November 7, 2019
Several security issues were fixed in WebKitGTK+.
November 7, 2019
An update that fixes 9 vulnerabilities is now available.
November 7, 2019
An update that solves one vulnerability and has two fixes is now available.
November 7, 2019
An update that fixes one vulnerability is now available.
November 7, 2019
An update that solves one vulnerability and has two fixes is now available.
November 7, 2019
An update that solves one vulnerability and has two fixes is now available.
November 7, 2019
An update for openstack-octavia is now available for Red Hat OpenStack Platform 13.0 (Queens). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
November 7, 2019
An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 13.0 (Queens). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 7, 2019
Smashing Security #153: Cybercrime doesn’t pay (but Uber does)
November 7, 2019
You’ve Been Served…with Subpoena-Themed Phishing Emails
November 6, 2019
Rogue Trend Micro Employee Sold Customer Data for 68K Accounts
November 6, 2019
security update
November 6, 2019
Type: Vulnerability. Joomla! is prone to a cross-site request-forgery vulnerability; fixes are available.
November 6, 2019
Type: Vulnerability. Google Android is prone to a privilege-escalation vulnerability; fixes are available.
November 6, 2019
Type: Vulnerability. Google Android is prone to multiple information-disclosure vulnerabilities; fixes are available.
November 6, 2019
Type: Vulnerability. MantisBT is prone to an HTML-injection vulnerability; fixes are available.
November 6, 2019
Type: Vulnerability. Google Android is prone to a remote code execution vulnerability; fixes are available.
November 6, 2019
Type: Vulnerability. Red Hat ‘389-ds-base’ is prone to a security-bypass vulnerability; fixes are available.
November 6, 2019
Type: Vulnerability. Xen is prone to a privilege-escalation vulnerability; fixes are available.
November 6, 2019
Type: Vulnerability. Linux Kernel is prone to a denial-of-service vulnerability; fixes are available.
November 6, 2019
Type: Vulnerability. Sonatype Nexus Repository Manager is prone to an OS command-injection vulnerability; fixes are available.
November 6, 2019
Facebook Privacy Breach: 100 Developers Improperly Accessed Data
November 6, 2019
Leeds IT bloke pleads guilty to hacking Jet2 CEO’s email account
November 6, 2019
Google Analytics Emerges as a Phishing Tool
November 6, 2019
Presentation Template: Build Your 2020 Security Plan
November 6, 2019
security update
November 5, 2019
Type: Vulnerability. Multiple F5 BIG-IP Products are prone to a cross-site scripting vulnerability.
November 5, 2019
Android keyboard app caught red‑handed trying to make sneaky purchases
The virtual keyboard app ai.type, which has racked up 40 million downloads, has been found to sign up users to premium services without their consent The post Android keyboard app caught red‑handed trying to make sneaky purchases appeared first on WeLiveSecurity
November 5, 2019
Trump, Putin and Politics Name-Dropped to Peddle Malware
November 5, 2019
Eye Clinic Breach Reveals Data of 20,000 Patients
November 5, 2019
Five ways to strengthen employee cybersecurity awareness
How can organizations foster a workplace environment that enables employees to acquire the skills needed to keep cyber-threats at bay? The post Five ways to strengthen employee cybersecurity awareness appeared first on WeLiveSecurity
November 5, 2019
Magecart Groups Attack Simultaneous Sites in Card-Theft Frenzy
November 4, 2019
Alexa, Siri, Google Smart Speakers Hacked Via Laser Beam
November 4, 2019
Type: Vulnerability. Xen is prone to a privilege-escalation vulnerability; fixes are available.
November 4, 2019
Type: Vulnerability. Xen is prone to a security vulnerability; fixes are available.
November 4, 2019
Type: Vulnerability. OpenAFS is prone to a denial-of-service vulnerability; fixes are available.
November 4, 2019
Type: Vulnerability. Microsoft Office for Mac is prone to a remote code-execution vulnerability.
November 4, 2019
Type: Vulnerability. Apple Xcode is prone to multiple memory corruption vulnerabilities; fixes are available.
November 4, 2019
Type: Vulnerability. Honeywell equIP and Performance Series IP Cameras and Recorders is prone to a remote authentication-bypass vulnerability; fixes are available.
November 4, 2019
Type: Vulnerability. Multiple Honeywell Products are prone to an unauthorized-access vulnerability; fixes are available.
November 4, 2019
Type: Vulnerability. Advantech WISE-PaaS/RMM is prone to multiple security vulnerabilities; fixes are available.
November 4, 2019
Type: Vulnerability. Multiple IBM Products are prone to an unauthorized-access vulnerability; fixes are available.
November 4, 2019
Type: Vulnerability. Apache Commons Beanutils is prone to a remote security vulnerability; fixes are available.
November 4, 2019
Type: Vulnerability. LibGD is prone to a heap-based buffer-overflow vulnerability; fixes are available.
November 4, 2019
Wizard Spider Upgrades Ryuk Ransomware to Reach Deep into LANs
November 4, 2019
Risk Level: Very Low. Type: Trojan.
November 4, 2019
BEC Scam Costs Media Giant Nikkei $29 Million
November 4, 2019
BlueKeep Attacks Have Arrived, Are Initially Underwhelming
November 4, 2019
Emerging Technology and Privacy: What You Need to Know
November 4, 2019
Risk Level: Very Low.
November 4, 2019
The package qt5-webengine before version 5.13.2-2 is vulnerable to arbitrary code execution.
November 3, 2019
Antimalware Day 2019: Building a culture of cybersecurity awareness
The introduction to a series of articles marking this year’s Antimalware Day and highlighting the importance of cyber-readiness The post Antimalware Day 2019: Building a culture of cybersecurity awareness appeared first on WeLiveSecurity
November 3, 2019
An update that fixes 21 vulnerabilities is now available.
November 3, 2019
An update that fixes 21 vulnerabilities is now available.
November 2, 2019
Rebasing to 2.26.x For release info please see https://www.webkitgtk.org/2019/09/09/webkitgtk2.26.0-released.html and https://www.webkitgtk.org/2019/09/23/webkitgtk2.26.1-released.html CVE fixes: CVE-2019-8625, CVE-2019-8720, CVE-2019-8769, CVE-2019-8771
November 2, 2019
An update that fixes two vulnerabilities is now available.
November 2, 2019
– fix heap-based buffer overflow in cdf_read_property_info() (CVE-2019-18218)
November 2, 2019
Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes – https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
November 2, 2019
Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes – https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
November 2, 2019
**PHP version 7.3.11** (24 Oct 2019) **Core:** * Fixed bug php#78535 (auto_detect_line_endings value not parsed as bool). (bugreportuser) * Fixed bug php#78620 (Out of memory error). (cmb, Nikita) **Exif :** * Fixed bug php#78442 (‘Illegal component’ on exif_read_data since PHP7) (Kalle) **FPM:** * Fixed bug php#78599 (env_path_info underflow in fpm_main.c can lead to RCE).
November 2, 2019
Updated libxslt package fixes security vulnerabilities: * In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains
November 2, 2019
Updated libsoup package fixes security vulnerability: It was discovered that libsoup incorrectly handled parsing certain NTLM messages. If a user or automated system were tricked into connecting to a malicious server, a remote attacker could possibly use this issue to
November 2, 2019
Updated aspell packages fix security vulnerability: libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated character (CVE-2019-17544).
November 2, 2019
Updated golang packages fix security vulnerability: Daniel Mandragona discovered that invalid DSA public keys can cause a panic in dsa.Verify(), resulting in denial of service (CVE-2019-17596).
November 2, 2019
Updated ansible package fixes security vulnerabilities: ansible-playbook -k and ansible cli tools prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them
November 2, 2019
An update that fixes 21 vulnerabilities is now available.
November 1, 2019
Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes – https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
November 1, 2019
Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes – https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
November 1, 2019
Office for Mac Users Warned of Malicious SYLK Files
November 1, 2019
**PHP version 7.2.24** (24 Oct 2019) **Core:** * Fixed bug php#78535 (auto_detect_line_endings value not parsed as bool). (bugreportuser) * Fixed bug php#78620 (Out of memory error). (cmb, Nikita) **Exif:** * Fixed bug php#78442 (‘Illegal component’ on exif_read_data since PHP7) (Kalle) **FPM:** * Fixed bug php#78599 (env_path_info underflow in fpm_main.c can lead to RCE).
November 1, 2019
Solar, Wind Power Utility Disrupted in Rare Cyberattack
November 1, 2019
security update
November 1, 2019
security update
November 1, 2019
Type: Vulnerability. Xen is prone to a privilege-escalation vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Honeywell equIP Series IP Cameras is prone to a denial-of-service vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
November 1, 2019