September 18, 2019
Every Ecuadorian has been compromised in massive data breach
September 18, 2019
Rethinking Responsibilities and Remedies in Social-Engineering Attacks
September 18, 2019
Risk Level: Very Low. Type: Trojan.
September 18, 2019
Remote access flaws found in popular routers, NAS devices
In almost all tested units, the researchers achieved their goal of obtaining remote root-level access The post Remote access flaws found in popular routers, NAS devices appeared first on WeLiveSecurity
September 18, 2019
Emotet Returns from Summer Vacation, Ramps Up Stolen Email Tactic
September 18, 2019
An update that fixes one vulnerability is now available.
September 18, 2019
An update that fixes three vulnerabilities is now available.
September 18, 2019
Edward Snowden Sued by U.S. Over New Memoir
September 18, 2019
Popular Ad blockers caught ad frauding millions of Chrome users
September 18, 2019
New! RFP Template for Selecting EDR/EPP and APT Security
September 18, 2019
Massive Gaming DDoS Exploits Widespread Technology
September 18, 2019
Malware Moves: The Rise of LookBack – And Return of Emotet
September 18, 2019
Several security issues were fixed in Tomcat 9.
September 18, 2019
How to get away with hacking a US satellite
September 18, 2019
An update that fixes two vulnerabilities is now available.
September 18, 2019
This update upgrades Thunderbird to version 60.9.0. * Mozilla: Covert Content Attack on S/MIME encryption using a crafted multipart/alternative message (CVE-2019-11739) * Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox ESR 60.9 (CVE-2019-11740) * Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images (CVE-2019-11742) * Mo […]
September 18, 2019
wpa_supplicant could be made to be disconnected and require reconnection to the network if it received a specially crafted management frame.
September 18, 2019
Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code, cross-site scripting, information disclosure and a covert content attack on S/MIME encryption using a crafted multipart/alternative message.
September 18, 2019
How to Ship Your Ecommerce Goods At Lightning Speed
September 18, 2019
wpa_supplicant could be made to be disconnected and require reconnection to the network if it received a specially crafted management frame.
September 18, 2019
An update that solves three vulnerabilities and has two fixes is now available.
September 18, 2019
Several security issues were fixed in the Linux kernel.
September 18, 2019
Several security issues were fixed in the Linux kernel.
September 18, 2019
Risk Level: Very Low. Type: Trojan.
September 18, 2019
Panda Threat Group Mines for Monero With Updated Payload, Targets
September 17, 2019
– double free due to subsequent call of realloc() (CVE-2019-5481) – fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)
September 17, 2019
security update
September 17, 2019
New Linux malware is evading detection to mine cryptocurrency
September 17, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 17, 2019
AMD Radeon Graphics Cards Open VMware Workstations to Attack
September 17, 2019
Reading Time: ~ 3 min. An unfortunate reality of all smart devices is that, the smarter they get, and the more integrated into our lives they become, the more devastating a security breach can be. Smart cars are no exception. On the contrary, they come with their own specific set of vulnerabilities. Following high-profile incidents […]
September 17, 2019
Cisco Extends Patch for IPv6 DoS Vulnerability
September 17, 2019
Google Calendar Settings Gaffes Exposes Users’ Meetings, Company Details
September 17, 2019
Nearly all of Ecuador’s citizens caught up in data leak
The humongous collection of extensive personal details about millions of people could be a gold mine for scam artists The post Nearly all of Ecuador’s citizens caught up in data leak appeared first on WeLiveSecurity
September 17, 2019
An update that fixes one vulnerability is now available.
September 17, 2019
New Threat Actor Fraudulently Buys Digital Certificates to Spread Malware
September 17, 2019
LastPass Fixes Bug That Leaks Credentials
September 17, 2019
An update for rh-nginx114-nginx is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 17, 2019
An update for qpid-proton is now available for Satellite Tools 6.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
September 17, 2019
An update is now available for Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 17, 2019
USN-4113-1 introduced a regression in Apache.
September 17, 2019
Risk Level: Very Low. Type: Trojan.
September 17, 2019
Risk Level: Very Low. Type: Trojan.
September 17, 2019
An update for qpid-proton is now available for Red Hat Satellite 6.3 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 16, 2019
An update for qpid-proton is now available for Red Hat Satellite 6.4 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 16, 2019
– Update to 0.12.0b – Clean up SPEC – Remove patches – Use sed for make Phonon default – Use KF5 instead of KDE4 – Renew URLs – CVE-2019-9133
September 16, 2019
– Update to 0.12.0b – Clean up SPEC – Remove patches – Use sed for make Phonon default – Use KF5 instead of KDE4 – Renew URLs – CVE-2019-9133
September 16, 2019
An update for qpid-proton is now available for Red Hat Satellite 6.5 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 16, 2019
security update
September 16, 2019
security update
September 16, 2019
An update that fixes one vulnerability is now available.
September 16, 2019
An update that solves one vulnerability and has one errata is now available.
September 16, 2019
Marketing Analytics Company Leaks Deep Profiles of Entire Ecuador Population
September 16, 2019
Malware called InnfiRAT is creeping into cryptocurrency wallets
September 16, 2019
Asus, Lenovo and Other Routers Riddled with Remotely Exploitable Bugs
September 16, 2019
U.S. Sanctions North Korean Group Behind WannaCry, Sony Hacks
September 16, 2019
Reading Time: ~ 3 min. Do you remember the last time you’ve interacted with a brand, political cause, or fundraising campaign via text message? Have you noticed these communications occurring more frequently as of late? It’s no accident. Whereas marketers and communications professionals can’t count on email opens or users accepting push notifications from apps, […]
September 16, 2019
An update that fixes one vulnerability is now available.
September 16, 2019
IBus would allow local users to capture key strokes of other locally logged in users.
September 16, 2019
An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
September 16, 2019
Exim could be made to run programs as an administrator if it received specially crafted network traffic.
September 16, 2019
Several vulnerabilities were discovered in Ansible, a configuration management, deployment, and task execution system.
September 16, 2019
An update that fixes one vulnerability is now available.
September 16, 2019
Wireshark could be made to crash if it received specially crafted network traffic or input files.
September 16, 2019
rebase to 0.16 (bz #1741605)
September 15, 2019
Update to latest upstream version.
September 15, 2019
rebase to 0.16 (bz #1741605)
September 15, 2019
Update to 8.05 release (CVE-2019-16239)
September 15, 2019
BIRD 2.0.6 (2019-09-10) * BGP: Optional Adj-RIB-Out * BGP: Extended optional parameters length * Filter: Sets and set expressions in path masks * Several important bugfixes
September 15, 2019
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
September 15, 2019
An update that fixes one vulnerability is now available.
September 15, 2019
An update that fixes one vulnerability is now available.
September 15, 2019
Updated wireshark packages fix security vulnerability: The Gryphon dissector could go into an infinite loop. For other fixes in this update, see the referenced releasenotes.
September 15, 2019
Updated webkit2 packages fix security vulnerabilities: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling (CVE-2019-8644).
September 15, 2019
Updated openldap packages fix security vulnerabilities: It was discovered that OpenLDAP incorrectly handled rootDN delegation. A database administrator could use this issue to request authorization as an identity from another database, contrary to expectations (CVE-2019-13057).
September 15, 2019
Updated mediawiki packages fix security vulnerabilities: Potential XSS in jQuery (CVE-2019-11358). An account can be logged out without using a token (CSRF) (CVE-2019-12466).
September 15, 2019
Updated kconfig packages fix security vulnerability: Dominik Penner discovered that KConfig supported a feature to define shell command execution in .desktop files. If a user is provided with a malformed .desktop file (e.g. if it’s embedded into a downloaded archive and it gets
September 15, 2019
Multiple vulnerabilities have been discovered in faad2, the Freeware Advanced Audio Coder. These vulnerabilities might allow remote attackers to cause denial-of-service, or potentially execute arbitrary code if crafted MPEG AAC files are processed.
September 15, 2019
This update provides nodejs v6.17.1 fixing atleast the following security issues: The c-ares function ares_parse_naptr_reply(), which is used for parsing NAPTR responses, could be triggered to read memory outside of the given
September 15, 2019
The updated packages fix security vulnerabilities: The JPXStream::init function in Poppler 0.78.0 and earlier doesn’t check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap,
September 15, 2019
Updated thunderbird packages fix security vulnerabilities: Covert Content Attack on S/MIME encryption using a crafted multipart/ alternative message (CVE-2019-11739).
September 15, 2019
New Amazon phishing scam stealing credit card data
September 14, 2019