Menu

Category Archives: Security

Articles about security

An update that fixes four vulnerabilities is now available.

An update that fixes 6 vulnerabilities is now available.

Gmail wittingly storing your online purchase data for years

Fixes possible man-in-the-middle security vulnerability – CVE-2019-11065

This update fixes security vulnerability – Checkstyle loads external DTDs by default. Upstream issue: https://github.com/checkstyle/checkstyle/issues/6474 https://github.com/checkstyle/checkstyle/issues/6478 References: https://checkstyle.org/releasenotes.html#Release_8.18

Sharing Threat Intelligence: Time for an Overhaul
Windows 10 Update Bricks PCs, Microsoft Offers Workarounds
Salesforce Woes Linger as Admins Clean Up After Service Outage
Sophos tells users to roll back Microsoft’s Patch Tuesday run if they want PC to boot
Behind the Naming of ZombieLoad and Other Intel Spectre-Like Flaws
Google bans Huawei from accessing Android & its licensed apps
Boeing admits 737 Max sims didn’t accurately reproduce what flying without MCAS was like
Slack Bug Allows Remote File Hijacking, Malware Injection
ZombieLoad: How Intel’s Latest Side Channel Bug Was Discovered and Disclosed

Multiple vulnerabilities have been discovered in jruby, Java implementation of the Ruby programming language.

Several security vulnerabilities have been discovered in drupal7, a PHP web site platform. The vulnerabilities affect the embedded versions of the jQuery JavaScript library and the Typo3 Phar Stream Wrapper library.

TeamViewer was Targeted by Chinese Hackers in 2016

An update that fixes one vulnerability is now available.

An update that solves 14 vulnerabilities and has 90 fixes is now available.

An update that fixes four vulnerabilities is now available.

An update that solves one vulnerability and has one errata is now available.

An update is now available for Red Hat Quay 3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

Firms, stop sending out automated emails that look suspicious as hell!
Let adware be treated as malware, Canuck boffins declare after breaking open Wajam ad injector

gnome-desktop 3.30.2.3 release, fixing thumbnailer sandbox escape, CVE-2019-11460

Multiple vulnerabilities have been discovered in graphicsmagick, the image processing toolkit: CVE-2019-11473

A vulnerability was discovered in libspring-security-2.0-java, a modular Java/J2EE application security framework, when using SecureRandomFactoryBean#setSeed to configure a SecureRandom instance,

The update for ghostscript released as DLA-1792-1 uncovered an issue in cups-filters which was using the undocumented Ghostscript internal “pdfdict” now hidden in the ghostscript update. Updated cups-filters

* Fix rendering of emojis copy-pasted from GTK emoji chooser. * Fix space characters not being rendered with some CJK fonts. * Fix adaptive streaming playback with older GStreamer versions. * Set a maximum zoom level for pinch zooming gesture. * Fix navigation gesture to not interfere with scrolling. * Fix SSE2 detection at compile […]

CIA traitor spy thrown in the clink for selling secrets to China. Stack Overflow, TeamViewer admit: We were hacked…
Giga-hurts radio: Terrorists build Wi-Fi bombs to dodge cops’ cellphone jammers
WordPress WP Live Chat Support Plugin Fixes XSS Flaw
It’s not chicken feed: Million-dollar meal deal for livestock sabotaged by hackers… and, er, exchange rates
Ransomware ‘Remediation’ Firm Exposed: Researchers Weigh in on Paying
How Decoding Network Traffic Can Save Your Data Bacon

Reading Time: ~2 min. WhatsApp Exploited to Install Spyware through Calls A serious flaw has been discovered in the messaging app WhatsApp that would allow an attacker to install spyware on a victim’s device by manipulating the packets being sent during the call. Further disguising the attack, the malicious software could be installed without the […]

Get out of Huawei, it’s an avalanche of news from everyone’s favourite Chinese bogeyman

An update that fixes 6 vulnerabilities is now available.

The minified jquery library was broken in version 1.7.2+dfsg-3.2+deb8u6 due to an error during the build. This problem has now been fixed in version 1.7.2+dfsg-3.2+deb8u7

News Wrap: WhatsApp, Microsoft, Intel and Cisco Flaws

An update that fixes 8 vulnerabilities is now available.

Good heavens, is it time to patch Cisco kit again? Prime Infrastructure root privileges hole plugged
Freed whistleblower Chelsea Manning back in jail for refusing to testify before secret grand jury
Bank-account-raiding Goznym malware bust: Five suspects collared, five still on the run. $100m feared stolen

– [3.1.1](https://github.com/TYPO3/phar-stream-wrapper/releases/tag/v3.1.1) – [TYPO3-PSA-2019-007](https://typo3.org/security/advisory/typo3-psa-2019-007/) / [CVE-2019-11831](https://nvd.nist.gov/vuln/detail/CVE-2019-11831) – [TYPO3-PSA-2019-008](https://typo3.org/security/advisory/typo3-psa-2019-008/) / [CVE-2019-11830](https://nvd.nist.gov/vuln/detail/CVE-2019-11830) –

The plane, it’s ‘splained, falls mainly without the brain: We chat to boffins who’ve found a way to disrupt landings using off-the-shelf radio kit
The Future of Wi-Fi Security: Assessing Vulnerabilities in WPA3
Mobile Risks Boom in a Post-Perimeter World
Forbes Becomes Latest Victim of Magecart Payment Card Skimmer
Office 365 user security practices are woeful, yet it’s still ‘Microsoft’s fault’ when an org is breached
Survey: What should companies do to restore trust post-breach?

The ESET survey among thousands of people in Asia-Pacific (APAC) provides valuable insight into their perceptions of cyber-threats and various common aspects of online security The post Survey: What should companies do to restore trust post-breach? appeared first on WeLiveSecurity

$100 million GozNym cybercrime network dismantled as suspects charged
Forbes subscribers warned of Magecart threat skimming credit card details

An update that fixes 6 vulnerabilities is now available.

An update that solves 11 vulnerabilities and has 20 fixes is now available.

Cisco Service Provider, WebEx Bugs Offer Up Remote Code Execution
Cybercrime Gang Behind GozNym Banking Malware Dismantled
Oh, the irony… Malware spread via Best of the Web security seals

An update that fixes one vulnerability is now available.

An update that solves four vulnerabilities and has 6 fixes is now available.

An update that fixes four vulnerabilities is now available.

An update that solves three vulnerabilities and has 8 fixes is now available.

An update that solves four vulnerabilities and has three fixes is now available.

An update that fixes 6 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

Smashing Security #128: Shackled ankles, photo scrapes, and SIM card swaps

An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

An update for rh-python35-python-jinja2 is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

This update provides the Intel 20190514 microcode release that adds the microcode side mitigations for the Microarchitectural Data Sampling (MDS, also called ZombieLoad attack) vulnerabilities in Intel processors that can allow attackers to retrieve data being processed inside a CPU.

Breaking news: Bank-card-slurping malware sneaks into Forbes’ mag subscription website
Amazon, Apple, Google & Microsoft issue patches to fix ZombieLoad bug

security update

security update

security update

security update

Google Titan Security Key Recalled After Bluetooth Pairing Bug
Titan-ic disaster: Bluetooth blunder sinks Google’s 2FA keys, free replacements offered

Type: Vulnerability. Microsoft Internet Explorer is prone to a security-bypass vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft SharePoint Server is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft Azure Active Directory Connect is prone to a remote privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft Office Access Connectivity Engine is prone to a remote code-execution vulnerability; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft SharePoint Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks; fixes are available.

Type: Vulnerability. Microsoft Windows is prone to a remote code-execution vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to an information-disclosure vulnerability; fixes are available.

Type: Vulnerability. Microsoft SharePoint Server is prone to a remote code-execution vulnerability; fixes are available.

Type: Vulnerability. Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability; fixes are available.

Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability; fixes are available.

Type: Vulnerability. Microsoft .NET is prone to a remote denial-of-service vulnerability; fixes are available.

Type: Vulnerability. Microsoft SharePoint Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks; fixes are available.

Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.

We like transparency and we’re a CA, hackers hack all night and we log all day
Intel ZombieLoad Side-Channel Attack: 10 Takeaways
Hackers interrupt Eurovision webcast in Israel with missile attack alert

Reading Time: ~3 min. It’s a familiar story in tech: new technologies and shifting preferences raise new security challenges. One of the most pressing challenges today involves monitoring and securing all of the applications and data currently undergoing a mass migration to public and private cloud platforms. Malicious actors are motivated to compromise and control […]

Billions of Malicious Bot Attacks Take to Cipher-Stunting to Hide