Menu

Category Archives: Security

Articles about security

An update that solves one vulnerability and has 9 fixes is now available.

Several security issues were fixed in Samba.

Firefox could be made to crash or run programs as your login if it opened a malicious website.

A security update is now available for Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6 Red Hat Product Security has rated this update as having a security impact of

Reading Time: ~ 4 min. After surveying more than 10,000 people in 50 states about their cybersecurity habits, we wound up with some pretty surprising results. Like the fact that tech experts demonstrate riskier behaviors than average Americans. But the most significant result of all was the fact that most Americans are more confident than […]

A security update is now available for Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 7.3 Red Hat Product Security has rated this update as having a security impact of

Reading Time: ~ 3 min. While the proliferation of encrypted DNS is being driven by consumer privacy, businesses will want to take notice. Encrypted DNS – also known as DNS over HTTPS, or DoH – obscures internet traffic from bad actors. But it also has the potential to decrease visibility for IT admins whose responsibility […]

New EvilQuest ransomware hits Mac devices through pirated software
Cisco Warns of High-Severity Bug in Small Business Switch Lineup
Alina Point-of-Sale Malware Spotted in Ongoing Campaign

security update

China’s insidious surveillance against Uyghurs with Android malware
EvilQuest: Inside A ‘New Class’ of Mac Malware
COVID‑19 contact tracing – technology panacea or privacy nightmare?

Can a technological intervention stem the pandemic while avoiding the privacy pitfalls of location tracking? The post COVID‑19 contact tracing – technology panacea or privacy nightmare? appeared first on WeLiveSecurity

Everything You Must Know About Common Venmo Scams
New Android Spyware Tools Emerge in Widespread Surveillance Campaign
Verified Instagram account running copyright infringement phishing scam
Email Sender Identity is Key to Solving the Phishing Crisis
Microsoft Releases Emergency Security Updates for Windows 10, Server

An update for ose-machine-config-operator-container is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score,

An update for containernetworking-plugins is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for openshift is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Red Hat OpenShift Container Platform release 4.2.36 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score,

An update for python-psutil is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Details of Beijing’s new Hong Kong security law revealed: Signals end to more than two decades of autonomy

An update for httpd24-nghttp2 is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Tune in and watch live right here this week – it’s your email encryption wake-up call
Things that happen every four years: Olympic Games, Presidential elections, and now new Mac ransomware
After six months of stonewalling by Apple, app dev goes public with macOS privacy protection bypass
It’s happened again: AT&T sued for allegedly transferring victim’s number to thieves in $1.9m cryptocoin heist
Verizon Media, PayPal, Twitter Top Bug-Bounty Rankings
EvilQuest Mac Ransomware Has Keylogger, Crypto Wallet-Stealing Abilities

security update

Living on a prayer? Netgear not quite halfway there with patches for 28 out of 79 vulnerable router models
StrongPity APT Back with Kurdish-Aimed Watering Hole Attacks
Remote access at risk: Pandemic pulls more cyber‑crooks into the brute‑forcing game

Poorly secured remote access attracts mostly ransomware gangs, but can provide access to coin miners and backdoors too The post Remote access at risk: Pandemic pulls more cyber‑crooks into the brute‑forcing game appeared first on WeLiveSecurity

UCSF Pays $1.14M After NetWalker Ransomware Attack
Hackers deface Roblox accounts with pro-Trump messages
NEC insists its face-recog training dataset isn’t biased, but refuses to share details of Neoface system with UK court
DDoS and dingoes: Australia to bolster cyber-defences with 500 hackers amid China spat
CISA: Nation-State Attackers Likely to Exploit Palo Alto Networks Bug
How to Safeguard Data When the Majority of Your Workforce is Remote
7 Best Linux Distros for Security and Privacy in 2020>

An update that fixes two vulnerabilities is now available.

An update for the virt:rhel module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for the virt:rhel module is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update that fixes one vulnerability is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

Remember when we warned in February Apple will crack down on long-life HTTPS certs? It’s happening: Chrome, Firefox ready to join in, too
REvil Ransomware Gang Adds Auction Feature for Stolen Data
Tuesday’s Magento 1 EOL Leaves Clock Ticking on 100K Online Stores
Microsoft’s Windows File Recovery tool recovers your lost data
AWS Facial Recognition Platform Misidentified Over 100 Politicians As Criminals
Unpatched Wi-Fi Extender Opens Home Networks to Remote Control
University of California San Francisco pays ransomware gang $1.14m as BBC publishes ‘dark web negotiations’
Watching a $1.14 million ransomware negotiation between hackers and scientists searching for COVID-19 treatments

An update that fixes three vulnerabilities is now available.

Voice recordings from domestic violence alerting app exposed on the internet

An update that fixes one vulnerability is now available.

Several vulnerabilities were discovered in coturn, a TURN and STUN server for VoIP. CVE-2020-4067

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Yes, Prime Minister, rewrite the Computer Misuse Act: Brit infosec outfits urge reform

Mailman could be made to inject arbitrary content in the login page if it received a specially crafted input.

An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

CyberX, CyberX, does whatever a CyberX does. Locks IoT, machines too, Microsoft got it, so will you
Sony Announces PlayStation Bug Bounty Program

security update

Lucifer malware infects Windows & launch DDoS attack using NSA exploits

An update that solves four vulnerabilities and has four fixes is now available.

It was discovered that there was a “roster push attack” in mcabber, a console-based Jabber (XMPP) client. This is identical to CVE-2015-8688 for gajim.

It was discovered that there was a command injection vulnerability in picocom, a minimal dumb-terminal emulation program.

Several issues have been fixed in zziplib, a library providing read access on ZIP-archives. They are basically all related to invalid memory access and resulting crash or memory leak.

It was found that pngquant, a PNG (Portable Network Graphics) image optimising utility, is susceptible to a buffer overflow write issue triggered by a maliciously crafted png image, which could lead into

It was discovered that libtiprc, a transport-independent RPC library, could be used for a denial of service or possibly unspecified other impact by a stack-based buffer overflow due to a flood of crafted ICMP and UDP

Russian hacker Aleksei Burkov jailed for 9 years in US

An update that fixes one vulnerability is now available.

An update that fixes 5 vulnerabilities is now available.

Major Magecart skimming attack hits 8 local US government sites

A vulnerability was discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service via malformed HTTP/2 headers.

An update that fixes one vulnerability is now available.

Macs, iPhones, iPads to get encrypted DNS – how’d you like them Apples?

– avoid overwriting a local file with -J (CVE-2020-8177) – fix partial password leak over DNS on HTTP redirect (CVE-2020-8169)

Let’s roll the 3d6 dice on today’s security drama: Ah, 15, that’s LG allegedly hacked, source code stolen by Maze ransomware gang
DarkCrewFriends Returns with Botnet Strategy
8 U.S. City Websites Targeted in Magecart Attacks

An update that fixes one vulnerability is now available.

‘Cardplanet’ Operator Sentenced to 9 Years for Selling Stolen Credit Cards
Mainstream European bank hit by largest ever PPS based DDoS attack
Tune in and watch live: Email encryption doesn’t have to be an all-or-nothing deal
Facial recognition technology banned in another US city

In a move lauded by privacy advocates, Boston joins the ranks of cities that have voted down the municipal use of the technology The post Facial recognition technology banned in another US city appeared first on WeLiveSecurity

Domestic violence assistance app breached placing victims at risk
Satori Botnet Creator Sentenced to 13 Months in Prison
Brit plod’s use of facial-recognition tech is lawful, no need to question us, cops’ lawyer tells Court of Appeal

An update that fixes one vulnerability is now available.

Man sentenced, two others charged, in connection with Satori IoT botnet
TikTok To Stop Clipboard Snooping After Apple Privacy Feature Exposes Behavior

An update that solves two vulnerabilities and has 10 fixes is now available.

When one open-source package riddled with vulns pulls in dozens of others, what’s a dev to do?

An update that fixes one vulnerability is now available.