December 20, 2019
It’s Time for Your SOC to Level Up
Wawa Data Breach: Malware Stole Customer Payment Card Info
December 20, 2019
Apple’s Bug Bounty Opens for Business, $1M Payout Included
December 20, 2019
Reading Time: ~ 2 min. Honda Customer Database Exposed Officials have been working over the past work to secure a database containing highly sensitive information belonging to more than 26,000 North American customers of the Honda motor company. The database in question was originally created in October and was only discovered on December 11. While […]
December 20, 2019
An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 20, 2019
There has been an out-of-bounds write in Cyrus SASL leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash was ultimately caused by an off-by-one error
December 20, 2019
Ambitious scam wants far more than just PayPal logins
An ongoing phishing scam uncovered by ESET researchers seeks to wreak havoc on your money and digital life in one fell swoop The post Ambitious scam wants far more than just PayPal logins appeared first on WeLiveSecurity
December 20, 2019
An update that fixes 7 vulnerabilities is now available.
December 20, 2019
While preparing a fix for CVE-2017-6314 an unknown symbol g_uint_checked_mul() was introduced.
December 20, 2019
An update that solves 24 vulnerabilities and has 58 fixes is now available.
December 20, 2019
An update that solves 24 vulnerabilities and has 58 fixes is now available.
December 20, 2019
Names & Phone numbers of 267 million Facebook users exposed
December 19, 2019
267M Facebook Users’ Phone Numbers Exposed Online
December 19, 2019
security update
December 19, 2019
Google & Mozilla ban Avast security extensions over data snooping
December 19, 2019
The Scammer Force is Strong with Star Wars: The Rise of Skywalker
December 19, 2019
Honda Leaks Data of 26K North American Customers
December 19, 2019
38,000 people forced to pick up email passwords in person
Malware and legal requirements force academics and students to join a near-endless line in order to pick up their passwords The post 38,000 people forced to pick up email passwords in person appeared first on WeLiveSecurity
December 19, 2019
An update for fribidi is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
December 19, 2019
An update is now available for Red Hat Quay 3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 19, 2019
An update is now available for Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 19, 2019
Updated htmldoc packages fix security vulnerability: In HTMLDOC, there was a one-byte underflow in htmldoc/ps-pdf.cxx caused by a floating point math difference between GCC and Clang (CVE-2019-19630).
December 19, 2019
Updated libssh packages fix security vulnerability: In an environment where a user is only allowed to copy files and not to execute applications, it would be possible to pass a location which contains commands to be executed in addition (CVE-2019-14889).
December 19, 2019
Updated freerdp packages fix security vulnerabilities: Multiple memory leaks in libfreerdp/codec/region.c (CVE-2019-17177). Memory leak in HuffmanTree_makeFromFrequencies (CVE-2019-17178).
December 19, 2019
Smashing Security #159: Rap, robbery, and IoT holiday hell
December 19, 2019
Reading Time: ~ 3 min. As the year draws to a close, the cybersecurity analysts at Webroot and Carbonite pull out their crystal balls to make their predictions for the year ahead. Our experts predict many of the trends they’ve been tracking throughout the year—well-researched attacks, RDP compromise, and the importance of user education—will continue […]
December 18, 2019
security update
December 18, 2019
Why Cloud, Collaboration Breed Insider Threats
December 18, 2019
Type: Vulnerability. TYPO3 is prone to multiple remote code-execution vulnerabilities; fixes are available.
December 18, 2019
Type: Vulnerability. TYPO3 is prone to an SQL-injection vulnerability; fixes are available.
December 18, 2019
Type: Vulnerability. Microsoft SharePoint Server is prone to an information-disclosure vulnerability; fixes are available.
December 18, 2019
Type: Vulnerability. Google Chrome is prone to a use-after-free vulnerability; fixes are available.
December 18, 2019
Type: Vulnerability. Linux Kernel is prone to a denial-of-service vulnerability; fixes are available.
December 18, 2019
Type: Vulnerability. The permissions by term for Drupal is prone to an access-bypass vulnerability; fixes are available.
December 18, 2019
Type: Vulnerability. Linux kernel is prone to a denial-of-service vulnerability.
December 18, 2019
Type: Vulnerability. IBM MQ is prone to a denial-of-service vulnerability; fixes are available.
December 18, 2019
Type: Vulnerability. Linux kernel is prone to a denial-of-service vulnerability.
December 18, 2019
Type: Vulnerability. Lenovo Power Management Driver is prone to a local buffer-overflow vulnerability; fixes are available.
December 18, 2019
Ring Plagued by Security Issues, Flood of Hacks
December 18, 2019
Microsoft Issues Out-of-Band Update for SharePoint Bug
December 18, 2019
TP-Link Routers Give Cyberattackers an Open Door to Business Networks
December 18, 2019
Risk Level: Very Low. Type: Trojan.
December 18, 2019
Risk Level: Very Low. Type: Trojan.
December 18, 2019
System hijacking flaws found in pre-installed Acer & ASUS software
December 18, 2019
LifeLabs Pays Hackers Who Accessed 15M Customers’ Lab Test Results
December 18, 2019
Log us out: Private equity snaffles Lastpass owner LogMeIn
December 18, 2019
It was discovered that there was a potential account hijack vulnerabilility in Django, the Python-based web development framework.
December 18, 2019
Kernel: KVM: OOB memory access via mmio ring buffer (CVE-2019-14821) Bug Fix(es): * KEYS: prevent creating a different user’s keyrings SL-6.10 * BUG: unable to handle kernel NULL pointer dereference at (null) * long I/O stalls with bnx2fc from not masking off scope bits of retry delay value SL6 x86_64 kernel-2.6.32-754.25.1.el6.x86_64.rpm kernel-debug-2.6.32-754.25.1.el6.x86_64. [More…]
December 18, 2019
freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure (CVE-2015-9381) * freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read (CVE-2015-9382) SL6 x86_64 freetype-2.3.11-19.el6_10.i686.rpm freetype-2.3.11-19.el6_10.x86_64.rpm freet [More…]
December 18, 2019
An update for rh-maven35-apache-commons-beanutils is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 18, 2019
Security fix for CVE-2019-5544
December 18, 2019
An update that fixes 37 vulnerabilities is now available.
December 18, 2019
Rooster Teeth Attack Showcases New Magecart Approach
December 17, 2019
Type: Vulnerability. Avaya IP Office Application Server is prone to a cross-site scripting vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Linux Kernel is prone to a local denial-of-service vulnerability.
December 17, 2019
Type: Vulnerability. Atlassian Application Links is prone to an information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Apache Superset is prone to an information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. IBM API Connect is prone to a local information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. IBM Case Manager is prone to a cross-site scripting vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Apache Superset is prone to an information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Omron PLC CJ and CS Series are prone to multiple security vulnerabilities; fixes are available.
December 17, 2019
Type: Vulnerability. ZOHO ManageEngine EventLog Analyzer is prone to a security-bypass vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. SQLite is prone to multiple security vulnerabilities; fixes are available.
December 17, 2019
Type: Vulnerability. Mozilla Firefox is prone to a denial-of-service vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Ansible Tower is prone to an information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Broadcom CA Automic Sysload is prone to an arbitrary command-execution vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Linux Kernel is prone to a privilege-escalation vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Omron PLC CJ, CS and NJ Series are prone to an authentication-bypass vulnerability; fixes are available.
December 17, 2019
Epilepsy Foundation Bombarded with Seizure-Triggering Twitter Posts
December 17, 2019
Massive leak exposes browsing history of millions of users
December 17, 2019
Alexa, Google Home Eavesdropping Hack Not Yet Fixed
December 17, 2019
An update that fixes two vulnerabilities is now available.
December 17, 2019
An update that fixes two vulnerabilities is now available.
December 17, 2019
It was discovered that python-ecdsa, a cryptographic signature library for Python, incorrectly handled certain signatures. A remote attacker could use this issue to cause python-ecdsa to either not warn about incorrect signatures, or generate exceptions resulting in a
December 17, 2019
It’s time to disconnect RDP from the internet
Brute-force attacks and BlueKeep exploits usurp convenience of direct RDP connections; ESET releases a tool to test your Windows machines for vulnerable versions The post It’s time to disconnect RDP from the internet appeared first on WeLiveSecurity
December 17, 2019
It was found that libssh, a tiny C SSH library, does not sufficiently sanitize path parameters provided to the server, allowing an attacker with only SCP file access to execute arbitrary commands on the server.
December 17, 2019
An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
December 17, 2019
An update for freetype is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 17, 2019
security update
December 17, 2019
security update
December 17, 2019
security update
December 16, 2019
Type: Vulnerability. WordPress is prone to multiple security vulnerabilities; fixes are available.
December 16, 2019
Type: Vulnerability. Linux Kernel is prone to a local denial-of-service vulnerability.
December 16, 2019
Type: Vulnerability. Dovecot is prone to a remote denial-of-service vulnerability; fixes are available.
December 16, 2019
Type: Vulnerability. Linux Kernel is prone to a local denial-of-service vulnerability.
December 16, 2019