April 20, 2020
Foxit PDF Reader, PhantomPDF Open to Remote Code Execution
The package openvpn before version 2.4.9-1 is vulnerable to denial of service.
April 20, 2020
What Type of Home Security System Should You Get?
April 20, 2020
Bitcoin Stealers Hide in 700+ Ruby Developer Libraries
April 20, 2020
Hackers drain $25 million in assets from dForce
April 20, 2020
IT services giant Cognizant hit by Maze ransomware attack
April 20, 2020
An update that fixes one vulnerability is now available.
April 20, 2020
Hackers selling 267 million Facebook records on hacker forum
April 19, 2020
It was discovered that there was a path-traversal issue in Apache Shiro, a security framework for the Java programming language. A specially-crafted request could cause an authentication bypass.
April 19, 2020
An update that fixes 26 vulnerabilities is now available.
April 18, 2020
An update that fixes two vulnerabilities is now available.
April 18, 2020
Fraud & hacking guides are the most sold item on dark web
April 18, 2020
Busted: Man streamed “worst child abuse content ever seen”
April 18, 2020
fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file’s parent is a symlink to a directory outside of the
April 18, 2020
Following CVEs were reported against the jackson-databind source package :
April 18, 2020
Following CVEs were reported against the awl source package: CVE-2020-11728
April 18, 2020
DHS Urges Pulse Secure VPN Users To Update Passwords
April 17, 2020
security update
April 17, 2020
Fixes CVE-2020-1730
April 17, 2020
Security fix for CVE-2020-5260 From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.4.txt): > With a crafted URL that contains a newline in it, the credential > helper machinery can be fooled to give credential information for > a wrong host. The attack has been made impossible by forbidding > a newline character in any value
April 17, 2020
Bugfix release from Google for 80.0.3987.162. —- Update to 80.0.3987.162. Fixes the following CVEs: * CVE-2020-6450 * CVE-2020-6451 * CVE-2020-6452
April 17, 2020
Attacks on Linksys Routers Trigger Mass Password Reset
April 17, 2020
Reading Time: ~ 2 min. Florida City Sees Lasting Effects of Ransomware Attack Nearly three weeks after the City of Jupiter, Florida suffered a ransomware attack that took many of their internal systems offline, the city has yet to return to normal. City officials announced they would be working to rebuild their systems from backups, […]
April 17, 2020
Zoom Bombing Attack Hits U.S. Government Meeting
April 17, 2020
Hackers Update Age-Old Excel 4.0 Macro Attack
April 17, 2020
I’ve sent my worst enemies to Earworm Island
April 17, 2020
An update that solves two vulnerabilities and has one errata is now available.
April 17, 2020
New openvpn packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
April 17, 2020
Poorly Secured Docker Image Comes Under Rapid Attack
April 16, 2020
New PoetRAT Hits Energy Sector With Data-Stealing Tools
April 16, 2020
With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host. The attack has been made impossible by forbidding a newline character in any value passed via the credential protocol (CVE-2020-5260).
April 16, 2020
Chromium-browser 81.0.4044.92 fixes security issues: Multiple flaws were found in the way Chromium 80.0.3987.149 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code,
April 16, 2020
– New Firefox and NSS upstream update – More info at https://www.mozilla.org/en- US/firefox/75.0/releasenotes/
April 16, 2020
– New Firefox and NSS upstream update – More info at https://www.mozilla.org/en- US/firefox/75.0/releasenotes/
April 16, 2020
Cisco IP Phone Harbors Critical RCE Flaw
April 16, 2020
Govt minister’s Zoom webinar hijacked to display porn
April 16, 2020
A Zoom zero-day exploit is up for sale for $500,000
April 16, 2020
Alleged Zoom Zero-Days for Windows, MacOS for Sale, Report
April 16, 2020
Reading Time: ~ 3 min. One of the most notable findings to come from the Webroot 2020 Threat Report was the significant rise in the number of active phishing sites over 2019—a 640% rise, to be exact. This reflects a year-over-year rise in active phishing sites, but it’s important to keep this (dangerous) threat in […]
April 16, 2020
‘Double Extortion’ Ransomware Attacks Spike
April 16, 2020
An update that fixes one vulnerability is now available.
April 16, 2020
An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 16, 2020
An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 16, 2020
An update that solves 8 vulnerabilities and has two fixes is now available.
April 16, 2020
An update for ipmitool is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 16, 2020
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 16, 2020
Smashing Security #174: Garry Kasparov and Animal Crossing
April 15, 2020
Malicious Google Web Extensions Harvest Cryptowallet Secrets
April 15, 2020
Taxpayers Targeted With Improved NetWire RAT Variant
April 15, 2020
security update
April 15, 2020
Tencent Ups Top Bug-Bounty Award to $15K
April 15, 2020
How to host safer Zoom meetings
April 15, 2020
PPE, COVID-19 Medical Supplies Targeted by BEC Scams
April 15, 2020
Know Your Enemy: Honeynets>
April 15, 2020
Decade of the RATs: Is Linux Secure?>
April 15, 2020
Top 5 Open-Source Serverless Security Tools>
April 15, 2020
EA Sports down – Gaming giant hit by massive DDoS attacks
April 15, 2020
An update that fixes 26 vulnerabilities is now available.
April 15, 2020
An update that fixes 5 vulnerabilities is now available.
April 15, 2020
A directory traversal vulnerability resulting from insufficient input sanitization was discovered in the Horde Application Framework. An authenticated remote attacker could use this flaw to execute code in the
April 14, 2020
A remote code execution vulnerability was discovered in the Horde Application Framework. An authenticated remote attacker could use this flaw to cause execution of uploaded CSV data.
April 14, 2020
A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that results in a heap overflow in 32-bit applications because of a signed overflow on range check in the HuffmanDecodeImage
April 14, 2020
security update
April 14, 2020
An update that fixes one vulnerability is now available.
April 14, 2020
Over half a million Zoom accounts being sold on hacker forum
April 14, 2020
Americans report US$13 million in losses from coronavirus scams
The median loss to fraudulent schemes that exploit the global health crisis is almost US$600 The post Americans report US$13 million in losses from coronavirus scams appeared first on WeLiveSecurity
April 14, 2020