March 10, 2020
Popular ThemeREX WordPress Plugin Opens Websites to RCE
Firefox Bug Opens iPhone AirPods to Third-Party Snooping
March 10, 2020
High-Severity Flaws Plague Intel Graphics Drivers
March 10, 2020
Hackers hit hackers in new malware campaign
March 10, 2020
Flaw in popular VPN service may have exposed customer data
NordVPN praised its bug bounty program and said that a fix had been shipped within two days The post Flaw in popular VPN service may have exposed customer data appeared first on WeLiveSecurity
March 10, 2020
Variant of Paradise Ransomware Targets Office IQY Files
March 10, 2020
7 Cybersecurity Trends to Look Out for in 2020
March 10, 2020
Spear-Phishing Attack Lures Victims With ‘HIV Results’
March 10, 2020
Microsoft: 99.9 percent of hacked accounts didn’t use MFA
Only 11 percent of all enterprise accounts have multi-factor authentication enabled The post Microsoft: 99.9 percent of hacked accounts didn’t use MFA appeared first on WeLiveSecurity
March 9, 2020
Microsoft Exchange Server Flaw Exploited in APT Attacks
March 9, 2020
Coronavirus map used to spread malware
March 9, 2020
An update that fixes one vulnerability is now available.
March 7, 2020
Critical Zoho Zero-Day Flaw Disclosed
March 6, 2020
sudo: Stack based buffer overflow when pwfeedback is enabled (CVE-2019-18634) SL6 x86_64 sudo-1.8.6p3-29.el6_10.3.x86_64.rpm sudo-debuginfo-1.8.6p3-29.el6_10.3.x86_64.rpm sudo-debuginfo-1.8.6p3-29.el6_10.3.i686.rpm sudo-devel-1.8.6p3-29.el6_10.3.i686.rpm sudo-devel-1.8.6p3-29.el6_10.3.x86_64.rpm i386 sudo-1.8.6p3-29.el6_10.3.i686.rpm sudo-debuginfo-1.8.6p3-29.e [More…]
March 6, 2020
The updated package fixes a security vulnerability: A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a slash and backslash at the beginning. (CVE-2019-20479)
March 6, 2020
Updated pure-ftpd packages fix security vulnerabilities: An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the *lookup_alias(const char alias) or print_aliases(void) function is called,
March 6, 2020
The updated packages fix several issues including security vulnerabilities: In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive. (CVE-2019-19221)
March 6, 2020
Updated dojo package fixes security vulnerability: dojox was vulnerable to Cross-site Scripting. This was due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them (CVE-2019-10785).
March 6, 2020
The updated packages fix a security vulnerability: Mutation XSS in bleach.clean when noscript and raw tag whitelisted. (CVE-2020-6802)
March 6, 2020
High-Severity Cisco Webex Flaws Fixed
March 5, 2020
An update that fixes two vulnerabilities is now available.
March 5, 2020
It was discovered that there was an out-of-bounds write vulnerability in pdfresurrect, a tool for extracting or scrubbing versioning data from PDF documents.
March 5, 2020
xerces-c: XML parser contains a use-after-free error triggered during the scanning of external DTDs (CVE-2018-1311) SL7 x86_64 xerces-c-3.1.1-10.el7_7.i686.rpm xerces-c-3.1.1-10.el7_7.x86_64.rpm xerces-c-debuginfo-3.1.1-10.el7_7.i686.rpm xerces-c-debuginfo-3.1.1-10.el7_7.x86_64.rpm xerces-c-devel-3.1.1-10.el7_7.i686.rpm xerces-c-devel-3.1.1-10.el7_7.x86_64.rpm noar [More…]
March 5, 2020
nodejs: HTTP request smuggling using malformed Transfer-Encoding header (CVE-2019-15605) SL7 x86_64 http-parser-2.7.1-8.el7_7.2.i686.rpm http-parser-2.7.1-8.el7_7.2.x86_64.rpm http-parser-debuginfo-2.7.1-8.el7_7.2.i686.rpm http-parser-debuginfo-2.7.1-8.el7_7.2.x86_64.rpm http-parser-devel-2.7.1-8.el7_7.2.i686.rpm http-parser-devel-2.7.1-8.el7_7.2.x86_64.rpm – Scient [More…]
March 5, 2020
Trump, Sanders Are the Top Brands for Cybercriminals
March 5, 2020
An update for the virt:8.1 and virt-devel:8.1 modules is now available for Advanced Virtualization for RHEL 8.1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 5, 2020
Guildma: The Devil drives electric
The fourth installment of our occasional series demystifying Latin American banking trojans The post Guildma: The Devil drives electric appeared first on WeLiveSecurity
March 5, 2020
An update that fixes one vulnerability is now available.
March 5, 2020
Time to limber up in the battle against cybercriminals
March 5, 2020
Smashing Security #168: The Bitcoin fraud factory
March 5, 2020
Critical Netgear Bug Impacts Flagship Nighthawk Router
March 4, 2020
Microsoft OneNote Used To Sidestep Phishing Detection
March 4, 2020
CIA’s 11-year old hacking campaign against China exposed
March 4, 2020
Fraud Prevention Month: How to protect yourself from scams
ESET Chief Security Evangelist Tony Anscombe sat down with us to share his insights on how to avoid falling prey to online fraud The post Fraud Prevention Month: How to protect yourself from scams appeared first on WeLiveSecurity
March 4, 2020
Loyalty Cards Targeted in Tesco Clubcard Attack
March 4, 2020
Voice assistants can be hacked with ultrasonic waves
With access to text messages and the ability to make fraudulent phone calls, attackers could wreak more damage than you’d think The post Voice assistants can be hacked with ultrasonic waves appeared first on WeLiveSecurity
March 4, 2020
An update for http-parser is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 4, 2020
An update for http-parser is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 4, 2020
An update that solves 22 vulnerabilities and has 152 fixes is now available.
March 4, 2020
An update that solves 22 vulnerabilities and has 152 fixes is now available.
March 4, 2020
An update that solves two vulnerabilities and has one errata is now available.
March 4, 2020
An update that fixes one vulnerability is now available.
March 4, 2020
Cobalt Ulster Strikes Again With New ForeLord Malware
March 3, 2020
Let’s Encrypt to Revoke Millions of TLS Certs
March 3, 2020
Have I Been Pwned No Longer For Sale
March 3, 2020
Brave comes out on top in browser privacy study
By contrast, two web browsers share identifiers that are tied to the device hardware and so persist even across fresh installs The post Brave comes out on top in browser privacy study appeared first on WeLiveSecurity
March 3, 2020
Apple removes Clearview AI iPhone app from App Store
March 3, 2020
An update that solves one vulnerability and has one errata is now available.
March 3, 2020