Menu

Category Archives: Security

Articles about security

Hackers, never at a loss for creative deception, have engineered new tactics for exploiting the weakest links in the cybersecurity chain: ourselves! Social engineering and business email compromise (BEC) are two related cyberattack vectors that rely on human error to bypass the technology defenses businesses deploy to deter malware. Social Engineering Social Engineering is when […]

Security Issues in PoS Terminals Open Consumers to Fraud

Cybercrime surpasses $1Trillion in global costs A recent study has put the global cost of cybercrime at over $1 trillion for 2020. This figure is up significantly from 2018, which was calculated at around $600 billion. And while most effects are financial, roughly 92% of affected organizations cited by the study reported additional issues stemming […]

Adrozek Malware Delivers Fake Ads to 30K Devices a Day
PGMiner, Innovative Monero-Mining Botnet, Surprises Researchers
British voyeur escapes US extradition over 770 cases of webcam malware
Feds: K-12 Cyberattacks Dramatically on the Rise
Cybersecurity Advent calendar: Tips for buying gifts and not receiving coal

While shopping for the perfect presents, be on the lookout for naughty cybercriminals trying to ruin your Christmas cheer by tricking you out of both gifts and money The post Cybersecurity Advent calendar: Tips for buying gifts and not receiving coal appeared first on WeLiveSecurity

Operation StealthyTrident: corporate software under attack

LuckyMouse, TA428, HyperBro, Tmanger and ShadowPad linked in Mongolian supply-chain attack The post Operation StealthyTrident: corporate software under attack appeared first on WeLiveSecurity

Facebook Shutters Accounts Used in APT32 Cyberattacks
Subway email weirdness: Suspicion grows over apparent Trickbot trojan delivery campaign

An update that solves 11 vulnerabilities and has 62 fixes is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that solves one vulnerability, contains one feature and has 6 fixes is now available.

An update that fixes 8 vulnerabilities is now available.

An update that solves four vulnerabilities and has 11 fixes is now available.

These free tools from Recorded Future can make you a security intelligence expert
After police raid on COVID-19 whistleblower, it’s revealed password was publicly posted on Florida Department of Health’s website
Defending the Intelligent Edge from Evolving Attacks
Ad-scamming, login-stealing Windows malware is hitting Chrome, Edge, Firefox, Yandex browsers, says Microsoft
Pfizer COVID-19 Vaccine Targeted in EU Cyberattack

security update

security update

‘Malwareless’ ransomware campaign operators pwned 83k victims’ MySQL servers, 250k databases up for sale
MoleRats APT Returns with Espionage Play Using Facebook, Dropbox
The patch that wasn’t: Cisco emits fresh fixes for NTLM hash-spilling vuln and XSS-RCE combo in Jabber app
PLEASE_READ_ME Ransomware Attacks 85K MySQL Servers
Zero-Click Wormable RCE Vulnerability in Cisco Jabber Gets Fixed, Again

The update of sqlite3 released as DLA-2340-1 contained an incomplete fix for CVE-2019-20218. Updated sqlite3 packages are now available to correct this issue.

Goodbye to Flash – if you’re still running it, uninstall Flash Player now
Cyber Monday is Every Monday: Securing the ‘New Normal’

An update that solves 12 vulnerabilities and has 72 fixes is now available.

UK union pens letter to data watchdog on icky workplace monitoring systems like Microsoft’s Productivity Score

An update that solves one vulnerability, contains one feature and has 7 fixes is now available.

An update that solves 12 vulnerabilities and has 72 fixes is now available.

Smashing Security podcast #208: Hidden treasure, COVID tracker trauma, and happy holidays with IoT
Misery of Ransomware Hits Hospitals the Hardest
Center for Internet Security (CIS) compliance in Red Hat Enterprise Linux using OpenSCAP
Public-Key Cryptography Standard (PKCS) #11 v 3.0 has been released: What is it, and what does it mean for RHEL?
Critical Steam Flaws Could Let Gamers Crash Opponents’ Computers
UK Ministry of Defence: We won’t prosecute bug bounty hunters – oh btw, we now have one of those

An update that fixes three vulnerabilities is now available.

An update that fixes one vulnerability is now available.

Google Chrome’s crackdown on ad blockers and browser extensions, Manifest v3, is now available in beta
South Korea kills ActiveX-based government digital certificate service
Record Levels of Software Bugs Plague Short-Staffed IT Teams in 2020

security update

EU Medicines Agency hacked, BioNTech-Pfizer coronavirus vaccine paperwork stolen, probe launched
SideWinder APT Targets Nepal, Afghanistan in Wide-Ranging Spy Campaign
Microsoft Patch Tuesday fixes 58 flaws

The last Patch Tuesday of the year brings another fresh batch of fixes for Microsoft products and while the number may be lower the patches are no less important. The post Microsoft Patch Tuesday fixes 58 flaws appeared first on WeLiveSecurity

COVID-19 Vaccine Cyberattacks Steal Credentials, Spread Zebrocy Malware
D-Link Routers at Risk for Remote Takeover from Zero-Day Flaws

The updated packages fix some problems found in version 86 and security vulnerabilities. References: – https://bugs.mageia.org/show_bug.cgi?id=27630

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that solves 8 vulnerabilities, contains one feature and has one errata is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

Using OPA for multicloud policy and process portability
Bitter war of words erupts between UK cops and web security expert over alleged flaws in Cyberalarm monitoring tool
Cybersecurity giant FireEye says it was hacked by govt-backed spies who stole its crown-jewels hacking tools
FireEye hacked. “State-sponsored attackers” blamed as Red Team tools stolen. Here’s what you need to know
Google Patches Critical Wi-Fi and Audio Bugs in Android Handsets
Patch Tuesday brings bug fixes for OpenSSL, IBM, SAP, Kubernetes, Adobe, and Red Hat. And Microsoft, of course
FireEye Cyberattack Compromises Red-Team Security Tools
Court orders encrypted email biz Tutanota to build a backdoor in user’s mailbox, founder says ‘this is absurd’
Divers Pull Rare Surviving WWII Enigma Cipher Machine from Bottom of the Baltic

security update

security update

Microsoft Wraps Up a Lighter Patch Tuesday for the Holidays
Apple Manufacturer Foxconn Confirms Cyberattack
The Internal Revenue Service expands identity protection to all tax‑payers

U.S. tax-payers will be able to enroll in the Identity Protection PIN program that was previously available only to certain users starting mid-January. The post The Internal Revenue Service expands identity protection to all tax‑payers appeared first on WeLiveSecurity

The Remote-Work Transition Shifts Demand for Cyber Skills
Oblivious DoH, OPAQUE passwords, Encrypted Client Hello: Cloudflare’s protocol proposals to protect privacy
Critical, Unpatched Bugs Open GE Radiological Devices to Remote Code Execution
Adobe Warns Windows, macOS Users of Critical-Severity Flaws
Spearphishing Attack Spoofs Microsoft.com to Target 200M Office 365 Users
Foxconn hit with record-breaking $34 million ransom demand after cyber attack
‘Amnesia:33’ TCP/IP Flaws Affect Millions of IoT Devices

David Benjamin discovered a flaw in the GENERAL_NAME_cmp() function which could cause a NULL dereference, resulting in denial of service. Additional details can be found in the upstream advisory:

Pure frustration: What happens when someone uses your email address to sign up for PayPal, car hire, doctors, security systems and more

An update that solves 6 vulnerabilities and has one errata is now available.

An update for mariadb-galera is now available for Red Hat OpenStack Platform 10 (Newton). Red Hat Product Security has rated this update as having a security impact of High. A Common Vulnerability Scoring System (CVSS) base score, which

Iran to issue license for national bug bounty program to clean up its code base
Cops raid home of ousted data scientist who created her own Florida COVID-19 dashboard
Kremlin hackers are right now exploiting security hole in VMware software to hijack systems, NSA warns
NSA Warns: Patched VMware Bug Under Active Attack
When is a remote-code-execution bug in Teams not an RCE? When Microsoft says it isn’t, flaw finder discovers
Rana Android Malware Updates Allow WhatsApp, Telegram IM Snooping
Europol Warns COVID-19 Vaccine Rollout Vulnerable to Fraud, Theft
‘Free’ Cyberpunk 2077 Downloads Lead to Data Harvesting
Google patches four high‑severity flaws in Chrome

The new release patches a total of eight vulnerabilities affecting the desktop versions of the popular browser. The post Google patches four high‑severity flaws in Chrome appeared first on WeLiveSecurity

Recruitment giant Randstad hit by ransomware, sensitive data stolen
Israel shaken by data leak after ransomware attack at Shirbit insurance company
Insider Report: Healthcare Security Woes Balloon in COVID-Era
Chinese Breakthrough in Quantum Computing a Warning for Security Teams