Menu

Category Archives: Security

Articles about security

WireGuard Brings Speed and Simplicity to VPN Technology>

Reading Time: ~ 3 min. Mobile devices have become an indispensable part of our lives. By the time we’re teenagers, we’re already tethered to technology that lives in our pockets and connects us to a network far larger than we ever imagined possible. Because of the way we interact with our phones, it knows our […]

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Using OPA for cloud-native app authorization
IBM adds code risk analyzer to cloud-based CI/CD

An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6, 7, and 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update is now available for Red Hat JBoss Enterprise Application Platform 7.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update that fixes two vulnerabilities is now available.

An update that fixes 16 vulnerabilities is now available.

Was that November’s Patch Tuesday? Already? Oh, no, it’s just Adobe issuing 14 emergency security fixes
Automation software slinger SaltStack warns of stop-watching-the-election-and-patch-now bugs
Oracle Solaris Zero-Day Attack Revealed
APT Groups Finding Success with Mix of Old and New Tools
34M Records from 17 Companies Up for Sale in Cybercrime Forum
The death of the email attack ‘campaign’
Two Chrome Browser Updates Plug Holes Actively Targeted by Exploits
None of our apps (except those 3) could secretly slurp Facebook user details, devs rage to High Court of England and Wales
Google squashes two more Chrome bugs under active attacks

The updates come on the heels of news of attacks exploiting another zero-day in Chrome in tandem with a previously-unknown Windows flaw The post Google squashes two more Chrome bugs under active attacks appeared first on WeLiveSecurity

Google discloses Windows zero‑day bug exploited in the wild

The security hole isn’t expected to be plugged until the forthcoming Patch Tuesday bundle of security fixes The post Google discloses Windows zero‑day bug exploited in the wild appeared first on WeLiveSecurity

How’s this for the ultimate gaming achievement? Half-Life 2’s Gnome Chompski is going to space – in real life
Adobe Warns Windows, MacOS Users of Critical Acrobat and Reader Flaws
Media Comms Giant Says Ransomware Hit Will Cost Millions
Oracle patches severe flaw in WebLogic Server that could be exploited ‘without the need for a username and password’
Oracle Rushes Emergency Fix for Critical WebLogic Server Flaw
Protecting the NHS: NCSC fended off lots of meddling aimed at UK health orgs while ransomware ramped up

python-cryptography could be made to expose sensitive information over the network.

Several security issues were fixed in AccountsService.

GDM could be made to create privileged users.

Vaisha Bernard discovered that Blueman, a graphical bluetooth manager performed insufficient validation on a D-Bus interface, which could result in denial of service or privilege escalation.

I’ll give you my passwords if you investigate police corruption, accused missile systems leaker told cops

There were several vulnerabilites reported against wordpress, as follows: CVE-2020-28032

CERT/CC: ‘Sensational’ bug names spark fear, hype – so we’ll give flaws our own labels… like Suggestive Bunny

An update that solves one vulnerability and has two fixes is now available.

Russian jailed for eight years in the US for writing code that sifted botnet logs for web banking creds for fraudsters
Are you protected from the latest threats to Industrial Control Systems?
$100M Botnet Scheme Lands Cybercriminal 8 Years in Jail
Survey: Cybersecurity Skills Shortage is ‘Bad,’ But There’s Hope
WordPress Pushes Out Multiple Flawed Security Updates
Texas Gold-Dealer Mined for Payment Details in Months-Long Data Breach
Scammers Abuse Google Drive to Send Malicious Links
Unpatched Windows Zero-Day Exploited in the Wild for Sandbox Escape
Is Hunter Biden’s laptop password really “Hunter02”?
Google’s home security package flies the Nest, Chocolate Factory pledges software support – for now
You can’t spell ‘electronics’ without ‘elect’: The time for online democracy has come
Maze ransomware gang says it has quit the cybercrime business

Several security issues were fixed in Samba.

Google reCAPTCHA service under the microscope: Questions raised over privacy promises, cookie use

An update that fixes three vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes three vulnerabilities is now available.

India securities regulator and stock exchanges worry that crims are exploiting lax work from home security

In junit4 the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system’s temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they are, by

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system. Both the SPICE client (spice-gtk) and server are affected by

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1.

An update that solves 5 vulnerabilities and has one errata is now available.

An update that solves 5 vulnerabilities and has one errata is now available.

An update that solves 8 vulnerabilities and has 5 fixes is now available.

security update

An update that fixes one vulnerability is now available.

An update that fixes 7 vulnerabilities is now available.

An update that solves 8 vulnerabilities and has 5 fixes is now available.

This update corrects a regression in some Xen virtual machine environments. For reference the original advisory text follows. Several vulnerabilities have been discovered in the Linux kernel that

An update that fixes 6 vulnerabilities is now available.

An update that solves one vulnerability and has three fixes is now available.

Crippling Cyberattacks, Disinformation Top Concerns for Election Day
Windows kernel zero-day disclosed by Google’s Project Zero after bug exploited in the wild by hackers
WordPress Patches 3-Year-Old High-Severity RCE Bug
Firestarter Android Malware Abuses Google Firebase Cloud Messaging
Wisc. GOP’s $2.3M MAGA Hat Debacle Showcases Fraud Concerns
Halloween News Wrap: The Election, Hospital Deaths and Other Scary Cyberattack Stories
Wroba Mobile Banking Trojan Spreads to the U.S. via Texts
The Russians are at it again: Zebrocy backdoor malware is evolving, Uncle Sam warns close to eve of presidential election
IoT security: Are we finally turning the corner?

Better IoT security and data protection are long overdue. Will they go from an afterthought to everyone’s priority any time soon? The post IoT security: Are we finally turning the corner? appeared first on WeLiveSecurity

A vulnerability in the handling of normalization with modrdn was discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated remote attacker can use this flaw to cause a denial of service (slapd daemon crash) via a

An update that fixes two vulnerabilities is now available.

Marriott fined £0.05 for each of the 339 million hotel guests whose data crooks were stealing for four years
Marriott data breach fine slashed to £18.4 million by UK regulator
Japanese nuclear agency warns of cyber attack, turns off email systems
Why, yes, you can register an XSS attack as a UK company name. How do we know that? Someone actually did it

Several issues have been found in cimg, a powerful image processing library.

Microsoft Warns Threat Actors Continue to Exploit Zerologon Bug

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service or information leaks.

On Friday the US starts Ender’s hacking game: All local teens can compete for scholarships in cybersecurity
How to plan a password security project
NVIDIA Patches Critical Bug in High-Performance Servers
If you haven’t patched WebLogic server console flaws in the last eight days ‘assume it has been compromised’
US hospitals warned of threat of imminent ransomware attack
Kegtap, Singlemalt, Winekey Malware Serve Up Ransomware to Hospitals
Days before the US election, phishers net $2.3m from Wisconsin Republicans
University Email Hijacking Attacks Push Phishing, Malware
Google Safari Workaround case inspires campaign to sue Facebook in UK’s High Court over Cambridge Analytica app

Reading Time: ~ 4 min. Nurul Mohd-Reza knows how to empathize with the customers she serves. Her work with marginalized groups as a college student, she says, helped prepare her for when the pandemic turned many of her customers’ businesses upside down last March. Here she discusses what she’s learned after just 10 months in […]

REvil Gang Promises a Big Video-Game Hit; Claims Massive Revenue
Ryuk this for a game of soldiers: Ransomware-flingers actively targeting hospitals in the US, cyber agencies warn
Over 100,000 machines remain vulnerable to SMBGhost exploitation

The patch for the critical flaw that allows malware to spread across machines without any user interaction was released months ago The post Over 100,000 machines remain vulnerable to SMBGhost exploitation appeared first on WeLiveSecurity

ESET Threat Report Q3 2020

A view of the Q3 2020 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts The post ESET Threat Report Q3 2020 appeared first on WeLiveSecurity