March 23, 2019
Flaw in NSA’s GHIDRA leads to remote code execution attacks
March 23, 2019
This update addresses various overflow conditions that could result in possible memory read/write out of bounds errors or zero byte allocations when connected to a malicious server.
March 23, 2019
Backport a security fix from PuTTY 0.71 affecting SFTP connections: Fix an integer overflow in the RSA key exchange preceeding host key verification
March 23, 2019
**Version 1.38.2** (2019-03-12) * added TemplateWrapper::getTemplateName() —- **Version 1.38.1** (2019-03-12) * fixed class aliases —- **Version 1.38.0** (2019-03-12) * fixed sandbox security issue (under some circumstances, calling the __toString() method on an object was possible even if not allowed by the security policy) * fixed batch filter clobbers array
March 23, 2019
**Version 2.7.2** (2019-03-12) * added TemplateWrapper::getTemplateName() —- **Version 2.7.1** (2019-03-12) * fixed class aliases —- **Version 2.7.0** (2019-03-12) * fixed sandbox security issue (under some circumstances, calling the __toString() method on an object was possible even if not allowed by the security policy) * fixed batch filter clobbers array keys when fill
March 23, 2019
Spycams Secretly Live-Streamed 1,600 Motel Guests
March 22, 2019
Firefox and Edge Fall to Hackers on Day Two of Pwn2Own
March 22, 2019
security update
March 22, 2019
Google Play Touts Certs in Quest For Enterprise Security
March 22, 2019
Critical DoS Bug Bubbles Up in Facebook Fizz TLS 1.3 Project
March 22, 2019
Analysis: Drone Tech Creates New Type of Blended Threat
March 22, 2019
An update that fixes one vulnerability is now available.
March 22, 2019
An update that fixes one vulnerability is now available.
March 22, 2019
An update that fixes one vulnerability is now available.
March 22, 2019
An update that fixes one vulnerability is now available.
March 22, 2019
Risk Level: Very Low. Type: Trojan.
March 22, 2019
Risk Level: Very Low. Type: Trojan.
March 22, 2019
A heap-based buffer overflow was discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of this flaw for local root privilege escalation.
March 22, 2019
Reading Time: ~2 min. Gnosticplayers Adds 26 Million More Records for Sale After the first 3 major data dumps, which totaled over 600 million records, the hacker known as Gnosticplayers has released his latest cache of data, which contains at least 26 million personal user records. These data caches hold customer information for 32 companies […]
March 22, 2019
Medtronic Defibrillators Have Critical Flaws, Warns DHS
March 22, 2019
Libzip could be made to crash if it received specially crafted input.
March 22, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:0622
March 22, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:0623
March 22, 2019
An update that fixes one vulnerability is now available.
March 22, 2019
An update that solves two vulnerabilities and has two fixes is now available.
March 22, 2019
An update that fixes three vulnerabilities is now available.
March 22, 2019
Risk Level: Very Low. Type: Trojan.
March 22, 2019
Update tcpflow to 1.5.2 tag at github, fixing a security issue.
March 21, 2019
WordPress Plugin Patched After Zero Day Discovered
March 21, 2019
security update
March 21, 2019
security update
March 21, 2019
security update
March 21, 2019
Hackers Take Down Safari, VMware and Oracle at Pwn2Own
March 21, 2019
Proxy Auto-Configuration file can define localhost access to be proxied (CVE-2018-18506). Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6 (CVE-2019-9788).
March 21, 2019
In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c. (CVE-2019-7397) References: – https://bugs.mageia.org/show_bug.cgi?id=24396
March 21, 2019
The user module leaked parameters passed to ssh-keygen to the process environment (CVE-2018-16837). The fetch module was susceptible to path traversal (CVE-2019-3828).
March 21, 2019
Several security issues were fixed in Ghostscript.
March 21, 2019
An update for ghostscript is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 21, 2019
NTFS-3G could be made to crash or potentially run programs as anadministrator if executed with specially crafted arguments.
March 21, 2019
Facebook Stored Passwords in Plain Text For Years
March 21, 2019
MyPillow and Amerisleep Targeted in Magecart Group Attacks
March 21, 2019
Most second-hand thumb drives contain data from past owners
Our penchant for plugging in random memory sticks isn’t the only trouble with our USB hygiene, a study shows The post Most second-hand thumb drives contain data from past owners appeared first on WeLiveSecurity
March 21, 2019
Cisco Patches High-Severity Flaws in IP Phones
March 21, 2019
I Still Didn’t See What You Did
More advice for detecting and avoiding sextortion scams The post I Still Didn’t See What You Did appeared first on WeLiveSecurity
March 21, 2019
Smashing Security #120: Silk Road with Deliveroo
March 21, 2019
Mac-Focused Malvertising Campaign Abuses Google Firebase DBs
March 20, 2019
Reading Time: ~4 min. Since the dawn of IT, there’s been a very consistent theme among admins: end users are the weakest link in your network, organization, security strategy, fill-in-the-blank. We’ve all heard the stories, and even experienced them first-hand. An employee falls for a phishing scam and the whole network is down. Another colleague […]
March 20, 2019
Years-Long Phishing Campaign Targets Saudi Gov Agencies
March 20, 2019
An update that fixes three vulnerabilities is now available.
March 20, 2019
Risk Level: Very Low. Type: Trojan.
March 20, 2019
Fin7 Ramps Up Campaigns With Two Fresh Malware Samples
March 20, 2019
An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
March 20, 2019
An update that fixes two vulnerabilities is now available.
March 20, 2019
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
March 20, 2019
An update that solves 9 vulnerabilities and has one errata is now available.
March 20, 2019
An update that fixes two vulnerabilities is now available.
March 20, 2019
Google hit with €1.49 billion antitrust fine by EU
The third penalty that Europe has levied on the tech giant in less than two years brings the total to €8.25 billion The post Google hit with €1.49 billion antitrust fine by EU appeared first on WeLiveSecurity
March 20, 2019
The package wordpress before version 5.1-1 is vulnerable to directory traversal.
March 20, 2019
The package libelf before version 0.176-1 is vulnerable to denial of service.
March 20, 2019
MySpace loses 12 years worth of photos, songs & video files
March 20, 2019
Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to gain unauthorized access.
March 20, 2019
Hydro working hard to recover following ransomware attack
March 20, 2019
Fake or Fake: Keeping up with OceanLotus decoys
ESET researchers detail the latest tricks and techniques OceanLotus uses to deliver its backdoor while staying under the radar The post Fake or Fake: Keeping up with OceanLotus decoys appeared first on WeLiveSecurity
March 20, 2019
Israeli fintech firms hit by Cardinal RAT malware
March 20, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:0597
March 19, 2019
An update that fixes three vulnerabilities is now available.
March 19, 2019
An update that solves one vulnerability and has one errata is now available.
March 19, 2019
Cardinal RAT Resurrected to Target FinTech Firms
March 19, 2019
Host of Flaws Found in CUJO Smart Firewall
March 19, 2019
security update
March 19, 2019
Old Tech Spills Digital Dirt on Past Owners
March 19, 2019
An update that solves one vulnerability and has one errata is now available.
March 19, 2019
An update that fixes one vulnerability is now available.
March 19, 2019
cloud-init: extra ssh keys added to authorized_keys on the Azure platform (CVE-2019-0816) SL7 x86_64 cloud-init-18.2-1.el7_6.2.x86_64.rpm – Scientific Linux Development Team
March 19, 2019