May 1, 2020
Reading Time: ~ 3 min. Anyone who has spent late nights scrolling through their social media feed or grinding on video games knows one thing is true: Technology can be a good thing, but only in moderation. Like too much of anything, spending a lot of time on the internet or social media can lead […]
May 1, 2020
Reading Time: ~ 2 min. As Oil Prices Drop, Hackers Take Aim at Producers With the recent crash in oil prices, and supply rapidly piling up, a new spear phishing campaign has begun targeting executives at several major oil producers. A massive number of emails started being distributed in late March, without the telltale signs […]
May 1, 2020
An update that solves two vulnerabilities and has one errata is now available.
May 1, 2020
Several vulnerabilities have been discovered in otrs2 (Open source Ticket Request System)
May 1, 2020
An update that fixes one vulnerability is now available.
May 1, 2020
OpenJDK 14 April CPU update
May 1, 2020
Security fix for CVE-2020-5260 and CVE-2020-11008 CVE-2020-5260 – From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.4.txt): > With a crafted URL that contains a newline in it, the credential > helper machinery can be fooled to give credential information for > a wrong host. The
May 1, 2020
Update to 2.9.10 * Fix CVE-2019-19956, CVE-2019-20388 and CVE-2020-7595
May 1, 2020
Microsoft Sway Abused in Office 365 Phishing Attack
April 30, 2020
Salt Bugs Allow Full RCE as Root on Cloud Servers
April 30, 2020
security update
April 30, 2020
security update
April 30, 2020
security update
April 30, 2020
security update
April 30, 2020
security update
April 30, 2020
ESET Threat Report
A view of the Q1 2020 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts The post ESET Threat Report appeared first on WeLiveSecurity
April 30, 2020
New Android Malware Targets PayPal, CapitalOne App Users
April 30, 2020
It was discovered that there was a integer signedness error in the miniupnpc UPnP client that could allow remote attackers to cause a denial of service attack.
April 30, 2020
An issue has been found in pound, A request smuggling vulnerability was discovered in pound, a everse proxy, load balancer and HTTPS front-end for Web servers, that may allow
April 30, 2020
Two issues have been found in w3m, WWW browsable pager with excellent tables/frames support.
April 30, 2020
An issue has been found in yodl, a pre-document language. Hanno Bock discovered that there was a buffer over-read vulnerability.
April 30, 2020
An update that fixes 6 vulnerabilities is now available.
April 30, 2020
An update that fixes one vulnerability is now available.
April 30, 2020
Smashing Security #176: Hacking hacks and university attacks
April 29, 2020
High-Severity Cisco IOS XE Flaw Threatens SD-WAN Routers
April 29, 2020
Millions of Brute-Force Attacks Hit Remote Desktop Accounts
April 29, 2020
Grandoreiro: How engorged can an EXE get?
Another in our occasional series demystifying Latin American banking trojans The post Grandoreiro: How engorged can an EXE get? appeared first on WeLiveSecurity
April 29, 2020
Critical GitLab Flaw Earns Bounty Hunter $20K
April 29, 2020
An update that solves 7 vulnerabilities and has 77 fixes is now available.
April 29, 2020
An update that solves 7 vulnerabilities and has 77 fixes is now available.
April 29, 2020
An update that solves 13 vulnerabilities and has 157 fixes is now available.
April 29, 2020
An update that solves one vulnerability and has one errata is now available.
April 29, 2020
An update that solves 6 vulnerabilities and has 8 fixes is now available.
April 29, 2020
An update that solves 13 vulnerabilities and has 157 fixes is now available.
April 29, 2020
‘Black Rose Lucy’ is Back, Now Pushing Ransomware
April 28, 2020
security update
April 28, 2020
Critical Adobe Illustrator, Bridge and Magento Flaws Patched
April 28, 2020
Reading Time: ~ 3 min. A popular military maxim speaks to the need for redundancy and it goes like this: “Two is one and one is none.” Redundancy is also a key principle when it comes to cyber-resilience. A popular rule in data protection and disaster recovery is called the 3-2-1 backup rule. IT pros […]
April 28, 2020
WordPress Plugin Bug Opens 100K Websites to Compromise
April 28, 2020
Sophisticated Android Spyware Attack Spreads via Google Play
April 28, 2020
Troves of Zoom Credentials Shared on Hacker Forums
April 28, 2020
re2c could be made to execute arbitrary code if it received a specially crafted file.
April 28, 2020
An update that solves 15 vulnerabilities and has 8 fixes is now available.
April 28, 2020
An update that solves 10 vulnerabilities and has 89 fixes is now available.
April 28, 2020
An update that solves 5 vulnerabilities and has 7 fixes is now available.
April 28, 2020
An update that fixes one vulnerability is now available.
April 28, 2020
An update that fixes three vulnerabilities is now available.
April 28, 2020
How Web Application Firewall (WAF) protects your website
April 28, 2020
GDPR Compliance Site Leaks Git Data, Passwords
April 27, 2020
security update
April 27, 2020
Microsoft Teams flaw could let attackers hijack accounts
Microsoft plugs a security hole that could have enabled attackers to weaponize a GIF in order to hijack Teams accounts and steal data The post Microsoft Teams flaw could let attackers hijack accounts appeared first on WeLiveSecurity
April 27, 2020
Hackers Mount Zero-Day Attacks on Sophos Firewalls
April 27, 2020
Eight Common OT / Industrial Firewall Mistakes
April 27, 2020
An update that solves 11 vulnerabilities and has 96 fixes is now available.
April 27, 2020
An update that solves one vulnerability and has one errata is now available.
April 27, 2020
An update that solves 12 vulnerabilities and has 139 fixes is now available.
April 27, 2020
Several security issues were fixed in OpenEXR.
April 27, 2020
Single Malicious GIF Opened Microsoft Teams to Nasty Attack
April 27, 2020
Update to latest upstream OpenVPN 2.4.9 release. It contains a security fix for CVE-2020-11810. This security issue is quite hard to abuse, requiring a fairly precise timing attack combined with guessing a just assigned peer-id reference. If successful, only a single client just initiating a new connection will experience a denial of service situation. This […]
April 27, 2020
6.2.6
April 27, 2020
Three issues have been found in php5, a server-side, HTML-embedded scripting language.
April 26, 2020