An update that fixes 12 vulnerabilities is now available.
November 20, 2020
Robot Vacuums Suck Up Sensitive Audio in ‘LidarPhone’ Hack
November 19, 2020
German COVID-19 Contact-Tracing Vulnerability Allowed RCE
November 19, 2020
US Senate approves deepfake bill to defend against manipulated media
November 19, 2020
security update
November 19, 2020
GO SMS Pro Android App Exposes Private Photos, Videos and Messages
November 19, 2020
Tis’ the Season for Online Holiday Shopping; and Phishing
November 19, 2020
Code42 Incydr Series: Protect IP with Code42 Incydr
November 19, 2020
Get the free Security Intelligence Handbook from Recorded Future
November 19, 2020
Food-Supply Giant Americold Admits Cyberattack
November 19, 2020
IoT Cybersecurity Improvement Act Passed, Heads to President’s Desk
November 19, 2020
APT Exploits Microsoft Zerologon Bug: Targets Japanese Companies
November 19, 2020
Cybercriminals Batter Automakers With Ransomware, IP Theft Cyberattacks
November 19, 2020
Egregor ransomware attack hijacks printers to spit out ransom notes
November 19, 2020
An update that solves one vulnerability and has two fixes is now available.
November 19, 2020
An update that solves one vulnerability and has two fixes is now available.
November 19, 2020
An update that solves one vulnerability, contains one feature and has two fixes is now available.
November 19, 2020
An update that fixes one vulnerability is now available.
November 19, 2020
An update that solves one vulnerability and has one errata is now available.
November 19, 2020
An update that solves one vulnerability and has one errata is now available.
November 19, 2020
In any other year, many of us would be gearing up for airline travel, big family dinners, cocktail hours or potlucks with friends, and much more. But with all the challenges this year has brought in terms of how we work and connect during a global pandemic, I’m guessing all our plans look a little […]
November 19, 2020
Anti-adversarial machine learning defenses start to take root
November 19, 2020
It’s common for savvy online shoppers to check third-party reviews before making an online purchasing decision. That’s smart, but testing the efficacy of security software can be a bit more difficult than determining if a restaurant had decent service or if clothing brand’s products are true to size. So, with the arguably more significant consequences […]
November 19, 2020
Widespread Scans Underway for RCE Bugs in WordPress Websites
November 18, 2020
security update
November 18, 2020
LAPD Bans Facial Recognition, Citing Privacy Concerns
November 18, 2020
Cisco Webex ‘Ghost’ Flaw Opens Meetings to Snooping
November 18, 2020
Heads up: A new strain of card-skimming Grelos malware is on the loose
November 18, 2020
An update for firefox is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
November 18, 2020
How AI Is powering a new generation of cyber-attacks
November 18, 2020
Bumble bugs could have exposed personal data of all users
The information at risk of theft due to API flaws included people’s pictures, locations, dating preferences and Facebook data The post Bumble bugs could have exposed personal data of all users appeared first on WeLiveSecurity
November 18, 2020
Google Chrome 87 Closes High-Severity ‘NAT Slipstreaming’ Hole
November 18, 2020
Firing of CISA Chief Christopher Krebs Widely Condemned
November 18, 2020
Release of OpenShift Serverless 1.11.0 2. Description: Red Hat OpenShift Serverless 1.11.0 is a generally available release of the OpenShift Serverless Operator. This version of the OpenShift Serverless
November 18, 2020
An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
November 18, 2020
November 18, 2020
Multiple Industrial Control System Vendors Warn of Critical Bugs
November 17, 2020
Defining Security Policies to Manage Remote Insider Threats
November 17, 2020
ThreatList: Pharma Mobile Phishing Attacks Turn to Malware
November 17, 2020
COVID-19 Antigen Firm Hit by Malware Attack
November 17, 2020
Zoom Takes on Zoom-Bombers Following FTC Settlement
November 17, 2020
Lazarus supply‑chain attack in South Korea
ESET researchers uncover a novel Lazarus supply-chain attack leveraging WIZVERA VeraPort software The post Lazarus supply‑chain attack in South Korea appeared first on WeLiveSecurity
November 17, 2020
Cisco Patches Critical Flaw After PoC Exploit Code Release
November 17, 2020
Some Apple Apps on macOS Big Sur Bypass Content Filters, VPNs
November 17, 2020
An update that fixes one vulnerability is now available.
November 17, 2020
An update that fixes 29 vulnerabilities is now available.
November 17, 2020
An update that fixes 8 vulnerabilities is now available.
November 17, 2020
An update for firefox is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
November 17, 2020
An update for firefox is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
November 17, 2020
Kerberos could be made to consume unlimited resources if it received specially crafted ASN.1.
November 17, 2020
Dating Site Bumble Leaves Swipes Unsecured for 100M Users
November 16, 2020
Attackers Target Porn Site Goers in ‘Malsmoke’ Zloader Attack
November 16, 2020
Citrix SD-WAN Bugs Allow Remote Code Execution
November 16, 2020
Hacked Security Software Used in Novel South Korean Supply-Chain Attack
November 16, 2020
Exposed Database Reveals 100K+ Compromised Facebook Accounts
November 16, 2020
Up to 350,000 people at risk after Capcom ransomware attack
November 16, 2020
Cybercrime Moves to the Cloud to Accelerate Attacks Amid Data Glut
November 16, 2020
An update that fixes one vulnerability is now available.
November 16, 2020
An update that fixes one vulnerability is now available.
November 16, 2020
This year’s biggest innovators? Hackers and cybercriminals. Again
November 16, 2020
An update for rh-postgresql10-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
November 16, 2020
An update for the virt:8.2 and virt-devel:8.2 modules is now available for Advanced Virtualization for RHEL 8.2.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
November 16, 2020
Australia to track Coronavirus encounters with payment card records
November 16, 2020
Apache Ant uses various insecure temporary files possibly allowing local code execution.
November 15, 2020
A vulnerability in MIT Kerberos 5 could lead to a Denial of Service condition.
November 15, 2020
A vulnerability in libmaxminddb could lead to a Denial of Service condition.
November 15, 2020
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for exploitation. (CVE-2020-0452)
November 15, 2020
The Kleopatra component before 20.07.80 for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary library. (CVE-2020-24972).
November 15, 2020
A flaw was found in Go standard library packages. Both the net/http/cgi and net/http/fcgi packages use a default Content-Type response header value of “text/html”, rather than “text/plain”. An attacker could exploit this in applications using these packages by uploading crafted files, allowing for a cross-site scripting attack (XSS) (CVE-2020-24553).
November 15, 2020
A potential HTTP request smuggling vulnerability in WEBrick was reported. WEBrick was too tolerant against an invalid Transfer-Encoding header. This may lead to inconsistent interpretation between WEBrick and some HTTP proxy servers, which may allow the attacker to ”smuggle” a request (CVE-2020-25613).
November 14, 2020
Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. (CVE-2020-8694) Observable discrepancy in the RAPL interface for some Intel(R) Processors may
November 14, 2020
Scams Ramp Up Ahead of Black Friday Cybercriminal Craze
November 14, 2020