July 26, 2019
Reading Time: ~ 2 min. Vulnerability Exposes Dozens of U.S. Colleges At least 62 U.S. colleges have been compromised after an authentication vulnerability was discovered by hackers, allowing them to easily access user accounts. At several of the compromised colleges, officials were tipped off after hundreds of fraudulent user accounts were created within a 24-hour […]
July 26, 2019
An update that solves two vulnerabilities and has two fixes is now available.
July 26, 2019
This is the one-month notification for the end of the maintenance phase for Red Hat OpenShift Enterprise 3.6 and 3.7. This notification applies only to customers with subscriptions for Red Hat OpenShift Enterprise 3.6 and 3.7. 2. Description:
July 26, 2019
Risk Level: Very Low. Type: Trojan.
July 26, 2019
Streamlining Patch Management: Expert Advice
July 25, 2019
Update to v5.1.19
July 25, 2019
Update to v5.1.19
July 25, 2019
New Loader Variant Behind Widespread Malware Attacks
July 25, 2019
An issue with quoting has been found in patch, a tool to apply a diff file to an original, when invoking ed. In order to avoid this, ed is now directly started instead of calling a shell which starts ed.
July 25, 2019
An update for atomic-openshift and jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 25, 2019
Risk Level: Very Low. Type: Trojan.
July 25, 2019
Risk Level: Very Low. Type: Trojan.
July 25, 2019
Risk Level: Very Low. Type: Trojan.
July 25, 2019
Streaming service endures 13‑day DDoS raid
The attack, unleashed by a 400,000-strong Mirai-style botnet, may be the largest of its kind on record The post Streaming service endures 13‑day DDoS raid appeared first on WeLiveSecurity
July 25, 2019
Protecting Against Ransomware Attacks: A Checklist
July 25, 2019
An update that solves three vulnerabilities and has 9 fixes is now available.
July 25, 2019
An update that fixes one vulnerability is now available.
July 25, 2019
Exim could be made to run programs as an administrator if it received specially crafted network traffic.
July 25, 2019
An update for rh-redis32-redis is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 25, 2019
An update that solves two vulnerabilities and has one errata is now available.
July 25, 2019
Several security issues were fixed in VLC.
July 25, 2019
libEBML could be made to crash if it opened a specially crafted file.
July 25, 2019
Jeremy Harris discovered that Exim, a mail transport agent, does not properly handle the ${sort } expansion. This flaw can be exploited by a remote attacker to execute programs with root privileges in non-default (and unusual) configurations where ${sort } expansion is used for items
July 25, 2019
security update
July 25, 2019
Update including July CPU fixes.
July 24, 2019
Update including July CPU fixes.
July 24, 2019
security update
July 24, 2019
security update
July 24, 2019
security update
July 24, 2019
Several security issues were fixed in Ansible.
July 24, 2019
Unique Monokle Android Spyware Self-Signs Certificates
July 24, 2019
An update that fixes four vulnerabilities is now available.
July 24, 2019
An update that fixes four vulnerabilities is now available.
July 24, 2019
An update that fixes four vulnerabilities is now available.
July 24, 2019
An update that fixes 10 vulnerabilities is now available.
July 24, 2019
An update that fixes four vulnerabilities is now available.
July 24, 2019
An update that fixes 12 vulnerabilities is now available.
July 24, 2019
Several security issues were fixed in Patch.
July 24, 2019
Data breaches can haunt firms for years
The compromised company may bear the financial brunt of the breach within the first year after the incident occurs, but the price tag is still far from final The post Data breaches can haunt firms for years appeared first on WeLiveSecurity
July 24, 2019
An update that fixes 5 vulnerabilities is now available.
July 24, 2019
An update that fixes three vulnerabilities is now available.
July 24, 2019
Several security issues were fixed in Patch.
July 24, 2019
OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) (CVE-2019-2745) * OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762) * OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769) * OpenJDK: Missing URL format validation (Networking, 822151 [More…]
July 24, 2019
An update is now available for CloudForms Management Engine 5.10. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
July 24, 2019
Malware-Loader ‘Brushaloader’ Grows More Menacing
July 23, 2019
Reading Time: ~ 4 min. You’ve likely heard of the dark web. This ominous sounding shadow internet rose in prominence alongside cryptocurrencies in the early 2010s, eventually becoming such an ingrained part of our cultural zeitgeist that it even received its own feature on an episode of Law & Order: SVU. But as prominent as […]
July 23, 2019
Jann Horn discovered that the ptrace subsystem in the Linux kernel mishandles the management of the credentials of a process that wants to create a ptrace relationship, allowing a local user to obtain root privileges under certain scenarios.
July 23, 2019
VLC Media Player Plagued By Unpatched Critical RCE Flaw
July 23, 2019
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
July 23, 2019
An update that fixes one vulnerability is now available.
July 23, 2019
An update that solves one vulnerability and has two fixes is now available.
July 23, 2019
An update that fixes one vulnerability is now available.
July 23, 2019
An update that fixes 12 vulnerabilities is now available.
July 23, 2019
An update that solves two vulnerabilities and has one errata is now available.
July 23, 2019
An update that fixes one vulnerability is now available.
July 23, 2019
An update that solves two vulnerabilities and has one errata is now available.
July 23, 2019
An update that solves one vulnerability and has one errata is now available.
July 23, 2019
OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) (CVE-2019-2745) * OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762) * OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769) * OpenJDK: Missing URL format validation (Networking, 822151 [More…]
July 23, 2019
An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 23, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
July 23, 2019
Critical RCE Flaw in Palo Alto Gateways Hits Uber
July 22, 2019
Tackling the Collaboration Conundrum
July 22, 2019
Risk Level: Very Low. Type: Trojan.
July 22, 2019
Risk Level: Very Low. Type: Trojan.
July 22, 2019
Large-Scale Government Hacks Hit Russia, Bulgaria
July 22, 2019
VLC player has a critical flaw – and there’s no patch yet
On the flip side, there are currently no known cases of the vulnerability being exploited in the wild The post VLC player has a critical flaw – and there’s no patch yet appeared first on WeLiveSecurity
July 22, 2019
Several security issues were fixed in Squid.
July 22, 2019
OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) (CVE-2019-2745) * OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762) * OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769) * OpenJDK: Missing URL format validation (Networking, 822151 [More…]
July 22, 2019
OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) (CVE-2019-2745) * OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762) * OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769) * OpenJDK: Missing URL format validation (Networking, 822151 [More…]
July 22, 2019
OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) (CVE-2019-2745) * OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762) * OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769) * OpenJDK: Missing URL format validation (Networking, 822151 [More…]
July 22, 2019