October 12, 2020
An update that contains security fixes can now be installed.
October 12, 2020
An update that solves 12 vulnerabilities and has 59 fixes is now available.
October 12, 2020
Android ransomware learns new tricks to lock devices
October 12, 2020
Ransomware Attackers Buy Network Access in Cyberattack Shortcut
October 12, 2020
An update that solves two vulnerabilities and has one errata is now available.
October 12, 2020
Securing A Linux Web Server: Preventing Information Leakage>
October 11, 2020
An update that fixes one vulnerability is now available.
October 11, 2020
Frediano Ziglio discovered multiple buffer overflow vulnerabilities in the QUIC image decoding process of spice, a SPICE protocol client and server library, which could result in denial of service, or possibly, execution of arbitrary code.
October 11, 2020
security update
October 11, 2020
An update that fixes 5 vulnerabilities is now available.
October 10, 2020
An update that fixes 5 vulnerabilities is now available.
October 10, 2020
A potential Cross-Site Scripting (XSS) vulnerability was found in rails, a ruby based MVC framework. Views that allow the user to control the default (not found) value of the `t` and `translate` helpers could be susceptible to XSS attacks. When an HTML-unsafe string is passed as the
October 10, 2020
Oleg Kalnichevski discovered that httpcomponents-client, a Java library for building HTTP-aware applications, can misinterpret a malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request
October 10, 2020
An update that fixes two vulnerabilities is now available.
October 10, 2020
An update that fixes one vulnerability is now available.
October 10, 2020
Taking a screwdriver to unlock your IoT sex toy is nuts
October 10, 2020
An update that solves one vulnerability and has one errata is now available.
October 10, 2020
In Eclipse Web Tools Platform, a component of the Eclipse IDE, XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in the user
October 9, 2020
Reading Time: ~ 2 min. New Jersey Hospital Pays Massive Ransom Officials have decided to pay roughly $670,000 in ransom following a ransomware attack on the University Hospital in New Jersey. The hospital was likely forced into this decision after being unable to restore from backups the 240GB of data stolen in the attack on […]
October 9, 2020
Fitbit Spyware Steals Personal Data via Watch Face
October 9, 2020
Sophisticated Android Ransomware Executes with the Home Button
October 9, 2020
Google adds password breach alerts to Chrome for Android, iOS
The feature is part of the browser’s security improvements that were first built into its desktop version The post Google adds password breach alerts to Chrome for Android, iOS appeared first on WeLiveSecurity
October 9, 2020
Facebook Debuts Bug-Bounty ‘Loyalty Program’
October 9, 2020
An update that fixes one vulnerability is now available.
October 9, 2020
An update that fixes one vulnerability is now available.
October 9, 2020
An update that fixes one vulnerability is now available.
October 9, 2020
Amazon Prime Day Spurs Spike in Phishing, Fraud Attacks
October 9, 2020
MontysThree APT Takes Unusual Aim at Industrial Targets
October 9, 2020
Feds Sound Alarm Over Emotet Attacks on State, Local Govs
October 9, 2020
Google Rolls Out Fixes for High-Severity Android System Flaws
October 9, 2020
BAHAMUT Spies-for-Hire Linked to Extensive Nation-State Activity
October 9, 2020
Wormable Apple iCloud Bug Allows Automatic Photo Theft
October 9, 2020
Backport fix for CVE-2020-26159
October 9, 2020
Backport fix for CVE-2020-26159
October 9, 2020
autobuilt v2.1.0,Security fix for CVE-2020-14370
October 9, 2020
Cisco Fixes High-Severity Webex, Security Camera Flaws
October 8, 2020
HEH P2P Botnet Sports Dangerous Wiper Function
October 8, 2020
Working from a hotel? Beware the dangers of public Wi‑Fi
As more and more hotels are turning rooms into offices, the FBI is warning remote workers of cyber-threats lurking in the shadows The post Working from a hotel? Beware the dangers of public Wi‑Fi appeared first on WeLiveSecurity
October 8, 2020
Microsoft Azure Flaws Open Admin Servers to Takeover
October 8, 2020
An update that solves 9 vulnerabilities and has 105 fixes is now available.
October 8, 2020
An update that solves 9 vulnerabilities and has 105 fixes is now available.
October 8, 2020
An update for go-toolset-1.13 and go-toolset-1.13-golang is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 8, 2020
An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 8, 2020
CVE-2019-11840 An issue was discovered in supplementary Go cryptography libraries, aka golang-googlecode-go-crypto. If more than 256 GiB of keystream is
October 8, 2020
Reading Time: ~ 4 min. Like many of the technologies we discuss on this blog—think phishing scams or chatbots—deepfakes aren’t necessarily new. They’re just getting a whole lot better. And that has scary implications for both private citizens and businesses alike. The term “deepfakes,” coined by a Reddit user in 2017, was initially most often […]
October 8, 2020
Red Hat AMQ Interconnect 1.9.0 release packages are available for A-MQ Interconnect on RHEL 6, 7, and 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 8, 2020
security update
October 7, 2020
Had your face stolen lately?
It’s easy to reset your password or PIN after a data breach. But reset your face? Not so much. The post Had your face stolen lately? appeared first on WeLiveSecurity
October 7, 2020
An update that solves four vulnerabilities and has two fixes is now available.
October 7, 2020
An update that fixes 9 vulnerabilities, contains 10 features is now available.
October 7, 2020
An update for qemu-kvm is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 7, 2020
IRS COVID-19 Relief Payment Deadlines Anchor Convincing Phish
October 7, 2020
Comcast TV Remote Hack Opens Homes to Snooping
October 7, 2020
Several security vulnerabilities have been discovered in puma, highly concurrent HTTP server for Ruby/Rack applications. CVE-2020-11076
October 7, 2020
An update that fixes one vulnerability is now available.
October 7, 2020
Spice could be made to crash or run programs if it received specially crafted network traffic.
October 7, 2020
US gov’t warns against paying off ransomware attackers
Companies facilitating ransomware payments run the risk of facing stern penalties for violating US regulations The post US gov’t warns against paying off ransomware attackers appeared first on WeLiveSecurity
October 6, 2020
Grindr’s Bug Bounty Pledge Doesn’t Translate to Security
October 6, 2020
Male Chastity Device Comes with Massive Security Flaws
October 6, 2020
Boom! Mobile Customer Data Lost to Fullz House/Magecart Attack
October 6, 2020
5 steps to secure your connected devices
As we steadily adopt smart devices into our lives, we shouldn’t forget about keeping them secured and our data protected The post 5 steps to secure your connected devices appeared first on WeLiveSecurity
October 6, 2020
COVID-19 Clinical Trials Slowed After Ransomware Attack
October 6, 2020
APT Attack Injects Malware into Windows Error Reporting
October 6, 2020
Unpatched Apple T2 Chip Flaw Plagues Macs
October 6, 2020
An update that fixes one vulnerability is now available.
October 6, 2020
An update for spice and spice-gtk is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 6, 2020
An update that solves one vulnerability and has two fixes is now available.
October 6, 2020
Security fix for CVE-2020-5238 – ghc-cmark-gfm updated to 0.2.2 which rebases the bundled cmark-gfm to 0.29.0.gfm.1 https://github.com/github/cmark- gfm/security/advisories/GHSA-7gc6-9qr5-hc85
October 6, 2020
Security fix for CVE-2020-5238 – ghc-cmark-gfm updated to 0.2.2 which rebases the bundled cmark-gfm to 0.29.0.gfm.1 https://github.com/github/cmark- gfm/security/advisories/GHSA-7gc6-9qr5-hc85
October 6, 2020
Security fix for CVE-2020-5238 – ghc-cmark-gfm updated to 0.2.2 which rebases the bundled cmark-gfm to 0.29.0.gfm.1 https://github.com/github/cmark- gfm/security/advisories/GHSA-7gc6-9qr5-hc85
October 6, 2020