Menu

Category Archives: Security

Articles about security

Multiple vulnerabilities have been found in Oracles JDK and JRE software suites.

Multiple vulnerabilities have been found in SQLite, the worst of which could result in the arbitrary execution of code.

Smashing Security #141: Black Hat and Bridezillas
How dodgy browser plugins, web scripts can silently rewrite that URL you were about to hit – and throw you into an internet wormhole
World recoils in horror as smartphone maker accused of helping government snoops read encrypted texts, track device whereabouts
Intel: Listen up, you NUC-leheads! Mini PCs and compute sticks just got a major security fix
Chin up, CapitalOne: You may not have been the suspected hacker’s only victim. Feds fear 30-plus organizations hit

security update

security update

Fingerprints of 1M Exposed in Public Biometrics Database
Lenovo Warns of ThinkPad Bugs, One Unpatched
20-Year-Old Bug in Legacy Microsoft Code Plagues All Windows Users
Windows Users at Risk From High-Severity Intel Software Flaw
DEF CON and Feds Partner on Anonymous Bug Submission Program

An update that fixes two vulnerabilities is now available.

An update that fixes 12 vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

Facebook Records User Audio, Sparking Privacy Questions
Microsoft warns of wormable vulnerabilities in Windows

Several security issues have been fixed in otrs2, a well known trouble ticket system.

Norman Cryptominer Employs Sophisticated Obfuscation Tactics
TikTok Scammers Cash In On Adult Dating, Impersonation Tricks
Not very Suprema: Biometric access biz bares 27 million records and plaintext admin creds

An update that fixes 7 vulnerabilities is now available.

Epic Games slapped with lawsuit over hacked Fortnite accounts

An update that solves two vulnerabilities and has one errata is now available.

An update that fixes one vulnerability is now available.

wpa_supplicant and hostapd could be made to expose sensitive information over the network.

In the Balkans, businesses are under fire from a double‑barreled weapon

ESET researchers discovered a campaign that uses two malicious tools with similar capabilities to ensure both resilience and broader potential for the attackers The post In the Balkans, businesses are under fire from a double‑barreled weapon appeared first on WeLiveSecurity

HTTP/2, Brute! Then fall, server. Admin! Ops! The server is dead

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

An update that fixes two vulnerabilities is now available.

An update that contains security fixes can now be installed.

An update that fixes four vulnerabilities is now available.

This summer’s hottest sequels: BlueKeep II, III, IV and V – the latest wormable RDP holes in Microsoft Windows

security update

We checked and yup, it’s no longer 2001. And yet you can pwn a Windows box via Notepad.exe
Shades of BlueKeep: Wormable Remote Desktop Bugs Top August Patch Tuesday List
Patch your internet-connected printer! Serious vulnerabilities discovered
22 Critical Flaws Patched in Adobe Photoshop
Cerberus Enters the Android Malware Rental Scene
An Army Watchkeeper drone tried to land. Then meatbags took over from the computers

An update that solves four vulnerabilities and has one errata is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that solves four vulnerabilities and has three fixes is now available.

British Airways E-Ticketing Flaw Exposes Passenger Flight, Personal Data

An update for kernel is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

US insurers face SEC probe over web-access bungle that exposed ‘up to 885 million’ files

An update that fixes one vulnerability is now available.

An update that fixes 16 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes four vulnerabilities is now available.

Header aches in Firefox, Tor, Brave and Chrome as HTTP opens new security holes
Hacking my airplane – BlackHat edition

After welcoming hacking research, automobile technology started to get better at defending against hacks. So why has the airline industry not been as welcoming? The post Hacking my airplane – BlackHat edition appeared first on WeLiveSecurity

Web body mulls halving HTTPS cert lifetimes. That screaming in the distance is HTTPS cert sellers fearing orgs will bail for Let’s Encrypt
Tor pedos torpedoed again, this time Feds torpedo four Tor pedos – and keep how they unmasked dark-web scumbags under wraps
What do Windows 10 and Uber or Lyft have in common? One bad driver can really ruin your day. And 40 can totally ruin your month

security update

security update

AT&T, T-Mobile, Sprint, Verizon Blasted For Data Privacy Policies
White hat hackers infect Canon DSLR camera with ransomware
4 Dating Apps Pinpoint Users’ Precise Locations – and Leak the Data
Printer pwnage, phone poppage, and apparently US Homeland Security needs security help
US still ‘not prepared’ in event of a serious cyber attack and Congress can’t help if it happens
Tips for Successful Zero-Trust Implementation
US military swoops into DEF CON seeking a few good hackers for debut aviation pwning village
Black Hat 2019 News Wrap: The Best and Worst of the Show
Plot twist: Google’s not spying on King’s Cross with facial recognition tech, but its landlord is
Gamers Beware: Zero-Day in Steam Client Affects All Windows Users

The package postgresql before version 11.5-1 is vulnerable to multiple issues including access restriction bypass and information disclosure.

The package postgresql-libs before version 11.5-1 is vulnerable to multiple issues including access restriction bypass and information disclosure.

The package chromium before version 76.0.3809.100-1 is vulnerable to arbitrary code execution.

An update that fixes one vulnerability is now available.

I could throttle you right about now: US Navy to ditch touchscreens after kit blamed for collision

poppler could be made to crash if it received specially crafted PDF.

An update for cockpit-ovirt is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for rhvm-appliance is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Several vulnerabilities were discovered in python-django, a web development framework. They could lead to remote denial-of-service or SQL injection,

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

security update

Security fix for CVE-2018-19800 CVE-2018-19801 CVE-2018-19802

Security fix for CVE-2018-19800 CVE-2018-19801 CVE-2018-19802

DEF CON 2019: Picture Perfect Hack of a Canon EOS 80D DSLR

Benno Fuenfstueck discovered that Pango, a library for layout and rendering of text with an emphasis on internationalization, is prone to a heap-based buffer overflow flaw in the pango_log2vis_get_embedding_levels function. An attacker can take advantage of this flaw for denial of

Driver Disaster: Over 40 Signed Drivers Can’t Pass Security Muster

The 5.2.7 stable kernel update contains a number of important fixes across the tree. —- The 5.2.6 kernel rebase contains new hardware support, features, and a number of important bug fixes across the tree. —- Update to v5.1.12

The 5.2.7 stable kernel update contains a number of important fixes across the tree. —- The 5.2.6 kernel rebase contains new hardware support, features, and a number of important bug fixes across the tree. —- Update to v5.1.12

The 5.2.7 stable kernel update contains a number of important fixes across the tree. —- The 5.2.6 kernel rebase contains new hardware support, features, and a number of important bug fixes across the tree. —- Update to v5.1.12

Patches for CVE-2019-14295, CVE-2019-14296

July CPU update. See: http://openjdk.java.net/groups/vulnerability/advisories/2019-07-16 and http://mail.openjdk.java.net/pipermail/jdk8u-dev/2019-July/009840.html

fixed CVEs 2019-10181, 2019-10182, 2019-10185 —- Updated to fres upstream release: https://mail.openjdk.java.net/pipermail/distro-pkg- dev/2019-March/041320.html New in release 1.8 (2019-03-12): * added support for javafx-desc and so allwong run of pure-javafx only applications * –nosecurity enhanced for possibility to skip invalid signatures * enhanced to allow

The 5.2.7 stable update contains a number of important fixes across the tree.

The 5.2.7 stable update contains a number of important fixes across the tree.

The 5.2.7 stable update contains a number of important fixes across the tree.

Security fix for CVE-2019-14378