Menu

Category Archives: Security

Articles about security

If you could forget the $125 from Equifax and just take the free credit monitoring, that would be great – FTC

An update that fixes two vulnerabilities is now available.

An update that solves two vulnerabilities and has one errata is now available.

An update that fixes three vulnerabilities is now available.

An update that solves three vulnerabilities and has 41 fixes is now available.

Several vulnerabilities were discovered in WPA supplicant / hostapd. Some of them could only partially be mitigated, please read below for details.

$1.7 million still missing after North Carolina county hit by business email compromise scam
Honda’s Security ‘Soft Spots’ Exposed in Unsecured Database
Fix LibreOffice now to thwart silent macro viruses – and here’s how to pwn those who haven’t
Cybercrooks attempted credential-stuffing banks 3.5 BEEELLION times in the last 18 months alone
Chrome 76 Dumps Default Adobe Flash Player Support
Trivial Bug Turns Home Security Cameras Into Listening Posts
New UK Home Sec invokes infosec nerd rage by calling for an end to end-to-end encryption

An update that fixes 10 vulnerabilities is now available.

An update for icedtea-web is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Black Hat USA 2019 Preview
What’s the last piece of software you’d expect to spy on you? Maybe your enterprise security suite? Bad news
Evolving OVAL
Lancaster Uni cordons off breached systems a week after thousands of folks’ data pinched

An update that fixes one vulnerability is now available.

Upstream details at : https://access.redhat.com/errata/RHSA-2019:1898

Upstream details at : https://access.redhat.com/errata/RHSA-2019:1883

Upstream details at : https://access.redhat.com/errata/RHSA-2019:1884

Upstream details at : https://access.redhat.com/errata/RHSA-2019:1880

Upstream details at : https://access.redhat.com/errata/RHSA-2019:1896

Upstream details at : https://access.redhat.com/errata/RHSA-2019:1873

Hack a small airplane? Yes, we CAN (bus) – once we physically break into one, get at its wiring, plug in evil kit…

Update to v5.1.20 —- Update to v5.1.19

Update to v5.1.20 —- Update to v5.1.19

Some security issues are found on oniguruma. This new rpm should fix these issues

Watch as 10 cops with guns and military camo storm suspected Capital One hacker’s house…
DHS Warning: Small Aircraft are Ripe for Hacking
Apple iMessage Flaw Allows Remote Attackers to Read iPhone Messages
Capital One data breach: 106m customers affected; suspected hacker arrested
Hacker swipes personal deets of 20,000 peeps from under Los Angeles Police Dept’s nose
Android Ransomware Spreads Via ‘Sex Simulation Game’ Links on Reddit, SMS
Nation-State Actors Go All-In on Mobile Malware

An update that fixes three vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes 10 vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes 52 vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

Former AWS Engineer Arrested as Capital One Admits Massive Data Breach
Google found a way to remotely attack Apple iOS devices by sending a boobytrapped iMessage

An update for the ruby:2.5 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Bipartisan Senate Committee Releases Report on Election Security Threats

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for qemu-kvm-rhev is now available for Red Hat Virtualization for Red Hat Virtualization Host 7. Red Hat Product Security has rated this update as having a Important security impact. A Common Vulnerability Scoring System (CVSS) base score,

Updated samba packages that fix one security issue and provide several bug fixes and enhancements are now available for Red Hat Gluster Storage 3.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact

Capital One gets Capital Done: Hacker swipes personal info on 106 million US, Canadian credit card applicants
Microsoft preps to purge its cloud access security broker of shonky crypto protocols TLS 1.0, 1.1
Whistleblower says Apple contractors listen to your Siri conversions
Oh sh*t’s, 11: VxWorks stars in today’s security thriller – hijack bugs discovered in countless gadgets’ network code
ThreatList: DMARC Adoption Nonexistent at 80% of Orgs
Cloud Security Concerns Loom for 93% of Businesses Adopting Apps and BYOD
‘URGENT/11’ Critical Infrastructure Bugs Threaten EternalBlue-Style Attacks
Android ransomware is back

ESET researchers discover a new Android ransomware family that attempts to spread to victims’ contacts and deploys some unusual tricks The post Android ransomware is back appeared first on WeLiveSecurity

Fearing WannaCry-Level Danger, Enterprises Wrestle with BlueKeep
Android exploit code emerges, ransomware goes south, Citrix calls off hack probe, and more
IoT botnet launched massive 13-day DDoS attack against streaming service

tmpreaper could be made to overwrite files as the administrator.

‘WannaCry Hero’ Avoids Jail Time in Kronos Malware Charges

An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for kernel is now available for Red Hat Enterprise Linux 5.9 Long Life. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com Launches New site, Celebrates 20 Years of Following Open Source Security News and Resources
Welcome to the New LinuxSecurity.com!

An update for docker is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for podman is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Dear hackers: If you try to pwn a website for phishing, make sure it’s not the personal domain of a senior Akamai security researcher

An update for qemu-kvm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for curl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for qemu-kvm-ma is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Improve security of your Linux OS with simple steps
Scam impersonates WhatsApp, offers ‘free internet’

The fraudulent campaign is hosted by a domain that is home to yet more bogus offers pretending to come from other well-known brands The post Scam impersonates WhatsApp, offers ‘free internet’ appeared first on WeLiveSecurity

Brit infosec firms urge PM Boris to reform the Computer Misuse Act
As the world secures itself, so do crims: Encrypted malware on the rise, warns Sonicwall

security update

Security fix for CVE-2019-13228, CVE-2019-13229, CVE-2019-13227, CVE-2019-13226.

Security fix for CVE-2019-13228, CVE-2019-13229, CVE-2019-13227, CVE-2019-13226.

Security fix for CVE-2019-13228, CVE-2019-13229, CVE-2019-13227, CVE-2019-13226.

OpenSSL versions 1.1.0 through 1.1.0j and 1.1.1 through 1.1.1b are susceptible to a vulnerability that could lead to disclosure of sensitive information or the addition or modification of data (CVE-2019-1543). Oracle VM VirtualBox prior to 6.0.10 has an easily exploitable vulnerability

Imre Rad discovered several vulnerabilities in GNU patch, leading to shell command injection or escape from the working directory and access and overwrite files, if specially crafted patch files are processed.

WannaCry hero Marcus Hutchin aka MalwareTech won’t serve prison time

Fixed out of bounds heap read in function rtreenode() Enhance the rtreenode() function of rtree (used for testing) so that it uses the newer sqlite3_str object for better performance and improved error reporting.

Louisiana Gov Declares Emergency After Cyberattacks Plague Schools
He’s coming home, he’s coming home … Hutchins’ coming home: British Wannacry killer held in US on malware dev rap set free by judge
Rare Steganography Hack Can Compromise Fully Patched Websites
Gamers Are Easy Prey for Credential Thieves

Several security issues were fixed in the Linux kernel.

VLC 3.0.7 has been released on June 6 including security fixes References: – https://bugs.mageia.org/show_bug.cgi?id=24940 – http://www.jbkempf.com/blog/post/2019/VLC-3.0.7-and-security

USN-4054-1 caused some minor regressions in Firefox.

An update that solves two vulnerabilities and has 10 fixes is now available.

Various security problems have been additionally fixed in libssh2, an SSH client implementation written in C++.