February 28, 2020
RSAC 2020: Ransomware a ‘National Crisis,’ CISA Says, Ramps ICS Focus
February 28, 2020
Patrick Wardle: Apple Devices Hit With Recycled macOS Malware
February 28, 2020
An update that fixes 5 vulnerabilities is now available.
February 28, 2020
An update that solves 9 vulnerabilities and has one errata is now available.
February 28, 2020
An update that solves two vulnerabilities and has two fixes is now available.
February 28, 2020
An update that fixes one vulnerability is now available.
February 28, 2020
Police lose evidence to Ryuk ransomware attack; suspects walk free
February 27, 2020
Google’s War on Android App Permissions, 60 Percent Successful
February 27, 2020
RSAC 2020: GM’s Transportation Future Hinges on Cybersecurity
February 27, 2020
security update
February 27, 2020
security update
February 27, 2020
kr00k – Billions of Wi-Fi devices affected by encryption vulnerability
February 27, 2020
An uninitialized pointer vulnerability was discovered in pure-ftpd, a secure and efficient FTP server, which could result in an out-of-bounds memory read and potential information disclosure.
February 27, 2020
Facial recognition company Clearview AI hit by data theft
The startup came under scrutiny after it emerged that it had amassed 3 billion photos from social media for facial recognition software The post Facial recognition company Clearview AI hit by data theft appeared first on WeLiveSecurity
February 27, 2020
IoT Insecurity: When Your Vacuum Turns on You
February 27, 2020
RSA 2020 – Hacking humans
What the human battle against biological viruses can teach us about fighting computer infections – and vice versa The post RSA 2020 – Hacking humans appeared first on WeLiveSecurity
February 27, 2020
Did someone file your taxes before you?
With tax season – and tax scams – in full swing, here’s how fraudsters can steal your tax refund, and how you can avoid becoming a victim The post Did someone file your taxes before you? appeared first on WeLiveSecurity
February 27, 2020
Billions of Devices Open to Wi-Fi Eavesdropping Attacks
February 27, 2020
RSAC 2020: Smart Baby Monitor Vulnerable to Remote Hackers
February 27, 2020
Smashing Security #167: Coronavirus scams and an exaggerated lion
February 27, 2020
Top 10 worst countries for Internet freedom & censorship
February 26, 2020
RSAC 2020: Lack of Machine Learning Laws Open Doors To Attacks
February 26, 2020
Is bug hunting a viable career choice?
With earnings of top ethical hackers surpassing hundreds of thousands of dollars, some would say yes The post Is bug hunting a viable career choice? appeared first on WeLiveSecurity
February 26, 2020
Exaggerated Lion and Business Email Compromise – Don’t send that check!
February 26, 2020
Hackers Cashing In On Healthcare Industry Security Weaknesses
February 26, 2020
Departing MI5 chief: Break chat app crypto for us, kthxbai
February 26, 2020
KrØØk: Serious vulnerability affected encryption of billion+ Wi‑Fi devices
ESET researchers uncover a previously unknown security flaw allowing an adversary to decrypt some wireless network packets transmitted by vulnerable devices The post KrØØk: Serious vulnerability affected encryption of billion+ Wi‑Fi devices appeared first on WeLiveSecurity
February 26, 2020
Iranian APT Targets Govs With New Malware
February 26, 2020
Unpatched Security Flaws Open Connected Vacuum to Takeover
February 26, 2020
Stalkerware Attacks Increased 50 Percent Last Year, Report
February 26, 2020
An update that fixes one vulnerability is now available.
February 26, 2020
An update that fixes four vulnerabilities is now available.
February 26, 2020
An update that fixes three vulnerabilities is now available.
February 26, 2020
An update that fixes one vulnerability is now available.
February 26, 2020
It was discovered that pysaml2, a Python implementation of SAML to be used in a WSGI environment, was susceptible to XML signature wrapping attacks, which could result in a bypass of signature verification.
February 26, 2020
Updated squid packages fix security vulnerabilities: Jeriko One discovered that Squid incorrectly handled memory when connected to an FTP server. A remote attacker could possibly use this issue to obtain sensitive information from Squid memory (CVE-2019-12528).
February 26, 2020
RSAC 2020: Blockchain is ‘Garbage In’, Voting Needs Paper Ballots
February 25, 2020
security update
February 25, 2020
Google Patches Chrome Browser Zero-Day Bug, Under Attack
February 25, 2020
Sen. Schumer Pushes for TSA Employee Ban on TikTok App at Work
February 25, 2020
Free Download: The Ultimate Security Pros’ Checklist
February 25, 2020
An update that solves one vulnerability and has two fixes is now available.
February 25, 2020
An update that fixes one vulnerability is now available.
February 25, 2020
An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 6, 7, and 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 25, 2020
An update is now available for Red Hat JBoss Enterprise Application Platform 7.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 25, 2020
Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 (CVE-2020-6800) Mozilla: Out-of-bounds read when processing certain email messages (CVE-2020-6793) Mozilla: Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords (CVE-2020-6794) Mozilla: Crash processing S/MIME messages with multiple signatures (CVE-2020-6795) Mozilla: Incorrect p [More…]
February 25, 2020
python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c (CVE-2020-5312) python-pillow: reading specially crafted image files leads to allocation of large amounts of memory and denial of service (CVE-2019-16865) SL7 x86_64 python-pillow-2.0.0-20.gitd1c6db8.el7_7.x86_64.rpm python-pillow-debuginfo-2.0.0-20.gitd1c6db8.el7_7.x86_64.rpm python-pillow- [More…]
February 25, 2020
Apple Takes Heat Over ‘Vulnerable’ iOS Cut-and-Paste Data
February 24, 2020
Open-Source AI Projects For Linux>
February 24, 2020
Page Speed Optimization Best Practices
February 24, 2020
An update that solves one vulnerability and has two fixes is now available.
February 24, 2020
An update that fixes 5 vulnerabilities is now available.
February 24, 2020
It was discovered that the jQuery version embedded in OTRS, a ticket request system, was prone to a cross site scripting vulnerability in jQuery.extend().
February 24, 2020
libapache2-mod-auth-mellon could be made to redirect users to malicious sites.
February 24, 2020
libpam-radius-auth could be made to crash if it received specially crafted network traffic.
February 24, 2020
Do I need a VPN? A simple explanation & some real-life uses
February 24, 2020
Is your phone listening to you?
Do social media listen in on our conversations in order to target us with ads? Or are we just a bit paranoid? A little test might speak a thousand words. The post Is your phone listening to you? appeared first on WeLiveSecurity
February 24, 2020
An update that fixes 6 vulnerabilities is now available.
February 24, 2020
security update
February 22, 2020
security update
February 22, 2020
Resolves: #1795838, #1802904 – Security fix for CVE-2020-8945
February 22, 2020
* Always use a light theme for rendering form controls. * Fix several crashes and rendering issues. * Security fixes: CVE-2020-3862, CVE-2020-3864, CVE-2020-3865, CVE-2020-3867, CVE-2020-3868
February 22, 2020
Add patch for CVE-2020-6750 and related issues.
February 22, 2020
Update to 10.19.0
February 22, 2020
Update to 10.19.0
February 22, 2020
Update to Node.js 12.5.0
February 22, 2020
A vulnerability was found in pam_radius: the password length check was done incorrectly in the add_password() function in pam_radius_auth.c, resulting in a stack based buffer overflow.
February 22, 2020
Federal Agency that maintains secure communication for Trump got hacked
February 22, 2020
Ilja Van Sprundel reported a logic flaw in the Extensible Authentication Protocol (EAP) packet parser in the Point-to-Point Protocol Daemon (pppd). An unauthenticated attacker can take advantage of this flaw to trigger a stack-based buffer overflow, leading to denial of service
February 22, 2020
security update
February 22, 2020
Lawsuit Claims Google Collects Minors’ Locations, Browsing History
February 21, 2020
Active Attacks Target Popular Duplicator WordPress Plugin
February 21, 2020
– New upstream release (73.0.1)
February 21, 2020
This update backports a patch for CVE-2020-8112.
February 21, 2020
This update backports a patch for CVE-2020-8112.
February 21, 2020
Backport patches for CVE-2020-5313, CVE-2020-5312, CVE-2020-5311, CVE-2020-5310, CVE-2019-19911
February 21, 2020
Google kicks out 600 malicious apps from Play Store
February 21, 2020
An update for python-pillow is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 21, 2020