An update that fixes one vulnerability is now available.
March 22, 2019
An update that fixes one vulnerability is now available.
March 22, 2019
An update that fixes one vulnerability is now available.
March 22, 2019
Risk Level: Very Low. Type: Trojan.
March 22, 2019
Risk Level: Very Low. Type: Trojan.
March 22, 2019
A heap-based buffer overflow was discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of this flaw for local root privilege escalation.
March 22, 2019
Reading Time: ~2 min. Gnosticplayers Adds 26 Million More Records for Sale After the first 3 major data dumps, which totaled over 600 million records, the hacker known as Gnosticplayers has released his latest cache of data, which contains at least 26 million personal user records. These data caches hold customer information for 32 companies […]
March 22, 2019
Medtronic Defibrillators Have Critical Flaws, Warns DHS
March 22, 2019
Libzip could be made to crash if it received specially crafted input.
March 22, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:0622
March 22, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:0623
March 22, 2019
An update that fixes one vulnerability is now available.
March 22, 2019
An update that solves two vulnerabilities and has two fixes is now available.
March 22, 2019
An update that fixes three vulnerabilities is now available.
March 22, 2019
Risk Level: Very Low. Type: Trojan.
March 22, 2019
Update tcpflow to 1.5.2 tag at github, fixing a security issue.
March 21, 2019
WordPress Plugin Patched After Zero Day Discovered
March 21, 2019
security update
March 21, 2019
security update
March 21, 2019
security update
March 21, 2019
Hackers Take Down Safari, VMware and Oracle at Pwn2Own
March 21, 2019
Proxy Auto-Configuration file can define localhost access to be proxied (CVE-2018-18506). Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6 (CVE-2019-9788).
March 21, 2019
In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c. (CVE-2019-7397) References: – https://bugs.mageia.org/show_bug.cgi?id=24396
March 21, 2019
The user module leaked parameters passed to ssh-keygen to the process environment (CVE-2018-16837). The fetch module was susceptible to path traversal (CVE-2019-3828).
March 21, 2019
Several security issues were fixed in Ghostscript.
March 21, 2019
An update for ghostscript is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 21, 2019
NTFS-3G could be made to crash or potentially run programs as anadministrator if executed with specially crafted arguments.
March 21, 2019
Facebook Stored Passwords in Plain Text For Years
March 21, 2019
MyPillow and Amerisleep Targeted in Magecart Group Attacks
March 21, 2019
Most second-hand thumb drives contain data from past owners
Our penchant for plugging in random memory sticks isn’t the only trouble with our USB hygiene, a study shows The post Most second-hand thumb drives contain data from past owners appeared first on WeLiveSecurity
March 21, 2019
Cisco Patches High-Severity Flaws in IP Phones
March 21, 2019
I Still Didn’t See What You Did
More advice for detecting and avoiding sextortion scams The post I Still Didn’t See What You Did appeared first on WeLiveSecurity
March 21, 2019
Smashing Security #120: Silk Road with Deliveroo
March 21, 2019
Mac-Focused Malvertising Campaign Abuses Google Firebase DBs
March 20, 2019
Reading Time: ~4 min. Since the dawn of IT, there’s been a very consistent theme among admins: end users are the weakest link in your network, organization, security strategy, fill-in-the-blank. We’ve all heard the stories, and even experienced them first-hand. An employee falls for a phishing scam and the whole network is down. Another colleague […]
March 20, 2019
Years-Long Phishing Campaign Targets Saudi Gov Agencies
March 20, 2019
An update that fixes three vulnerabilities is now available.
March 20, 2019
Risk Level: Very Low. Type: Trojan.
March 20, 2019
Fin7 Ramps Up Campaigns With Two Fresh Malware Samples
March 20, 2019
An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
March 20, 2019
An update that fixes two vulnerabilities is now available.
March 20, 2019
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
March 20, 2019
An update that solves 9 vulnerabilities and has one errata is now available.
March 20, 2019
An update that fixes two vulnerabilities is now available.
March 20, 2019
Google hit with €1.49 billion antitrust fine by EU
The third penalty that Europe has levied on the tech giant in less than two years brings the total to €8.25 billion The post Google hit with €1.49 billion antitrust fine by EU appeared first on WeLiveSecurity
March 20, 2019
The package wordpress before version 5.1-1 is vulnerable to directory traversal.
March 20, 2019
The package libelf before version 0.176-1 is vulnerable to denial of service.
March 20, 2019
MySpace loses 12 years worth of photos, songs & video files
March 20, 2019
Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to gain unauthorized access.
March 20, 2019
Hydro working hard to recover following ransomware attack
March 20, 2019
Fake or Fake: Keeping up with OceanLotus decoys
ESET researchers detail the latest tricks and techniques OceanLotus uses to deliver its backdoor while staying under the radar The post Fake or Fake: Keeping up with OceanLotus decoys appeared first on WeLiveSecurity
March 20, 2019
Israeli fintech firms hit by Cardinal RAT malware
March 20, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:0597
March 19, 2019
An update that fixes three vulnerabilities is now available.
March 19, 2019
An update that solves one vulnerability and has one errata is now available.
March 19, 2019
Cardinal RAT Resurrected to Target FinTech Firms
March 19, 2019
Host of Flaws Found in CUJO Smart Firewall
March 19, 2019
security update
March 19, 2019
Old Tech Spills Digital Dirt on Past Owners
March 19, 2019
An update that solves one vulnerability and has one errata is now available.
March 19, 2019
An update that fixes one vulnerability is now available.
March 19, 2019
cloud-init: extra ssh keys added to authorized_keys on the Azure platform (CVE-2019-0816) SL7 x86_64 cloud-init-18.2-1.el7_6.2.x86_64.rpm – Scientific Linux Development Team
March 19, 2019
You should pick your Android security app wisely, test shows
It’s prudent to get a security solution for your device, but a test by AV-Comparatives shows why you need to choose judiciously The post You should pick your Android security app wisely, test shows appeared first on WeLiveSecurity
March 19, 2019
Researcher Says NSA’s Ghidra Tool Can Be Used for RCE
March 19, 2019
An update that fixes 9 vulnerabilities is now available.
March 19, 2019
An update that fixes one vulnerability is now available.
March 19, 2019
An update that fixes one vulnerability is now available.
March 19, 2019
Norsk Hydro Calls Ransomware Attack ‘Severe’
March 19, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:0482
March 19, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:0485
March 19, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:0483
March 19, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:0512
March 19, 2019
It has been discovered that OTRS (Open source Ticket Request System) is susceptible to code injection vulnerability. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully
March 19, 2019
I didn’t see what you did, redux
Cyberblackmail/sextortion again raises its not-so-pretty little head The post I didn’t see what you did, redux appeared first on WeLiveSecurity
March 19, 2019
An update is now available for CloudForms Management Engine 5.9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
March 19, 2019