Menu

Category Archives: Security

Articles about security

Gaming company Capcom hit by cyberattack

The developer of popular video game franchises took swift action to prevent the attack from spreading further across its systems The post Gaming company Capcom hit by cyberattack appeared first on WeLiveSecurity

Business VOIP phone systems are being hacked for profit worldwide. Is yours secure?
Sodinokibi/REvil ransomware gang pwns British housing biz via suspected phishing attack

Reading Time: ~ 2 min. Maze Ransomware Group Ends Operations A press release issued this week announced the end of the Maze ransomware group’s data theft operations. In the release, the Maze authors revealed their motives behind one of the most successful ransomware campaigns to date, and why they chose to finally shut down their […]

Apple Patches Bugs Tied to Previously Identified Zero-Days
Snap-crappy: 183 Brit local authorities operate 80,000 CCTV cams between them, says surveillance watchdog

Several vulnerabilities were discovered in WordPress, a web blogging tool. They allowed remote attackers to run insecure deserialization, embed spam, perform various Cross-Site Scripting (XSS) or Cross-Site Request Forgery (CSRF) attacks, escalate privileges, run arbitrary

netqmail could be made to crash if it received specially crafted input.

Ransomware attack shutters Brazilian courts. But did attackers breach the virtual machine divide?
Tech support scammer dialed random number and Australian Police’s cybercrime squad answered
Apple emits iOS, iPadOS, watchOS, macOS patches to fix three hijack-my-device flaws exploited in the wild
Gaming Giant Capcom Hit By Ragnar Locker Ransomware: Report
Zoom Snooping: How Body Language Can Spill Your Password

Update to CVE release 3001.3-1 for Python3 Includes fixes for CVE-2020-16846, CVE-2020-17490, CVE-2020-25592

Fix executable hardening (PIC/PIE)

Update to v2.1.4. Contains security fix for CVE-2020-15238.

Update to Chromium 86. A few big things here: 1. Upstream has made hardware accelerated video support (VAAPI) for Linux possible without patches. One key difference is that the patchset used previously in Fedora enabled it by default and upstream’s approach disables it by default. To enable Hardware accelerated video in chromium, open this link […]

Following Ubisoft cyber attack, hackers claim to leak Watch Dogs: Legion code online
After Cummings’ Barnard Castle trip, cheeky Britons started using the word ‘vision’ in their passwords
Cisco Zero-Day in AnyConnect Secure Mobility Client Remains Unpatched

An update that fixes 5 vulnerabilities is now available.

An update that solves three vulnerabilities and has 6 fixes is now available.

An update that fixes 7 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

Malspam Campaign Milks Election Uncertainty
Data protection scofflaws failed to pay £2m in fines from UK watchdog – and 68% of penalties are still outstanding
Capcom hacked. Resident Evil game developer discloses cyber attack
USBGuard improvements in Red Hat Enterprise Linux 8.3
Smashing Security podcast #203: Testing times, naming names, and the bald truth about AI
Deloitte’s ‘Test your Hacker IQ’ site fails itself after exposing database user name, password in config file
No, GitHub’s source code wasn’t hacked and posted on GitHub, says GitHub CEO
Proofpoint survey: IT security leaders worry about and are ill-prepared to defeat cyber-attacks
Criticalstudies.org sounds pretty important, right? Wrong: USA says it’s an Iranian fake news front

Reading Time: ~ 2 min. Adobe Flash Being Uninstalled on Windows Systems Following its September announcement, Microsoft has released an update that removes Adobe Flash from Windows 10 systems and prevents reinstallation. It should be noted that this update only removes the version of Adobe Flash that comes bundled with Windows 10. Internet browser extensions […]

Revamped DLL side-load attack hits Myanmar

security update

Feds throw book at eBay execs who deny they had anything to do with cyberstalking of site’s critics
Mysterious APT Leaves Curious ‘KilllSomeOne’ Clue
GrowDiaries Exposes Emails, Passwords of 1.4M Cannabis Growers
Google Forms Abused to Phish AT&T Credentials
You can be a security intelligence expert, with these free tools from Recorded Future
If you’re an update laggard, buck up: Chrome zero-days are being exploited in the wild
A career in cybersecurity: Is it for you?

There’s no shortage of opportunities for cybersecurity professionals and people looking to break into this field of endeavor. Could this also be the right career path for you? The post A career in cybersecurity: Is it for you? appeared first on WeLiveSecurity

Toymaker Mattel Hit by Ransomware Attack
VMware Issues Updated Fix For Critical ESXi Flaw
Code42 Incydr Series: Why Most Companies Can’t Stop Departing Employee Data Theft
Police to Livestream Ring Camera Footage of Mississippi Residents

An update that solves three vulnerabilities and has 6 fixes is now available.

WireGuard Brings Speed and Simplicity to VPN Technology>

Reading Time: ~ 3 min. Mobile devices have become an indispensable part of our lives. By the time we’re teenagers, we’re already tethered to technology that lives in our pockets and connects us to a network far larger than we ever imagined possible. Because of the way we interact with our phones, it knows our […]

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Using OPA for cloud-native app authorization
IBM adds code risk analyzer to cloud-based CI/CD

An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6, 7, and 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update is now available for Red Hat JBoss Enterprise Application Platform 7.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update that fixes two vulnerabilities is now available.

An update that fixes 16 vulnerabilities is now available.

Was that November’s Patch Tuesday? Already? Oh, no, it’s just Adobe issuing 14 emergency security fixes
Automation software slinger SaltStack warns of stop-watching-the-election-and-patch-now bugs
Oracle Solaris Zero-Day Attack Revealed
APT Groups Finding Success with Mix of Old and New Tools
34M Records from 17 Companies Up for Sale in Cybercrime Forum
The death of the email attack ‘campaign’
Two Chrome Browser Updates Plug Holes Actively Targeted by Exploits
None of our apps (except those 3) could secretly slurp Facebook user details, devs rage to High Court of England and Wales
Google squashes two more Chrome bugs under active attacks

The updates come on the heels of news of attacks exploiting another zero-day in Chrome in tandem with a previously-unknown Windows flaw The post Google squashes two more Chrome bugs under active attacks appeared first on WeLiveSecurity

Google discloses Windows zero‑day bug exploited in the wild

The security hole isn’t expected to be plugged until the forthcoming Patch Tuesday bundle of security fixes The post Google discloses Windows zero‑day bug exploited in the wild appeared first on WeLiveSecurity

How’s this for the ultimate gaming achievement? Half-Life 2’s Gnome Chompski is going to space – in real life
Adobe Warns Windows, MacOS Users of Critical Acrobat and Reader Flaws
Media Comms Giant Says Ransomware Hit Will Cost Millions
Oracle patches severe flaw in WebLogic Server that could be exploited ‘without the need for a username and password’
Oracle Rushes Emergency Fix for Critical WebLogic Server Flaw
Protecting the NHS: NCSC fended off lots of meddling aimed at UK health orgs while ransomware ramped up

python-cryptography could be made to expose sensitive information over the network.

Several security issues were fixed in AccountsService.

GDM could be made to create privileged users.

Vaisha Bernard discovered that Blueman, a graphical bluetooth manager performed insufficient validation on a D-Bus interface, which could result in denial of service or privilege escalation.

I’ll give you my passwords if you investigate police corruption, accused missile systems leaker told cops

There were several vulnerabilites reported against wordpress, as follows: CVE-2020-28032

CERT/CC: ‘Sensational’ bug names spark fear, hype – so we’ll give flaws our own labels… like Suggestive Bunny

An update that solves one vulnerability and has two fixes is now available.

Russian jailed for eight years in the US for writing code that sifted botnet logs for web banking creds for fraudsters
Are you protected from the latest threats to Industrial Control Systems?
$100M Botnet Scheme Lands Cybercriminal 8 Years in Jail
Survey: Cybersecurity Skills Shortage is ‘Bad,’ But There’s Hope
WordPress Pushes Out Multiple Flawed Security Updates
Texas Gold-Dealer Mined for Payment Details in Months-Long Data Breach
Scammers Abuse Google Drive to Send Malicious Links
Unpatched Windows Zero-Day Exploited in the Wild for Sandbox Escape
Is Hunter Biden’s laptop password really “Hunter02”?
Google’s home security package flies the Nest, Chocolate Factory pledges software support – for now
You can’t spell ‘electronics’ without ‘elect’: The time for online democracy has come
Maze ransomware gang says it has quit the cybercrime business

Several security issues were fixed in Samba.

Google reCAPTCHA service under the microscope: Questions raised over privacy promises, cookie use

An update that fixes three vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.