September 3, 2019
How to Get a Handle on Patch Management
How to have your favorite playlist with you using iMusic
September 3, 2019
Effective Way to Download Youtube Playlist
September 3, 2019
Data Leak Impacts Millions of Yves Rocher Cosmetics Company Customers
September 3, 2019
What is MITRE ATT&CK and how is it useful?
An introduction to the MITRE ATT&CK framework and how it can help organize and classify various types of threats and adversarial behaviors. The post What is MITRE ATT&CK and how is it useful? appeared first on WeLiveSecurity
September 3, 2019
An update that solves one vulnerability and has three fixes is now available.
September 3, 2019
An update that fixes three vulnerabilities is now available.
September 3, 2019
An update that fixes one vulnerability is now available.
September 3, 2019
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
September 3, 2019
An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
September 3, 2019
An update for kdelibs and kde-setting is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 3, 2019
An update for qemu-kvm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
September 3, 2019
An update for openstack-nova is now available for Red Hat OpenStack Platform 13.0 (Queens). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
September 3, 2019
An update for redis is now available for Red Hat OpenStack Platform 13.0 (Queens). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 3, 2019
An update for openstack-nova is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
September 3, 2019
An update for redis is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 3, 2019
Irssi could be made to crash or execute arbitrary code if it received a specially crafted CAP request.
September 3, 2019
‘USBAnywhere’ Bugs Open Supermicro Servers to Remote Attackers
September 3, 2019
Website used by Hong Kong protesters suffers DDoS attack
September 2, 2019
security update
September 2, 2019
Meet Retadup botnet that was infected by another malware
September 2, 2019
Risk Level: Very Low. Type: Trojan.
September 2, 2019
An update that solves two vulnerabilities and has 7 fixes is now available.
September 2, 2019
An update that fixes 6 vulnerabilities is now available.
September 2, 2019
An update that fixes one vulnerability is now available.
September 2, 2019
An update that solves three vulnerabilities and has two fixes is now available.
September 2, 2019
Why are Google and Facebook banned in China?
September 2, 2019
Multiple security issues were discovered in QEMU, a fast processor emulator, which could result in denial of service, the execution of arbitrary code or bypass of ACLs.
September 2, 2019
Gamification Can Transform Company Cybersecurity Culture
September 2, 2019
It was discovered that there was an arbitrary code execution vulnerability in the pump BOOTP and DHCP client. When copying the body of the server response, the ethernet packet
September 2, 2019
PolicyKit could allow unintended access.
September 2, 2019
An update that solves three vulnerabilities and has 13 fixes is now available.
September 2, 2019
An update that fixes two vulnerabilities is now available.
September 2, 2019
An update that fixes 6 vulnerabilities is now available.
September 2, 2019
An update that fixes one vulnerability is now available.
September 2, 2019
An update that contains security fixes can now be installed.
September 2, 2019
An update that fixes one vulnerability is now available.
September 1, 2019
7 Essential Features of a Perfect Privileged Access Management Solution
September 1, 2019
An update that solves four vulnerabilities and has 7 fixes is now available.
September 1, 2019
An update that fixes one vulnerability is now available.
August 31, 2019
An update that fixes three vulnerabilities is now available.
August 31, 2019
An update that fixes two vulnerabilities is now available.
August 31, 2019
A vulnerability has been discovered in Python, an interactive high-level object-oriented language, that is relevant for cookie handling. By using a malicious server an attacker might steal cookies that are meant for other
August 31, 2019
Multiple vulnerabilities have been found in Dovecot, the worst of which could result in the arbitrary execution of code.
August 31, 2019
A vulnerability in the GNOME desktop library may allow attackers to escape the sandbox.
August 31, 2019
A vulnerability in Nautilus may allow attackers to escape the sandbox.
August 31, 2019
Multiple vulnerabilities have been found in libofx, the worst of which could result in the arbitrary execution of code.
August 31, 2019
The mpg123 package has been updated to version 1.25.12, fixing several issues which could cause it to crash or hang while parsing mp3 files. References: – https://bugs.mageia.org/show_bug.cgi?id=25350
August 31, 2019
Updated webmin package fixes security vulnerability: Webmin before 1.930 allows remote exploits if the option to change expired passwords is enabled (CVE-2019-15107).
August 31, 2019
Updated ghostscript packages fix security vulnerability: It was found that the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript
August 31, 2019
Updated pango package fixes security vulnerability: It was discovered that pango was subject to a heap based buffer overflow vulnerability which could be used to get code execution (CVE-2019-1010238).
August 31, 2019
Updated ansible package fixes security vulnerability: A flaw was discovered in the way Ansible templating was implemented before version 2.7.12, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable
August 31, 2019
Updated vlc packages fixes security vulnerabilities: Multiple security issues were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file/stream is processed (CVE-2019-13602, CVE-2019-13962,
August 31, 2019
AUpdated memcached packages fix security vulnerability: In memcached before 1.5.14, a NULL pointer dereference was found in the “lru mode” and “lru temp_ttl” commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in
August 31, 2019
Updated wavpack packages fixes security vulnerabilities: Rohan Padhye discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to cause a denial of service (CVE-2019-1010315, CVE-2019-1010317, CVE-2019-1010318, CVE-2019-1010319).
August 31, 2019
Updated wavpack packages fixes security vulnerabilities: It was discovered that WavPack incorrectly handled certain DFF files. An attacker could possibly use this issue to cause a denial of service (CVE-2019-11498).
August 31, 2019
A number of potential side channel attacks were discovered in the SAE implementations used by both hostapd (AP) and wpa_supplicant (infrastructure BSS station/mesh station). SAE (Simultaneous Authentication of Equals) is also known as WPA3-Personal. The discovered side channel attacks may be able to leak information about the used
August 31, 2019
Twitter CEO Jack Dorsey’s account hacked with racial slurs
August 31, 2019
Coin-mining malware jumps from Arm IoT gear to Intel servers
August 30, 2019
Google hackers found malicious websites hacking iPhones
August 30, 2019
Risk Level: Very Low. Type: Trojan.
August 30, 2019
Risk Level: Very Low. Type: Trojan.
August 30, 2019
Risk Level: Very Low. Type: Trojan.
August 30, 2019
iPhone Zero-Days Anchored Watering-Hole Attacks
August 30, 2019
Six Hackers Have Now Pocketed $1M From Bug Bounty Programs
August 30, 2019
Google’s bug bounty bid to make big Android apps more secure
August 30, 2019
Reading Time: ~ 2 min. Cybercriminals use Botnets to Launch Attacks on Social Media According to a new report, more than half of all login attempts on social media sites are fraudulent, and at least 1 in 4 new account creation attempts are also fraudulent. With the sheer number of potential victims these types of […]
August 30, 2019
Hardening Gluster Installations with TLS
August 30, 2019
Hear me speak at “Conversations from the Vault” in London
August 30, 2019
* CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes
August 30, 2019
Rebuilt with newer nghttp2 —- This update includes the latest upstream release of `mod_http2`, version **1.15.3**. Upstream changes include: * fixes Timeout vs. KeepAliveTimeout behaviour, see PR 63534. * Fixes stream cleanup when connection throttling is in place. * Counts stream resets by client on streams initiated by client as cause for connection throttling. * […]
August 30, 2019
An update that fixes one vulnerability is now available.
August 30, 2019
I just love your accent – please, have a new password
August 30, 2019
TGI Fridays Delivers Customer Indigestion Over Data Exposure
August 29, 2019
New version 3.0.3, Security fix for CVE-2019-13619
August 29, 2019
Update to 2.6.7
August 29, 2019
FIN6 Switches Up PoS Tactics to Target E-Commerce
August 29, 2019
security update
August 29, 2019
An update that solves four vulnerabilities and has three fixes is now available.
August 29, 2019
An update that fixes 8 vulnerabilities is now available.
August 29, 2019
An update that fixes two vulnerabilities is now available.
August 29, 2019
Several security issues were fixed in Apache.
August 29, 2019
Hongxu Chen found several issues in djvulibre, a library and set of tools to handle images in the DjVu format.
August 29, 2019
New version 3.0.3, Security fix for CVE-2019-13619
August 29, 2019
Update to 2.6.7
August 29, 2019