December 8, 2020
NSA Warns: Patched VMware Bug Under Active Attack
December 7, 2020
Rana Android Malware Updates Allow WhatsApp, Telegram IM Snooping
December 7, 2020
Europol Warns COVID-19 Vaccine Rollout Vulnerable to Fraud, Theft
December 7, 2020
‘Free’ Cyberpunk 2077 Downloads Lead to Data Harvesting
December 7, 2020
Google patches four high‑severity flaws in Chrome
The new release patches a total of eight vulnerabilities affecting the desktop versions of the popular browser. The post Google patches four high‑severity flaws in Chrome appeared first on WeLiveSecurity
December 7, 2020
Recruitment giant Randstad hit by ransomware, sensitive data stolen
December 7, 2020
Insider Report: Healthcare Security Woes Balloon in COVID-Era
December 7, 2020
QNAP High-Severity Flaws Plague NAS Systems
December 7, 2020
An update that fixes one vulnerability is now available.
December 7, 2020
An update that fixes one vulnerability is now available.
December 7, 2020
An update that fixes one vulnerability is now available.
December 7, 2020
An update that solves 5 vulnerabilities and has one errata is now available.
December 7, 2020
An update that fixes one vulnerability is now available.
December 7, 2020
An update that solves one vulnerability and has one errata is now available.
December 7, 2020
An update that fixes one vulnerability is now available.
December 6, 2020
An update that contains security fixes can now be installed.
December 6, 2020
When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable (CVE-2020-26970).
December 6, 2020
In PDFResurrect before 0.20, lack of header validation checks causes a heap-buffer-overflow in pdf_get_version() (CVE-2020-20740). References: – https://bugs.mageia.org/show_bug.cgi?id=27704
December 6, 2020
Mutt before 2.0.2 did not ensure that $ssl_force_tls was processed if an IMAP server’s initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted connection, or to a machine-in-the-middle (CVE-2020-28896).
December 6, 2020
Food bank loses nearly $1,000,000 in Business Email Compromise scam
December 5, 2020
Security fix for CVE-2020-8037
December 5, 2020
security update
December 5, 2020
security update
December 5, 2020
Cybersecurity Advent Calendar: Let Santa in, keep hackers out!
Santa will soon come down the chimney, but there are potential entry points into your home and digital life that you should never leave open The post Cybersecurity Advent Calendar: Let Santa in, keep hackers out! appeared first on WeLiveSecurity
December 5, 2020
December 5, 2020
The package musl before version 1.2.1-2 is vulnerable to arbitrary code execution.
December 5, 2020
The package webkit2gtk before version 2.30.3-1 is vulnerable to arbitrary code execution.
December 5, 2020
The package gitea before version 1.12.6-1 is vulnerable to insufficient validation.
December 5, 2020
The package neomutt before version 20201120-1 is vulnerable to silent downgrade.
December 5, 2020
The package matrix-synapse before version 1.20.1-1 is vulnerable to denial of service.
December 5, 2020
Biological Worries Over Malware Attacks Researchers have recently unveiled the latest potential victim for malware authors: biological laboratories. By illicitly accessing these facilities, hackers may be able to digitally replace sections of DNA strings, causing unexpected results when biologists go to create or experiment with these compounds. While it is fortunate that this specific targeted […]
December 4, 2020
Making Sense of the Security Sensor Landscape
December 4, 2020
High-Severity Chrome Bugs Allow Browser Hacks
December 4, 2020
security update
December 4, 2020
Novel Online Shopping Malware Hides in Social-Media Buttons
December 4, 2020
Two vulnerabilities in the certificate list syntax verification and in the handling of CSN normalization were discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated remote attacker can take advantage of these
December 4, 2020
Several vulnerabilities were discovered in salt. CVE-2020-16846
December 4, 2020
According to data from a recent report, only 60% of office workers worldwide believe their company is resilient against cyberattacks. Nearly one in four (23%) admit to not knowing, while nearly one in five (18%) flat-out think it isn’t. In the anonymous, write-in responses to the survey, many workers agreed that their employers could be […]
December 4, 2020
Cybersecurity Trends 2021: Staying secure in uncertain times
ESET experts look back at some of the key themes that defined the cybersecurity landscape in the year that’s ending and give their takes on what to expect in 2021 The post Cybersecurity Trends 2021: Staying secure in uncertain times appeared first on WeLiveSecurity
December 4, 2020
VMware Rolls a Fix for Formerly Critical Zero-Day Bug
December 4, 2020
Vancouver Metro Disrupted by Egregor Ransomware
December 4, 2020
An update that fixes 5 vulnerabilities, contains one feature is now available.
December 4, 2020
An update that fixes 10 vulnerabilities is now available.
December 4, 2020
December 4, 2020
Chiaki Ishikawa discovered a stack overflow in SMTP server status handling which could potentially result in the execution of arbitrary code.
December 4, 2020
Kmart, Latest Victim of Egregor Ransomware – Report
December 3, 2020
TrickBot Returns with a Vengeance, Sporting Rare Bootkit Functions
December 3, 2020
iPhone hack allowed device takeover via Wi‑Fi
Using a zero-click exploit, an attacker could have taken complete control of any iPhone within Wi-Fi range in seconds The post iPhone hack allowed device takeover via Wi‑Fi appeared first on WeLiveSecurity
December 3, 2020
DeathStalker APT Spices Things Up with PowerPepper Malware
December 3, 2020
Turla Crutch: Keeping the “back door” open
ESET researchers discover a new backdoor used by Turla to exfiltrate stolen documents to Dropbox The post Turla Crutch: Keeping the “back door” open appeared first on WeLiveSecurity
December 3, 2020
Reverse Engineering Tools: Evaluating the True Cost
December 3, 2020
Cyberattacks Target COVID-19 Vaccine ‘Cold-Chain’ Orgs
December 3, 2020
As Modern Mobile Enables Remote Work, It Also Demands Security
December 3, 2020
Clop Gang Gallops Off with 2M Credit Cards from E-Land
December 3, 2020
Google Play Apps Remain Vulnerable to High-Severity Flaw
December 3, 2020
An update that solves 5 vulnerabilities and has one errata is now available.
December 3, 2020
An update that contains security fixes can now be installed.
December 3, 2020
An update that fixes one vulnerability is now available.
December 3, 2020
An update that solves 5 vulnerabilities and has one errata is now available.
December 3, 2020
An update that solves one vulnerability and has one errata is now available.
December 3, 2020
An update that solves one vulnerability and has one errata is now available.
December 3, 2020
Spotify Wrapped 2020 Rollout Marred by Pop Star Hacks
December 2, 2020
Think-Tanks Under Attack by Foreign APTs, CISA Warns
December 2, 2020
security update
December 2, 2020
Xerox DocuShare Bugs Allows Data Leaks
December 2, 2020
Turla’s ‘Crutch’ Backdoor Leverages Dropbox in Espionage Attacks
December 2, 2020
Mac users warned of more Ocean Lotus malware targeted attacks
December 2, 2020
Microsoft Revamps ‘Invasive’ M365 Feature After Privacy Backlash
December 2, 2020
DNS Filtering: A Top Battle Front Against Malware and Phishing
December 2, 2020
iPhone Bug Allowed for Complete Device Takeover Over the Air
December 2, 2020
Verifying Linux Server Security: What Every Admin Needs to Know>
December 2, 2020
An update that fixes one vulnerability is now available.
December 2, 2020
An update is now available for Red Hat Ceph Storage 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 2, 2020
An update that solves one vulnerability and has one errata is now available.
December 2, 2020
An update that fixes one vulnerability is now available.
December 2, 2020
An update that contains security fixes can now be installed.
December 2, 2020