Menu

Category Archives: Security

Articles about security

An update for qpid-proton is now available for Satellite Tools 6.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Several vulnerabilities were found in QEMU, a fast processor emulator (notably used in KVM and Xen HVM virtualization).

An update for kernel is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for jenkins is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for dovecot is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Nice work if you can grift it: Two blokes accused of swindling $10m from the elderly with bogus virus infection alerts

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

15,000 private webcams left open to snooping, no password required
If you’re using Harbor as your container registry, bear in mind it can be hijacked with has_admin_role = True
FedEx execs: We had no idea cyberattack would be so bad. Investors: Is that why you sold $40m+ of your own shares?

security update

Payment Card Breach Hits 8 Cities Using Vulnerable Bill Portal
Microsoft Silent Update Torpedoes Windows Defender
These Hacks Require Literally Sneaking in the Backdoor
How to spot online dating scam and its never ending fakery
Universities warned to brace for cyberattacks

The UK’s cybersecurity agency also outlines precautions that academia should take to mitigate risks The post Universities warned to brace for cyberattacks appeared first on WeLiveSecurity

Chinese students in UK ripe target for scammers exploiting visa concerns
Belgian F-16 pilot rescued from power line after emergency ejection
Smart TVs, Subscription Services Leak Data to Facebook, Google

This update upgrades Thunderbird to version 60.9.0. * Mozilla: Covert Content Attack on S/MIME encryption using a crafted multipart/alternative message (CVE-2019-11739) * Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox ESR 60.9 (CVE-2019-11740) * Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images (CVE-2019-11742) * Mo […]

WannaCry is still the smallpox of infosec. But the latest strain (sort of) immunises its victims

An update that fixes 35 vulnerabilities is now available.

An update that fixes 35 vulnerabilities is now available.

IT now stands for Intermediate Targets: Tech providers pwned by snoops eyeing up customers – report

An update for the nginx:1.14 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for systemd is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support, Red Hat Enterprise Linux 7.3 Telco Extended Update Support, and Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions.

An update for ruby is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support, Red Hat Enterprise Linux 7.3 Telco Extended Update Support, and Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions.

Remember that security probe that ended with a sheriff cuffing the pen testers? The contract is now public so you can decide who screwed up

An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Smashing Security #146: Password secrets and baking brownies

An update for skydive is now available for Red Hat OpenStack Platform 14.0 (Rocky). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Update to 4.1.7

Marc Rogers: Success of Anonymous Bug Submission Program ‘Takes A Village’
IRS Emails Promise a Refund But Deliver Botnet Recruitment
Scotiabank slammed for ‘muppet-grade security’ after internal source code and credentials spill onto open internet
Every Ecuadorian has been compromised in massive data breach
GitHub gobbles biz used by NASA, Google, etc to search code for bugs and security holes in Mars rovers, apps…
Uni sysadmins, don’t relax. Cybercrooks are still after your crown jewels, warns NCSC
Rethinking Responsibilities and Remedies in Social-Engineering Attacks

Risk Level: Very Low. Type: Trojan.

Remote access flaws found in popular routers, NAS devices

In almost all tested units, the researchers achieved their goal of obtaining remote root-level access The post Remote access flaws found in popular routers, NAS devices appeared first on WeLiveSecurity

Analytics exec nicked as Ecuador tries to rush through privacy laws after massive data leak
Emotet Returns from Summer Vacation, Ramps Up Stolen Email Tactic

An update that fixes one vulnerability is now available.

An update that fixes three vulnerabilities is now available.

Edward Snowden Sued by U.S. Over New Memoir
CookieMiner malware targets Macs, steals passwords and SMS messages, mines for cryptocurrency
Popular Ad blockers caught ad frauding millions of Chrome users
New! RFP Template for Selecting EDR/EPP and APT Security
Massive Gaming DDoS Exploits Widespread Technology
Malware Moves: The Rise of LookBack – And Return of Emotet

Several security issues were fixed in Tomcat 9.

How to get away with hacking a US satellite

An update that fixes two vulnerabilities is now available.

This update upgrades Thunderbird to version 60.9.0. * Mozilla: Covert Content Attack on S/MIME encryption using a crafted multipart/alternative message (CVE-2019-11739) * Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox ESR 60.9 (CVE-2019-11740) * Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images (CVE-2019-11742) * Mo […]

wpa_supplicant could be made to be disconnected and require reconnection to the network if it received a specially crafted management frame.

Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code, cross-site scripting, information disclosure and a covert content attack on S/MIME encryption using a crafted multipart/alternative message.

How to break out of a hypervisor: Abuse Qemu-KVM on-Linux pre-5.3 – or VMware with an AMD driver
How to Ship Your Ecommerce Goods At Lightning Speed

wpa_supplicant could be made to be disconnected and require reconnection to the network if it received a specially crafted management frame.

Your ugly mug may be scanned yet again – but at least you’ll be able to board faster at Gatwick

An update that solves three vulnerabilities and has two fixes is now available.

Revealed: The 25 most dangerous software bug types – mem corruption, so hot right now

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Risk Level: Very Low. Type: Trojan.

Panda Threat Group Mines for Monero With Updated Payload, Targets

– double free due to subsequent call of realloc() (CVE-2019-5481) – fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)

security update

US government sues ex-IT guy for breaking his NDA (Yes, we mean Edward Snowden)
Seriously, this sh!t again? 24m medical records, 700m+ scan pics casually left online
Vulns out of the box: 12 in 13 small biz network devices terribly insecure by default – research
New Linux malware is evading detection to mine cryptocurrency

Risk Level: Very Low. Type: Trojan, Virus, Worm.

AMD Radeon Graphics Cards Open VMware Workstations to Attack

Reading Time: ~ 3 min. An unfortunate reality of all smart devices is that, the smarter they get, and the more integrated into our lives they become, the more devastating a security breach can be. Smart cars are no exception. On the contrary, they come with their own specific set of vulnerabilities. Following high-profile incidents […]

HP printer small print says kit phones home data on whatever you print – and then some
Cisco Extends Patch for IPv6 DoS Vulnerability
Google Calendar Settings Gaffes Exposes Users’ Meetings, Company Details
Nearly all of Ecuador’s citizens caught up in data leak

The humongous collection of extensive personal details about millions of people could be a gold mine for scam artists The post Nearly all of Ecuador’s citizens caught up in data leak appeared first on WeLiveSecurity

Medical images and details of 24.3 million patients left exposed on the internet

An update that fixes one vulnerability is now available.

New Threat Actor Fraudulently Buys Digital Certificates to Spread Malware
UK Home Office web form snafu allows you to both agree and disagree – strongly – all at once
LastPass Fixes Bug That Leaks Credentials

An update for rh-nginx114-nginx is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for qpid-proton is now available for Satellite Tools 6.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update is now available for Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

USN-4113-1 introduced a regression in Apache.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

An update for qpid-proton is now available for Red Hat Satellite 6.3 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for qpid-proton is now available for Red Hat Satellite 6.4 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

– Update to 0.12.0b – Clean up SPEC – Remove patches – Use sed for make Phonon default – Use KF5 instead of KDE4 – Renew URLs – CVE-2019-9133

– Update to 0.12.0b – Clean up SPEC – Remove patches – Use sed for make Phonon default – Use KF5 instead of KDE4 – Renew URLs – CVE-2019-9133

An update for qpid-proton is now available for Red Hat Satellite 6.5 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,