February 10, 2021
Hacker Sets Alleged Auction for Witcher 3 Source Code
security update
February 10, 2021
security update
February 10, 2021
security update
February 10, 2021
Hybrid, Older Users Most-Targeted by Gmail Attackers
February 10, 2021
Microsoft patches actively exploited Windows kernel flaw
This month’s relatively humble bundle of security updates fixes 56 vulnerabilities, including a zero-day bug and 11 flaws rated as critical The post Microsoft patches actively exploited Windows kernel flaw appeared first on WeLiveSecurity
February 10, 2021
8 Brits arrested after probe into SIM-swapping scam targeting US celebs
February 10, 2021
Intel Squashes High-Severity Graphics Driver Flaws
February 10, 2021
An update for .NET 5.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 10, 2021
An update for .NET Core 2.1 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 10, 2021
An update for rh-dotnet50-dotnet is now available for .NET on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 10, 2021
An update for rh-dotnet31-dotnet is now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 10, 2021
An update for rh-dotnet21-dotnet is now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 10, 2021
An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 10, 2021
security update
February 10, 2021
Actively Exploited Windows Kernel EoP Bug Allows Takeover
February 9, 2021
Google Play Boots Barcode Scanner App After Ad Explosion
February 9, 2021
The supply chain attack that Trojanized a SolarWinds update to infect and spy on the IT management platform’s customer base continues to be analyzed. Early reports have called the methods highly sophisticated and the actors highly trained. We do know that IP addresses, a command and control server and a malicious product update file were […]
February 9, 2021
Attackers Exploit Critical Adobe Flaw to Target Windows Users
February 9, 2021
Hacker attempts to poison Florida city’s water supply
While the incursion was thwarted in time, cyberattacks targeting critical infrastructure are a major cause for concern The post Hacker attempts to poison Florida city’s water supply appeared first on WeLiveSecurity
February 9, 2021
ESET Threat Report Q4 2020
A view of the Q4 2020 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts The post ESET Threat Report Q4 2020 appeared first on WeLiveSecurity
February 9, 2021
Android Devices Hunted by LodaRAT Windows Malware
February 9, 2021
Cyberpunk 2077 Publisher Hit with Hack, Threats and Ransomware
February 9, 2021
Hacker Tries to Poison Water Supply of Florida Town
February 9, 2021
Hackers publish patient data stolen from two US hospital chains
February 9, 2021
DISA Has Released the Red Hat Enterprise Linux 8 STIG
February 9, 2021
How To Secure the Linux Kernel >
February 9, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2021:0411
February 9, 2021
An update for qemu-kvm-rhev is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 and Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 9, 2021
Red Hat OpenShift Container Platform release 4.5.31 is now available with updates to packages and images that fix several bugs. This release also includes a security update for Red Hat OpenShift Container Platform 4.5.
February 9, 2021
Various overflow errors were identified and fixed. CVE-2020-27814
February 9, 2021
The container caasp/v4.5/cilium-operator was updated. The following patches have been included in this update:
February 9, 2021
The container caasp/v4.5/cilium was updated. The following patches have been included in this update:
February 9, 2021
A hacker tried to poison Florida city’s water supply
February 9, 2021
Billions of Passwords Offered for $2 in Cyber-Underground
February 8, 2021
Critical WordPress Plugin Flaw Allows Site Takeover
February 8, 2021
Ransomware Demands Spike 320%, Payments Rise
February 8, 2021
security update
February 8, 2021
Fake Forcepoint Google Chrome Extension Hacks Windows Users
February 8, 2021
WestRock Ransomware Attack Hinders Packaging Production
February 8, 2021
The php packages are updated to version 7.3.27 to fix a Null Dereference in SoapClient (SOAP). (CVE-2021-21702). Note also php packages version 7.4.15-1.mga7 are available in backports/updates.
February 8, 2021
A vulnerability was discovered in how wpa_supplicant processing P2P (Wi-Fi Direct) group information from active group owners. The actual parsing of that information validates field lengths appropriately, but processing of the parsed information misses a length check when storing a copy of the secondary device types. This can result in writing
February 8, 2021
phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application. One such area, database.php does not verify the source of an HTTP request. This can be leveraged by a remote attacker to trick a logged-in administrator to visit a malicious page with a CSRF exploit and execute […]
February 8, 2021
Report: Adoption of passwordless security takes off amid COVID-19
February 8, 2021
The Linux Flaw you canât afford to Ignore (CVE-2021-3156)>
February 8, 2021
The future of work: Coming sooner than you think
February 8, 2021
An update that fixes three vulnerabilities is now available.
February 8, 2021
CVE-2020-0256 In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This
February 8, 2021
Red Hat OpenShift Container Platform release 4.6.16 is now available with updates to packages and images that fix several bugs. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 8, 2021
An update that fixes 6 vulnerabilities is now available.
February 7, 2021
Multiple vulnerabilites were discovered in privoxy, a privacy enhancing HTTP proxy, like memory leaks, dereference of a NULL-pointer, et al.
February 6, 2021
Security fix for [PUT CVEs HERE]
February 6, 2021
Security fix for CVE-2020-26418, CVE-2020-26419, CVE-2020-26420, CVE-2020-26421 Update to version 3.4.2 Fix %post script on Silverblue
February 6, 2021
Update to jasper-2.0.24, see https://github.com/jasper- software/jasper/releases/tag/version-2.0.24 for details. Backport fix for CVE-2021-3272.
February 6, 2021
security fix for CVE-2021-0326 see also: https://w1.fi/security/2020-2/
February 6, 2021
Industrial Networks See Sharp Uptick in Hackable Security Holes
February 5, 2021
Unpatched WordPress Plugin Code-Injection Bug Afflicts 50K Sites
February 5, 2021
Update to 3.10.0a5. Security fix for CVE-2021-3177.
February 5, 2021
**PHP version 7.4.15** (04 Feb 2021) **Core:** * Fixed bug php#80523 (bogus parse error on >4GB source code). (Nikita) * Fixed bug php#80384 (filter buffers entire read until file closed). (Adam Seitz, cmb) **Curl:** * Fixed bug php#80595 (Resetting POSTFIELDS to empty array breaks request). (cmb) **Date:** * Fixed bug php#80376 (last day of the […]
February 5, 2021
Security fix for CVE-2021-20197
February 5, 2021
Backport patches for CVE-2020-14409, CVE-2020-14410.
February 5, 2021
CVE-2020-8695 Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to
February 5, 2021
An update that fixes two vulnerabilities is now available.
February 5, 2021
Facebook etiquette: Behaviors you should avoid
Sharing your thoughts or photos for the world to see is now as easy as pushing a button, but even a seemingly harmless post may come back to haunt you The post Facebook etiquette: Behaviors you should avoid appeared first on WeLiveSecurity
February 5, 2021
Google Chrome Zero-Day Afflicts Windows, Mac Users
February 5, 2021
Ransomware Attacks Hit Major Utilities
February 5, 2021
flatpak: sandbox escape via spawn portal (CVE-2021-21261) SL7 x86_64 flatpak-1.0.9-10.el7_9.x86_64.rpm flatpak-debuginfo-1.0.9-10.el7_9.x86_64.rpm flatpak-libs-1.0.9-10.el7_9.x86_64.rpm flatpak-builder-1.0.0-10.el7_9.x86_64.rpm flatpak-devel-1.0.9-10.el7_9.x86_64.rpm – Scientific Linux Development Team
February 5, 2021
It was discovered that Mutt incorrectly handled certain email messages. An attacker could possibly use this issue to cause a denial of service because rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences of semicolon characters in RFC822 address fields (aka terminators […]
February 5, 2021
Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the caller as part […]
February 5, 2021
It was discovered that there was an issue in nodejs-ini, where an application could be exploited by a malicious input file. This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be […]
February 5, 2021
Android Devices Prone to Botnet’s DDoS Onslaught
February 4, 2021
# New in release OpenJDK 11.0.10 (2021-01-19): Live versions of these release notes can be found at: * https://bitly.com/openjdk11010 * https://builds.shipilev.net/backports-monitor/release-notes-11.0.10.txt ## Security fixes * JDK-8247619: Improve Direct Buffering of Characters ## Other changes * [JDK-8213821](https://bugs.openjdk.java.net/browse/JDK-8213821):
February 4, 2021
The 5.10.12 stable kernel update contains a number of important fixes across the tree.
February 4, 2021