Menu

Category Archives: Security

Articles about security

Ousaban: Private photo collection hidden in a CABinet

Another in our occasional series demystifying Latin American banking trojans The post Ousaban: Private photo collection hidden in a CABinet appeared first on WeLiveSecurity

What not to expect when you’re expecting: Fertility apps may be selling intimate health secrets

Red Hat OpenShift Container Platform release 4.6.27 is now available with updates to packages and images that fix several bugs. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

Four security issues have been discovered in cgal. A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL. CVE-2020-28601

An update that fixes one vulnerability is now available.

Update to bugfix release 4.1.0 Security fix for CVE-2017-9438, CVE-2021-3402, CVE-2019-19648, CVE-2017-9438

Global Phishing Attacks Spawn Three New Malware Strains

security update

‘Millions’ of Dell PCs will grant malware, rogue users admin-level access if asked nicely

Typically, when cryptocurrency values change, one would expect to see changes in crypto-related cybercrime. In particular, trends in Bitcoin values tend to be the bellwether you can use to predict how other currencies’ values will shift, and there are usually corresponding shifts in crypto-based crime, such as ransomware, though it’s not necessarily the kind of […]

Red Hat open-sources StackRox Kubernetes security product
Pulse Secure VPNs Get a Fix for Critical Zero-Day Bugs
INTERPOL aims to deal a blow to digital piracy

The agency’s new initiative will also warn about the high cost of the free lunch – the increased risk of malware exposure The post INTERPOL aims to deal a blow to digital piracy appeared first on WeLiveSecurity

Apple Fixes Zero‑Day Security Bugs Under Active Attack
Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs
Sneakers, Gaming, Nvidia Cards: Retailers Can Stop Shopping Bots
Bait Boost: Phishers Delivering Increasingly Convincing Lures

An update that fixes one vulnerability is now available.

Boystown, dark web child abuse image website with 400,000 members, shut down by police

The Qualys Research Labs reported several vulnerabilities in Exim, a mail transport agent, which could result in local privilege escalation and remote code execution.

Several vulnerabilities were discovered in BIND, a DNS server implementation. CVE-2021-25214

One security issue has been discovered in subversion: CVE-2020-17525:

Apple patches iOS, macOS, iPadOS, watchOS, kitchen-sinkOS bugs said to be exploited in the wild

security update

Several vulnerabilities have been discovered in the chromium web browser. CVE-2021-21227

Scripps Health Cyberattack Causes Widespread Hospital Outages

Exiv2 update fixing security issues.

New Attacks Slaughter All Spectre Defenses 

security update

Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool
Deepfake Attacks Are About to Surge, Experts Warn
New Buer Malware Downloader Rewritten in E-Z Rust Language

An update for bind is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for bind is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for bind is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.

An update for bind is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for bind is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Upgrade to 2.9.20 bugfix and security update.

security update

security update

security update

PortDoor Espionage Malware Takes Aim at Russian Defense Sector
WeSteal: A Cryptocurrency-Stealing Tool That Does Just That
A Tale of Two Hacks: From SolarWinds to Microsoft Exchange
FBI teams up with ‘Have I Been Pwned’ to alert Emotet victims

The data breach notification site now allows you to check if your login credentials may have been compromised by Emotet The post FBI teams up with ‘Have I Been Pwned’ to alert Emotet victims appeared first on WeLiveSecurity

Bill to protect UK against harmful foreign investment becomes law
Happy Friday? Darktrace gets 40 per cent boost on London IPO debut
Microsoft Warns 25 Critical Vulnerabilities in IoT, Industrial Devices
DigitalOcean admits data breach exposed customers’ billing details
Australia proposes teaching cyber-security to five-year-old kids
Stealthy Linux backdoor malware spotted after three years of minding your business
Babuk Ransomware Gang Mulls Retirement
BadAlloc: Microsoft looked at memory allocation code in tons of devices and found this one common security flaw

security update

F5 Big-IP Vulnerable to Security-Bypass Bug
Experian API Leaks Most Americans’ Credit Scores
Multi-Gov Task Force Plans to Take Down the Ransomware Economy
COVID-19 Results for 25% of Wyoming Accidentally Posted Online
Anti-Vaxxer Hijacks QR Codes at COVID-19 Check-In Sites
SaaS Attacks: Lessons from Real-Life Misconfiguration Exploits
Vivaldi update unleashes the ‘Cookie Crumbler’ to simply block any services asking for consent (sites may break)
DoppelPaymer Gang Leaks Files from Illinois AG After Ransom Negotiations Break Down
Billions in data protection lawsuits rides on Google’s last-ditch UK Supreme Court defence for Safari Workaround sueball
Smashing Security podcast #225: Master of your domain, gripe sites, and John Deere Farmergeddon
48 ways you can avoid file-scrambling, data-stealing miscreants – or so says the Ransomware Task Force
Prime targets: Governments shouldn’t go it alone on cybersecurity

A year into the pandemic, ESET reveals new research into activities of the LuckyMouse APT group and considers how governments can rise to the cybersecurity challenges of the accelerated shift to digital The post Prime targets: Governments shouldn’t go it alone on cybersecurity appeared first on WeLiveSecurity

When you’re building a cybersecurity pro, you need to get the foundations right
Digital Ocean springs a leak: Miscreant exploits hole to peep on unlucky customers’ billing details for two weeks

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sles12sp5 was updated. The following patches have been included in this update:

The container suse/sles12sp3 was updated. The following patches have been included in this update:

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.

Update to Jetty 9.4.40 (fixes multiple CVEs)

security update

Microsoft Office SharePoint Targeted With High-Risk Phish, Ransomware Attacks
Etsy-owned musical instrument marketplace Reverb suffers data breach
Google Chrome V8 Bug Allows Remote Code-Execution
Apple patches severe macOS security flaw

Mac users are being urged to update to macOS Big Sur 11.3 as at least one threat group is exploiting the zero-day bug to sneak past the operating system’s built-in security mechanisms The post Apple patches severe macOS security flaw appeared first on WeLiveSecurity

Ransomware crooks who broke into Merseyrail used director’s email address to brag about it – report
Brit MPs and campaigners come together to oppose COVID status certificates as ‘divisive and discriminatory’
Chase Bank Phish Swims Past Exchange Email Protections
Was the email account of Merseyrail’s MD hacked to spread word of ransomware attack?
Cybersecurity World Mourns Over Security Researcher Dan Kaminsky’s Passing>
Protect Your WordPress Sites with CrowdSec>
Minified Linux Offerings Boost Containers and Edge Processing>
Arrest after man replaces official COVID-19 check-in signs with anti-vaxxer QR code
Update your Macs! Malware attacks can exploit critical flaws in Apple’s built-in defences
Nintendo Sues Video-Game Pirates
Linux Kernel Bug Opens Door to Wider Cyberattacks
Here’s what Russia’s SVR spy agency does when it breaks into your network, says US CISA infosec agency
Smishing: Why Text-Based Phishing Should Be on Every CISO’s Radar
Babuk Ransomware Gang Targets Washington D.C. Police
Washington DC police force confirms data breach after ransomware upstart Babuk posts trophies to Tor blog
Shells makes using Linux in the cloud incredibly easy>
Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses
Talking malware party tricks and cybersecurity trends

Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened.