Menu

Category Archives: Security

Articles about security

BlockFi hacked following SIM swap attack, but says no funds lost
Dark Web hackers publish 200GB of Toll Group’s stolen corporate data
Critical Cisco Bug in Unified CCX Allows Remote Code Execution
Silent Night Banking Trojan Charges Top Dollar on the Underground
Campaign groups warn GCHQ can re-identify UK’s phones from COVID-19 contact-tracing app data
Far-right leader walks free from court after conviction for refusing to hand his phone passcode over to police
210 days prison for crypto CEO who held 13k child abuse & beastiality files
Mitsubishi hackers may have stolen details of prototype missile
Supreme Court Phish Targets Office 365 Credentials
Crooks Tap Google Firebase in Fresh Phishing Tactic
DNS this week stands for Drowning Needed Services: Design flaw in name server system can be exploited to flood machines offline
Smashing Security podcast #179: Deepfake Jay-Z, and beer apps spilling your data
Zoom continues its catch-up security sprint with new training, bug bounty tweaks and promise of crypto playbook
Remember when Securus was sued for recording 14,000 calls between prison inmates and lawyers? It just settled

Several security issues were fixed in the Linux kernel.

New upstream release with fixes for CVEs and other enhancements.

New upstream release with fixes for CVEs and other enhancements.

New upstream release with fixes for CVEs and other enhancements.

This update includes a security fix for CVE-2020-10737. Additionally, From 0.34.6: – update license on src/buffer.h – changes “/var/run” to “/run” in systemd service file (Orion Poplawski, #1834511) From 0.34.5: – apply patch from Matthias Gerstner of the SUSE security team to fix a possible race condition in the mkhomedir helper (noted above, this fixes […]

REvil hackers allegedly sold Trump’s data now targeting food distributors

security update

Why typosquatting protection from coronavirus-themed registered domains is a must
NetWalker Ransomware Gang Hunts for Top-Notch Affiliates
Fraudulent Unemployment, COVID-19 Relief Claims Earn BEC Gang Millions
Police arrests man for selling massive combolists on hacker forums
UK’s Ministry of Defence: We’ll harvest and anonymise private COVID-19 apps’ tracing data by handing it to ‘behavioural science’ arm
Ransomware has gone nuclear: To avoid any fallout yourself, tune in online this month to hear from KnowBe4
Houseparty denied it had been hacked… while miscreants were abusing its dot-com domain name infrastructure
Verizon DBIR: Web App Attacks and Security Errors Surge
Member of global child abuse ring caught with 650,000 images, videos
Alleged Hacker Behind Massive ‘Collection 1’ Data Dump Arrested
blog | Why you should be using Multi-Category Security for your Linux containers
Tech’s Volkswagen moment? Trend Micro accused of cheating Microsoft driver QA by detecting test suite
Former Labour deputy leader Harriet Harman calls on UK govt to legally protect data from contact-tracing apps

The following CVE(s) were found in src:clamav package. CVE-2020-3327

You know this Land of the Free thing, yeah? Well then, why allow the FBI to trawl through America’s browsing history without a warrant?

The 5.6.13 stable kernel update contains a number of important fixes across the tree —- The 5.6.12 stable update contains a number of important fixes across the tree.

Latest upstream.

Backported patch for CVE-2018-10756.

The 5.6.13 stable kernel update contains a number of important fixes across the tree

3.8.3

Brazil’s cosmetic giant Natura leaked 192 million records with payment data

security update

The Windows 7 Postmortem: What’s at Stake
Rogue ADT tech spied on hundreds of customers in their homes via CCTV – including me, says teen girl
6 ways to be more secure in the cloud
Beer rating app reveals homes and identities of spies and military bods, warns Bellingcat
EasyJet Hackers Take Off with Travel Details for 9M Customers
Bluetooth flaw exposes countless devices to BIAS attacks

As many as 30 smartphones, laptops and other devices were tested – and all were found to be vulnerable The post Bluetooth flaw exposes countless devices to BIAS attacks appeared first on WeLiveSecurity

WolfRAT Android Malware Targets WhatsApp, Facebook Messenger
European supercomputers hacked to mine cryptocurrency

Several high-performance computers working on COVID-19 research have been forced offline following a string of attacks The post European supercomputers hacked to mine cryptocurrency appeared first on WeLiveSecurity

Bluetooth Bugs Allow Impersonation Attacks on Legions of Devices
Adobe Patches Critical RCE Flaw in Character Animator App
Records with data on 129 million Russian car owners sold on dark web
EasyJet hacked in a sophisticated attack; 9 million customers affected
Clever Phishing Attack Bypasses MFA to Nab Microsoft Office 365 Credentials
Easyjet hacked: 9 million people’s data accessed plus 2,200 folks’ credit card details grabbed

Reading Time: ~ 3 min. There’s a pretty common misconception among small businesses and medium-sized businesses (SMBs) that hackers only target large organizations. Unfortunately, this belief couldn’t be further from the truth. In fact, according to the most recent Verizon Data Breach Investigations Report, more than 70% of cyberattacks target small businesses. Additionally, many attacks […]

Open letter from digital rights groups to UK health secretary questions big tech’s role in NHS COVID-19 data store
EasyJet hack impacts nine million passengers
FBI warns hackers are planting card skimmers on online stores running a vulnerable Magento plugin
AT&T tracked its own sales bods using GPS, secretly charged them $135 a month to do so, lawsuit claims
GDPR what? European Parliament breach exposes data of 1000s of people
Magecart malware merrily sipped card details, evaded security scans on UK e-tailer Páramo for almost 8 months
Get your live, GIAC-certified, online cybersecurity training from SANS – available now
Verizon Data Breach Report: DoS Skyrockets, Espionage Dips
Insider threat? Pffft. Hackers on the outside are the ones mostly making off with your private biz data, says Verizon
With millions upon millions out of work in the US, here come the scammers claiming victims’ unemployment money using stolen info

This package fixes a security issue that allowed for _method query parameters to be used with GET requests. The fix is backported from Mojolicious v8.42.

This package fixes a security issue that allowed for _method query parameters to be used with GET requests. The fix is backported from Mojolicious v8.42.

Update to 8.10 release (CVE-2020-12823)

**PHP version 7.4.6** (14 May 2020) **Core:** * Fixed bug php#78434 (Generator yields no items after valid() call). (Nikita) * Fixed bug php#79477 (casting object into array creates references). (Nikita) * Fixed bug php#79514 (Memory leaks while including unexistent file). (cmb, Nikita) * Fixed bug php#79470 (PHP incompatible with 3rd party file system on demand). […]

This package fixes a security issue that allowed for _method query parameters to be used with GET requests. The fix is backported from Mojolicious v8.42.

Attorney General: We didn’t need Apple to crack terrorist’s iPhones – tho we still want iGiant to do it in future
Ransomware Gang Arrested for Spreading Locky to Hospitals
Apple’s MagicPairing for Bluetooth fails to enchant after mischief-making bugs found hiding in the stack
ProLock Ransomware Teams Up With QakBot Trojan to Infect Victims

Several security issues were fixed in the Linux kernel.

db8151dd breach- Contact management firm leaks 22 million emails
Microsoft gives Office 365 admins the heads-up: Some internal queries over weekend might have returned results from completely different orgs
Edison Mail iOS Bug Exposes Emails to Strangers
Hackers compromise Supercomputers across Europe with cryptominers
The ProLock ransomware doesn’t tell you one important thing about decrypting your files
Edison Mail bug exposed iPhone users’ email accounts to complete strangers
Kali Linux 2020.2 Released, Download Now!!!>
The US Senate just voted to let the FBI access your browser history without a warrant>

An update that solves four vulnerabilities and has one errata is now available.

An update that fixes one vulnerability is now available.

An update that solves 7 vulnerabilities and has one errata is now available.

An update that fixes one vulnerability is now available.

An update that solves one vulnerability and has one errata is now available.

An update that fixes three vulnerabilities is now available.

I know what you leased last summer: Asset database leak hits Capita, Rolls-Royce, Tesco (every little helps, eh?)
A real loch mess: Navy larks sunk by a truculent torpedo
Dutch spies helped Britain’s GCHQ break Argentine crypto during Falklands War
New Report: Severe Flaws in Cyberoam’s Firewall and VPN Technology Left At Least 86,000 Networks Vulnerable to Exploit>
Know The Enemy: Upgrade Your Threat Detection Strategy with Honeynets>

8u252 update

Update to latest upstream 8.8.8

Are you ready, kids? I said, are you ready? Whoooooo has another update for you to see? Google Chromium! For browsing and tweeting (but not FTP) Google Chromium! If improved security be something you wish Google Chromium! Then run dnf while you flop like a fish! Google Chromium! Google Chromium! Google Chromium! Google Chromium! Ahem. […]