November 9, 2020
Microsoft Exchange Attack Exposes New xHunt Backdoors
November 9, 2020
Millions of Hotel Guests Worldwide Caught Up in Mass Data Leak
November 9, 2020
An update that fixes four vulnerabilities is now available.
November 9, 2020
An update that fixes one vulnerability is now available.
November 9, 2020
An update that fixes one vulnerability is now available.
November 9, 2020
It was discovered that Docker could be made to expose sensitive information when processing URLs in container image manifests. A remote attacker could use this to trick the user and obtain the user’s registry credentials (CVE-2020-15157).
November 9, 2020
An update that solves 18 vulnerabilities and has one errata is now available.
November 9, 2020
An update that solves one vulnerability and has 35 fixes is now available.
November 9, 2020
SFD_GetFontMetaData() insufficient CVE-2020-5395 backport. (CVE-2020-25690) References: – https://bugs.mageia.org/show_bug.cgi?id=27563 – https://access.redhat.com/errata/RHSA-2020:4844
November 8, 2020
The latest release of mariadb fixes some undisclosed easily exploitable vulnerabilities. (CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 and CVE-2020-14812). Additionally some bugs are fixed:
November 8, 2020
It was discovered that junit contained a local information disclosure vulnerability. On Unix like systems, the system’s temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they are, by default, readable by other users on that same system. This vulnerability does not […]
November 8, 2020
Vaisha Bernard discovered that blueman did not properly sanitize input on the D-Bus interface to blueman-mechanism. A local attacker could possibly use this issue to escalate privileges and run arbitrary code or cause a denial of service (CVE-2020-15238).
November 8, 2020
The suricata package has been updated to version 4.1.9, which fixes security issues and other bugs. See the upstream announcements for details. References: – https://bugs.mageia.org/show_bug.cgi?id=27475
November 8, 2020
An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed. (CVE-2020-8820)
November 8, 2020
security update
November 7, 2020
In libexif/exif-entry.c, through libexif 0.6.21-2+deb9u4, compiler optimization could remove a buffer overflow check, making a buffer overflow possible with some EXIF tags.
November 7, 2020
An update that fixes two vulnerabilities is now available.
November 7, 2020
An update that fixes one vulnerability is now available.
November 7, 2020
An update that fixes two vulnerabilities is now available.
November 7, 2020
An update that solves three vulnerabilities and has 7 fixes is now available.
November 7, 2020
It was discovered that raptor2, an RDF parser library, is prone to heap-based buffer overflow flaws, which could result in denial of service, or potentially the execution of arbitrary code, if a specially crafted file is processed.
November 7, 2020
security update
November 7, 2020
Feds Seize $1B in Bitcoin from Silk Road
November 6, 2020
Campari Site Suffers Ransomware Hangover
November 6, 2020
Gitpaste-12 Worm Targets Linux Servers, IoT Devices
November 6, 2020
Gaming company Capcom hit by cyberattack
The developer of popular video game franchises took swift action to prevent the attack from spreading further across its systems The post Gaming company Capcom hit by cyberattack appeared first on WeLiveSecurity
November 6, 2020
Reading Time: ~ 2 min. Maze Ransomware Group Ends Operations A press release issued this week announced the end of the Maze ransomware group’s data theft operations. In the release, the Maze authors revealed their motives behind one of the most successful ransomware campaigns to date, and why they chose to finally shut down their […]
November 6, 2020
Apple Patches Bugs Tied to Previously Identified Zero-Days
November 6, 2020
Several vulnerabilities were discovered in WordPress, a web blogging tool. They allowed remote attackers to run insecure deserialization, embed spam, perform various Cross-Site Scripting (XSS) or Cross-Site Request Forgery (CSRF) attacks, escalate privileges, run arbitrary
November 6, 2020
netqmail could be made to crash if it received specially crafted input.
November 6, 2020
Gaming Giant Capcom Hit By Ragnar Locker Ransomware: Report
November 5, 2020
Zoom Snooping: How Body Language Can Spill Your Password
November 5, 2020
Update to CVE release 3001.3-1 for Python3 Includes fixes for CVE-2020-16846, CVE-2020-17490, CVE-2020-25592
November 5, 2020
Fix executable hardening (PIC/PIE)
November 5, 2020
Update to v2.1.4. Contains security fix for CVE-2020-15238.
November 5, 2020
Update to Chromium 86. A few big things here: 1. Upstream has made hardware accelerated video support (VAAPI) for Linux possible without patches. One key difference is that the patchset used previously in Fedora enabled it by default and upstream’s approach disables it by default. To enable Hardware accelerated video in chromium, open this link […]
November 5, 2020
An update that fixes 5 vulnerabilities is now available.
November 5, 2020
An update that solves three vulnerabilities and has 6 fixes is now available.
November 5, 2020
An update that fixes 7 vulnerabilities is now available.
November 5, 2020
An update that fixes one vulnerability is now available.
November 5, 2020
An update that fixes two vulnerabilities is now available.
November 5, 2020
An update that fixes three vulnerabilities is now available.
November 5, 2020
Malspam Campaign Milks Election Uncertainty
November 5, 2020
Capcom hacked. Resident Evil game developer discloses cyber attack
November 5, 2020
USBGuard improvements in Red Hat Enterprise Linux 8.3
November 5, 2020
Reading Time: ~ 2 min. Adobe Flash Being Uninstalled on Windows Systems Following its September announcement, Microsoft has released an update that removes Adobe Flash from Windows 10 systems and prevents reinstallation. It should be noted that this update only removes the version of Adobe Flash that comes bundled with Windows 10. Internet browser extensions […]
November 5, 2020
Revamped DLL side-load attack hits Myanmar
November 5, 2020
security update
November 5, 2020
Mysterious APT Leaves Curious ‘KilllSomeOne’ Clue
November 4, 2020
GrowDiaries Exposes Emails, Passwords of 1.4M Cannabis Growers
November 4, 2020
Google Forms Abused to Phish AT&T Credentials
November 4, 2020
A career in cybersecurity: Is it for you?
There’s no shortage of opportunities for cybersecurity professionals and people looking to break into this field of endeavor. Could this also be the right career path for you? The post A career in cybersecurity: Is it for you? appeared first on WeLiveSecurity
November 4, 2020
Toymaker Mattel Hit by Ransomware Attack
November 4, 2020
VMware Issues Updated Fix For Critical ESXi Flaw
November 4, 2020
Police to Livestream Ring Camera Footage of Mississippi Residents
November 4, 2020
An update that solves three vulnerabilities and has 6 fixes is now available.
November 4, 2020
WireGuard Brings Speed and Simplicity to VPN Technology>
November 4, 2020
Reading Time: ~ 3 min. Mobile devices have become an indispensable part of our lives. By the time we’re teenagers, we’re already tethered to technology that lives in our pockets and connects us to a network far larger than we ever imagined possible. Because of the way we interact with our phones, it knows our […]
November 4, 2020
An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 4, 2020
Using OPA for cloud-native app authorization
November 4, 2020
IBM adds code risk analyzer to cloud-based CI/CD
November 4, 2020
An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6, 7, and 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 4, 2020
An update is now available for Red Hat JBoss Enterprise Application Platform 7.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 4, 2020
An update that fixes two vulnerabilities is now available.
November 4, 2020
An update that fixes 16 vulnerabilities is now available.
November 4, 2020
Oracle Solaris Zero-Day Attack Revealed
November 3, 2020
APT Groups Finding Success with Mix of Old and New Tools
November 3, 2020
34M Records from 17 Companies Up for Sale in Cybercrime Forum
November 3, 2020
The death of the email attack ‘campaign’
November 3, 2020
Two Chrome Browser Updates Plug Holes Actively Targeted by Exploits
November 3, 2020