatment facilities and power grids are also vulnerable to exploitation. As of now, we still don’t know much about the ransomware attack against the operators of the Colonial Pipeline. Details […]

Manchester City win the Carabao Cup Final, many illegal streamers lose The COVID pandemic has led to a surge in content consumption as people stayed home and turned to Netflix, Youtube and other streaming services for entertainment. Not everyone agrees with paying for the latest episode or album, however, and this rise has ran parallel […]

Researchers Flag e-Voting Security Flaws
Apple’s Find My network can be abused to leak secrets to the outside world via passing devices
Telegram Fraudsters Ramp Up Forged COVID-19 Vaccine Card Sales
Gig Workers Being Paid $500 for Payroll Passwords
Happy to pay out to ransomware masterminds? Yup, we thought so
‘FragAttacks’: Wi-Fi Bugs Affect Millions of Devices
TeaBot Trojan Targets Banks via Hijacked Android Handsets
Britain to spend £22m influencing Indo-Pacific nations’ cybersecurity policies against ‘authoritarian regimes’
ESET Research goes to RSA Conference 2021 with record number of presentations

We will explore Android stalkerware, air-gapped networks and XP exploits The post ESET Research goes to RSA Conference 2021 with record number of presentations appeared first on WeLiveSecurity

Blessed are the cryptographers, labelling them criminal enablers is just foolish
Beijing twirls ban-hammer at 84 more apps it says need to stop slurping excess data
South Korea orders urgent review of energy infrastructure cybersecurity
Tech industry quietly patches FragAttacks Wi-Fi flaws that leak data, weaken security

security update

Wormable Windows Bug Opens Door to DoS, RCE
SolarWinds CEO describes overhauled Orion build system after that ‘very small, unique’ security breach
GitHub Prepares to Move Beyond Passwords
Microsoft emits more fixes for Exchange Server plus patches for remote-code exec holes in HTTP stack, Visual Studio
Hackers Leverage Adobe Zero-Day Bug Impacting Acrobat Reader
Fake Chrome App Anchors Rapidly Worming ‘Smish’ Cyberattack
Shifting Threats in a Changed World: Edge, IoT and Vaccine Fraud
UK’s Computer Misuse Act to be reviewed, says Home Secretary as she condemns ransomware payoffs
200K Veterans’ Medical Records May Have Been Stolen by Ransomware Gang
NHS App gets go-ahead for vaccine passport use despite protest from privacy groups
DarkSide Wanted Money, Not Disruption from Colonial Pipeline Attack
App Tracking: Apps plead for users to press allow, but 85% of Apple iOS consumers are not opting in
The DarkSide ransomware gang must be shitting itself right now
WhatsApp will limit features for users who don’t accept new data‑sharing rules

Your account won’t be deleted, but here’s what you may want to be aware of if not even repeated reminders do the trick The post WhatsApp will limit features for users who don’t accept new data‑sharing rules appeared first on WeLiveSecurity

Compsci boffin publishes proof-of-concept code for 54-year-old zero-day in Universal Turing Machine

An update is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for kernel is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Train operator phlunks phishing test by teasing employees with non-existent COVID bonus
Tencent research team scores free powerups for electric cars with Raspberry Pi-powered X-in-the-middle attack
Indian government says 5G doesn’t cause COVID-19. Also points out India has no 5G networks
Trend Micro hosted email service is down, inboxes still stuck in cloudy limbo

Update to latest upstream version.

This update fixes several issues in djvulibre. These are mostly related to opening of corrupted files.

An update that fixes one vulnerability is now available.

An update that contains security fixes can now be installed.

Kubecon 2021: A largely dry and corporate affair where the best bits involved a spot of Kubernetes-hacking roleplay

Openshift Logging Bug Fix Release (5.0.3) This release includes a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for postgresql is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

It was discovered that there was potential directory-traversal vulnerability in Django, a popular Python-based web development framework.

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

Colonial Pipeline’s Ransomware Attack Sparks Emergency Declaration
Lemon Duck Cryptojacking Botnet Changes Up Tactics
City of Tulsa struck by ransomware attack
Uncle Sam wants ‘ethical hackers’ to crack its planetary defenses, but don’t expect a pay-day from this bug bounty
Major US oil pipeline shut down after ransomware attack
Namecheap hosted 25%+ of fake UK govt phishing sites last year – NCSC report
US declares emergency after ransomware shuts oil pipeline that pumps 100 million gallons a day
Major U.S. Pipeline Crippled in Ransomware Attack
iPhone Hack Allegedly Used to Spy on China’s Uyghurs
Russian cyber-spies changed tactics after the UK and US outed their techniques – so here’s a list of those changes

Several vulnerabilities were discovered in mediawiki, a wiki website engine for collaborative work. CVE-2021-20270

The Qualys Research Labs reported several vulnerabilities in Exim, a mail transport agent, which could result in local privilege escalation and remote code execution.

Privacy activist Max Schrems on Microsoft’s EU data move: It won’t keep the NSA away
80% of Net Neutrality Comments to FCC Were Fudged
Insurer AXA says it will no longer cover ransomware payments in France
Chinese smart TVs caught hoovering up data about devices on customers’ networks
When not to use edge computing
Cisco HyperFlex web interface has critical flaw that lets attackers get root and execute arbitrary commands
Kids in Hong Kong and other highly surveilled states worry infosec careers are just asking for trouble
Google Play to require privacy labels on apps in 2022, almost two years after Apple
Google will make you use two-step verification to login

What’s better for getting your business’ name out there and boosting sales than having a killer business marketing plan with well-placed ads, zippy copy, and a slick design? The answer is: having a group of dedicated real-world customers who use their own platforms to advocate for your business and its offerings. Thanks to social media, […]

Popular routers found vulnerable to hacker attacks

Millions of Brits could be at risk of cyberattacks due to poor default passwords and a lack of firmware updates The post Popular routers found vulnerable to hacker attacks appeared first on WeLiveSecurity

Qualcomm Chip Bug Opens Android Fans to Eavesdropping
Critical Cisco SD-WAN, HyperFlex Bugs Threaten Corporate Networks
Ryuk Ransomware Attack Sprung by Frugal Student
DDoS attack knocks Belgian government websites offline

The attack overwhelmed the systems of a Belgian ISP, leading to widespread service outages and disruptions The post DDoS attack knocks Belgian government websites offline appeared first on WeLiveSecurity

Vulnerability in Snapdragon 855 SoCs could pwn Android modems, allow baddies to snoop on conversations
Massive DDoS Attack Disrupts Belgium Parliament
NSA offers advice: connecting OT to the rest of the net can lead to “indefensible levels of risk”
How to accurately match OVAL security data to installed RPMs
Smashing Security podcast #226: Cryptocrazies and NFTs
Fantastic passwords and where your children can find them

How witches, wizards and superheroes can help your kids stay safe from cyber-villains, plus other parenting hacks to encourage your children to use secure passwords The post Fantastic passwords and where your children can find them appeared first on WeLiveSecurity

Crane horror Reg reader uses his severed finger to unlock Samsung Galaxy phone
Chrome on Windows turns on Intel, AMD chip-level defenses against malicious websites
JET engine flaws can crash Microsoft’s IIS, SQL Server, say Palo Alto researchers
Signal says its Instagram ads were banned for being too honest
New Crypto-Stealer ‘Panda’ Spread via Discord
Anti-Spam WordPress Plugin Could Expose Website User Data
Raft of Exim Security Holes Allow Linux Mail Server Takeovers
Microsoft will soon remove Flash Player from Windows 10 devices

The Patch Tuesday security update due in July should hammer the last nail in the coffin of Adobe Flash Player The post Microsoft will soon remove Flash Player from Windows 10 devices appeared first on WeLiveSecurity

21 nails in Exim mail server: Vulnerabilities enable ‘full remote unauthenticated code execution’, millions of boxes at risk
Peloton’s Leaky API Spilled Riders’ Private Data
Peloton exercise bikes found exposing user data – company dawdles in its response
East London council blurts thousands of residents’ email addresses in To field blunder
Feds Shut Down Fake COVID-19 Vaccine Phishing Website
21Nails: Multiple Critical Vulnerabilities Discovered in Exim Mail Server – Patch Now!>
Twilio’s private GitHub repositories cloned by Codecov attacker, cloud comms platform confirms
Compliance clarity with Red Hat Insights
Ousaban: Private photo collection hidden in a CABinet

Another in our occasional series demystifying Latin American banking trojans The post Ousaban: Private photo collection hidden in a CABinet appeared first on WeLiveSecurity

What not to expect when you’re expecting: Fertility apps may be selling intimate health secrets

Red Hat OpenShift Container Platform release 4.6.27 is now available with updates to packages and images that fix several bugs. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which