April 11, 2019
WPA3 flaws may let attackers steal Wi-Fi passwords
The new wireless security protocol contains multiple design flaws that hackers could exploit for attacks on Wi-Fi passwords The post WPA3 flaws may let attackers steal Wi-Fi passwords appeared first on WeLiveSecurity
April 11, 2019
Amazon Auditors Listen to Echo Recordings, Report Says
April 11, 2019
An update that solves two vulnerabilities and has three fixes is now available.
April 11, 2019
An update that fixes 5 vulnerabilities is now available.
April 11, 2019
Several security issues were fixed in Ruby.
April 11, 2019
An update for ceph and grafana is now available for Red Hat Ceph Storage 2.5 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
April 11, 2019
An update for httpd24-httpd and httpd24-mod_auth_mellon is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 11, 2019
Mathy Vanhoef (NYUAD) and Eyal Ronen (Tel Aviv University & KU Leuven) found multiple vulnerabilities in the WPA implementation found in wpa_supplication (station) and hostapd (access point). These vulnerability are also collectively known as “Dragonblood”.
April 11, 2019
The package thunderbird before version 60.6.1-1 is vulnerable to arbitrary code execution.
April 11, 2019
The package apache before version 2.4.39-1 is vulnerable to multiple issues including privilege escalation, access restriction bypass and denial of service.
April 11, 2019
The package gnutls before version 3.6.7-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.
April 11, 2019
The package evolution before version 3.32.0-1 is vulnerable to content spoofing.
April 11, 2019
Smashing Security #123: Backups – a necessary evil?
April 10, 2019
Backport more patches: – shared/install: Preserve escape characters for escaped unit names (https://github.com/coreos/bugs/issues/2569) – timedate: fix emitted value when ntp client is enabled/disabled (#1696586) – udev: run programs in the specified order (#1696784) – core: add Manager::honor_device_enumeration flag (https://pagure.io/fedora-
April 10, 2019
The scourge of stalkerware
April 10, 2019
Multiple vulnerabilities have been found in Git, the worst of which could result in the arbitrary execution of code.
April 10, 2019
You Can Now Get This Award-Winning VPN For Just $1/month
April 10, 2019
Type: Vulnerability. Microsoft Azure DevOps Server and Team Foundation Server are prone to a cross-site scripting vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Azure DevOps Server and Team Foundation Server are prone to a cross-site scripting vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Azure DevOps Server is prone to a cross-site scripting vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Azure DevOps Server is prone to a spoofing vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Team Foundation Server is prone to a cross-site scripting vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Team Foundation Server is prone to a cross-site scripting vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Team Foundation Server is prone to a cross-site scripting vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Azure DevOps Server is prone to an HTML-injection vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Internet Explorer is prone to a remote code-execution vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Open Enclave SDK is prone to an information-disclosure vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft ASP.NET Core is prone to a remote denial-of-service vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Edge is prone to an information disclosure vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Edge and Internet Explorer are prone to a security-bypass vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Windows VBScript Engine is prone to a remote code-execution vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
April 10, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
April 10, 2019
An update that fixes 11 vulnerabilities is now available.
April 10, 2019
Risk Level: Very Low. Type: Trojan.
April 10, 2019
Yahoo Offers $117.5M Settlement in Data Breach Lawsuit
April 10, 2019
Hackers claims to steal 6 million Israeli voters data
April 10, 2019
Cynet is Launching a Free Threat Assessment for Businesses
April 10, 2019
How to identify & protect yourself from online dating scams
April 10, 2019
Several security issues were fixed in wpa_supplicant and hostapd.
April 10, 2019
Credential-stuffing attacks behind 30 billion login attempts in 2018
Streaming media feature among services that take the spotlight in a report on credential-stuffing attacks in 2018 The post Credential-stuffing attacks behind 30 billion login attempts in 2018 appeared first on WeLiveSecurity
April 10, 2019
Reading Time: ~5 min. Not that long ago, before data breaches dominated daily headlines, we felt secure with our social media apps. Conveniently, every website seemed to allow logging in with Facebook or Twitter instead of creating a whole new password, and families of apps quickly became their own industry. Third-party apps and games on social media platforms (remember […]
April 10, 2019
An update that solves three vulnerabilities and has 9 fixes is now available.
April 10, 2019
An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
April 10, 2019
Several security issues were fixed in Apache.
April 10, 2019
It was discovered that SPIP, a website engine for publishing, did not properly sanitize its user input. This would allow an authenticated user to perform arbitrary command execution.
April 10, 2019
SAS 2019: Triton ICS Malware Hits A Second Victim
April 10, 2019
An update that solves one vulnerability and has 5 fixes is now available.
April 10, 2019
Risk Level: Very Low. Type: Trojan.
April 10, 2019
Risk Level: Very Low. Type: Trojan.
April 10, 2019
New upstream release 0.14.2 which also fixes CVE-2019-3878 and CVE-2019-3877
April 9, 2019
update to the bugfix release 3.9.0
April 9, 2019
update to the bugfix release 3.9.0
April 9, 2019
security update
April 9, 2019
Intel Patches High-Severity Flaws in Media SDK, Mini PC
April 9, 2019
An update that fixes one vulnerability is now available.
April 9, 2019
Best password managers for 2019
April 9, 2019
Various vulnerabilities were discovered in Samba, SMB/CIFS file, print, and login server/client for Unix
April 9, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
April 9, 2019
Sharpen your security skills at SANS Dublin 2019
April 9, 2019
Shadow App Development: Insider Threat or Opportunity?
April 9, 2019
An update that fixes three vulnerabilities is now available.
April 9, 2019
An update for katello-installer-base which configures qpid-dispatch-router is now available for Red Hat Satellite 6.2 for RHEL 6 and Red Hat Satellite 6.2 for RHEL 7. Red Hat Product Security has rated this update as having a security impact
April 9, 2019
An update for katello-installer-base which configures qpid-dispatch-router is now available for Red Hat Satellite 6.3 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 9, 2019
An update for katello-installer-base which configures qpid-dispatch-router is now available for Red Hat Satellite 6.4 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
April 9, 2019
Verizon Router Command Injection Flaw Impacts Millions
April 9, 2019
An update that fixes three vulnerabilities is now available.
April 9, 2019
An update that fixes two vulnerabilities is now available.
April 9, 2019
An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
April 9, 2019
OceanLotus: macOS malware update
Latest ESET research describes the inner workings of a recently found addition to OceanLotus’s toolset for targeting Mac users The post OceanLotus: macOS malware update appeared first on WeLiveSecurity
April 9, 2019