The updated packages fix a security vulnerability: Mutation XSS in bleach.clean when noscript and raw tag whitelisted. (CVE-2020-6802)
March 6, 2020
High-Severity Cisco Webex Flaws Fixed
March 5, 2020
An update that fixes two vulnerabilities is now available.
March 5, 2020
It was discovered that there was an out-of-bounds write vulnerability in pdfresurrect, a tool for extracting or scrubbing versioning data from PDF documents.
March 5, 2020
xerces-c: XML parser contains a use-after-free error triggered during the scanning of external DTDs (CVE-2018-1311) SL7 x86_64 xerces-c-3.1.1-10.el7_7.i686.rpm xerces-c-3.1.1-10.el7_7.x86_64.rpm xerces-c-debuginfo-3.1.1-10.el7_7.i686.rpm xerces-c-debuginfo-3.1.1-10.el7_7.x86_64.rpm xerces-c-devel-3.1.1-10.el7_7.i686.rpm xerces-c-devel-3.1.1-10.el7_7.x86_64.rpm noar [More…]
March 5, 2020
nodejs: HTTP request smuggling using malformed Transfer-Encoding header (CVE-2019-15605) SL7 x86_64 http-parser-2.7.1-8.el7_7.2.i686.rpm http-parser-2.7.1-8.el7_7.2.x86_64.rpm http-parser-debuginfo-2.7.1-8.el7_7.2.i686.rpm http-parser-debuginfo-2.7.1-8.el7_7.2.x86_64.rpm http-parser-devel-2.7.1-8.el7_7.2.i686.rpm http-parser-devel-2.7.1-8.el7_7.2.x86_64.rpm – Scient [More…]
March 5, 2020
Trump, Sanders Are the Top Brands for Cybercriminals
March 5, 2020
An update for the virt:8.1 and virt-devel:8.1 modules is now available for Advanced Virtualization for RHEL 8.1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 5, 2020
Guildma: The Devil drives electric
The fourth installment of our occasional series demystifying Latin American banking trojans The post Guildma: The Devil drives electric appeared first on WeLiveSecurity
March 5, 2020
An update that fixes one vulnerability is now available.
March 5, 2020
Time to limber up in the battle against cybercriminals
March 5, 2020
Smashing Security #168: The Bitcoin fraud factory
March 5, 2020
Critical Netgear Bug Impacts Flagship Nighthawk Router
March 4, 2020
Microsoft OneNote Used To Sidestep Phishing Detection
March 4, 2020
CIA’s 11-year old hacking campaign against China exposed
March 4, 2020
Fraud Prevention Month: How to protect yourself from scams
ESET Chief Security Evangelist Tony Anscombe sat down with us to share his insights on how to avoid falling prey to online fraud The post Fraud Prevention Month: How to protect yourself from scams appeared first on WeLiveSecurity
March 4, 2020
Loyalty Cards Targeted in Tesco Clubcard Attack
March 4, 2020
Voice assistants can be hacked with ultrasonic waves
With access to text messages and the ability to make fraudulent phone calls, attackers could wreak more damage than you’d think The post Voice assistants can be hacked with ultrasonic waves appeared first on WeLiveSecurity
March 4, 2020
An update for http-parser is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 4, 2020
An update for http-parser is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 4, 2020
An update that solves 22 vulnerabilities and has 152 fixes is now available.
March 4, 2020
An update that solves 22 vulnerabilities and has 152 fixes is now available.
March 4, 2020
An update that solves two vulnerabilities and has one errata is now available.
March 4, 2020
An update that fixes one vulnerability is now available.
March 4, 2020
Cobalt Ulster Strikes Again With New ForeLord Malware
March 3, 2020
Let’s Encrypt to Revoke Millions of TLS Certs
March 3, 2020
Have I Been Pwned No Longer For Sale
March 3, 2020
Brave comes out on top in browser privacy study
By contrast, two web browsers share identifiers that are tied to the device hardware and so persist even across fresh installs The post Brave comes out on top in browser privacy study appeared first on WeLiveSecurity
March 3, 2020
Apple removes Clearview AI iPhone app from App Store
March 3, 2020
An update that solves one vulnerability and has one errata is now available.
March 3, 2020
An update that fixes one vulnerability is now available.
March 3, 2020
An update that contains security fixes can now be installed.
March 3, 2020
Rake could be made run arbitrary commands it received a specially crafted file.
March 3, 2020
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 3, 2020
An update is now available for Red Hat build of Eclipse Vert.x. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each
March 3, 2020
5 reasons to consider a career in cybersecurity
From competitive salaries to ever-evolving job descriptions, there are myriad reasons why a cybersecurity career could be right for you The post 5 reasons to consider a career in cybersecurity appeared first on WeLiveSecurity
March 3, 2020
Gamer Alert: Serious Nvidia Flaw Plagues Graphics Driver
March 2, 2020
Forrester: Keeping Smart Cities Safe From Hacks
March 2, 2020
An update that fixes two vulnerabilities is now available.
March 2, 2020
An update that solves 10 vulnerabilities and has two fixes is now available.
March 2, 2020
An update that fixes two vulnerabilities is now available.
March 2, 2020
TrickBot Adds ActiveX Control, Hides Dropper in Images
March 2, 2020
Walgreens Mobile App Leaks Prescription Data
March 2, 2020
RSA 2020 – Is your machine learning/quantum computer lying to you?
And how would you know if the algorithm was tampered with? The post RSA 2020 – Is your machine learning/quantum computer lying to you? appeared first on WeLiveSecurity
March 2, 2020
Several security issues were fixed in libarchive.
March 2, 2020
An update that fixes 8 vulnerabilities is now available.
March 2, 2020
An update that solves two vulnerabilities and has two fixes is now available.
March 1, 2020
An issue has been found in libapache2-mod-auth-openidc, an OpenID Connect authentication module for Apache. Due to insufficient validatation of URLs an Open Redirect vulnerability
March 1, 2020
An issues has been found in firebird2.5, an RDBMS based on InterBase 6.0. As UDFs can be used for a remote authenticated code execution (as user firebird), UDFs have been disabled in the default configuration
March 1, 2020
security update
February 29, 2020
An update that fixes one vulnerability is now available.
February 29, 2020
Israeli firm leaks database with addresses of millions of Americans
February 29, 2020
Updated wireshark packages fix security vulnerabilities: LTE RRC dissector memory leak. WiMax DLMAP dissector crash.
February 29, 2020
This update is based on upstream 5.5.6 and fixes atleast the following security vulnerability: A flaw was found in the way KVM hypervisor handled instruction emulation for the L2 guest when nested(=1) virtualization is enabled. In the
February 29, 2020
Updated hiredis packages fix security vulnerability: async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked (CVE-2020-7105).
February 29, 2020
Updated rsync packages fix security vulnerabilities: It was discovered that rsync incorrectly handled pointer arithmetic in zlib. An attacker could use this issue to cause rsync to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2016-9840,
February 29, 2020
Updated zsh packages fix security vulnerability: A privilege escalation vulnerability was discovered in zsh, whereby a user could regain a formerly elevated privelege level even when such an action should not be permitted (CVE-2019-20044).
February 29, 2020
The package chromium before version 80.0.3987.122-1 is vulnerable to multiple issues including arbitrary code execution and information disclosure.
February 29, 2020
Bruce Schneier Proposes ‘Hacking Society’ for a Better Tomorrow
February 28, 2020
Hackers leak up to 4 TB of OnlyFans content for download
February 28, 2020
It was discovered that libusbmuxd incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to expectations.
February 28, 2020
Beware secret lovers spreading Nemty ransomware
February 28, 2020
Israeli firm leaks addresses of millions of Americans & Europeans
February 28, 2020
RSAC 2020: Ransomware a ‘National Crisis,’ CISA Says, Ramps ICS Focus
February 28, 2020