June 21, 2023
Apple squashes kernel bug used by TriangleDB spyware
June 21, 2023
Passwords out, passkeys in: are you ready to make the switch?
With passkeys poised for prime time, passwords seem passé. What are the main benefits of ditching one in favor of the other? The post Passwords out, passkeys in: are you ready to make the switch? appeared first on WeLiveSecurity
June 21, 2023
A heap-based buffer overflow vulnerability was found in the HTTP chunk parsing code of minidlna, a lightweight DLNA/UPnP-AV server, which may result in denial of service or the execution of arbitrary code.
June 21, 2023
Training in Spanish for cyber security pros
June 21, 2023
An update for kpatch-patch is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 21, 2023
Several security issues were fixed in pngcheck.
June 21, 2023
Several security issues were fixed in Ruby.
June 21, 2023
Gregory James Duck reported that missing input validation in various functions provided by libx11, the X11 client-side library, may result in denial of service.
June 21, 2023
USN-6143-2 caused some minor regressions in Firefox.
June 21, 2023
Oreo cookie maker says crooks gobbled up staff info
June 20, 2023
Reddit confirms BlackCat gang pinched some data
June 20, 2023
An update for c-ares is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions.
June 20, 2023
Jettison could be made to crash if it opened a specially crafted file.
June 20, 2023
libxpm is a library handling X PixMap image format (so called xpm files). xpm files are an extension of the monochrome X BitMap format specified in the X protocol, and is commonly used in traditional X applications.
June 20, 2023
Niels Dossche and Tim D’¼sterhus discovered that PHP’s implementation of the SOAP HTTP Digest authentication did not check for failures, which may result in a stack information leak. Furthermore, the code used an insufficient number of random bytes.
June 20, 2023
Update to 114.0.5735.133. Fixes the following security issues: CVE-2023-3214, CVE-2023-3215, CVE-2023-3215, CVE-2023-3217,
June 20, 2023
security update
June 19, 2023
June 19, 2023
Several security issues were fixed in Jettison.
June 19, 2023
libcap could be made to crash or possibly execute arbitrary code if it received a specially crafted input.
June 19, 2023
An update for c-ares is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 19, 2023
An update for texlive is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update
June 19, 2023
An update for c-ares is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.
June 19, 2023
Release of Bug Advisories for the OpenShift Jenkins image and Jenkins agent base image. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
June 19, 2023
Confidential computing platform-specific details
June 19, 2023
Outsource to infill on cyber security
June 19, 2023
libX11 1.8.6 (CVE-2023-3138)
June 18, 2023
Bump to 5.8.6
June 18, 2023
Bump to 5.8.6
June 18, 2023
Security fix for CVE-2023-33461
June 18, 2023
Bump to 5.8.6
June 18, 2023
Bump to 5.8.6
June 18, 2023
security update
June 17, 2023
security update
June 17, 2023
Is a RAT stealing your files? – Week in security with Tony Anscombe
Could your Android phone be home to a remote access tool (RAT) that steals WhatsApp backups or performs other shenanigans? The post Is a RAT stealing your files? – Week in security with Tony Anscombe appeared first on WeLiveSecurity
June 17, 2023
Stop Cyberbullying Day: Prevention is everyone’s responsibility
Strategies for stopping and responding to cyberbullying require a concerted, community-wide effort involving parents, educators and children themselves The post Stop Cyberbullying Day: Prevention is everyone’s responsibility appeared first on WeLiveSecurity
June 17, 2023
Best practices for patch management
June 17, 2023
The container bci/golang was updated. The following patches have been included in this update:
June 17, 2023
update to 114.0.5735.106. Fixes the following security issue: CVE-2023-3709
June 17, 2023
Update to v1.85.2 —- Update to v1.85.1 —- Update to v1.85.0 Fixes CVE-2023-32682, CVE-2023-32683 —- Update to v1.84.1
June 17, 2023
Several security vulnerabilities have been discovered in golang-go.crypto, the supplementary Go cryptography libraries. CVE-2019-11840
June 16, 2023
Several security issues were fixed in the Linux kernel.
June 16, 2023
Several security issues were fixed in the Linux kernel.
June 16, 2023
security update
June 16, 2023
security update
June 16, 2023
Android GravityRAT goes after WhatsApp backups
ESET researchers analyzed an updated version of Android GravityRAT spyware that steals WhatsApp backup files and can receive commands to delete files The post Android GravityRAT goes after WhatsApp backups appeared first on WeLiveSecurity
June 16, 2023
USN-6156-1 introduced a regression in SSSD.
June 16, 2023
An update that fixes four vulnerabilities is now available.
June 16, 2023
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, information disclosure or bypass of sandbox restrictions.
June 16, 2023
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
June 16, 2023
The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:
June 16, 2023
The container bci/python was updated. The following patches have been included in this update:
June 16, 2023
US government hit by Russia’s Clop in MOVEit mass attack
June 15, 2023
S3 Ep139: Are password rules like running through rain?
June 15, 2023
The Migration Toolkit for Containers (MTC) 1.7.10 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 15, 2023
New packages for Red Hat Ceph Storage 6.1 are now available on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
June 15, 2023
An update for jenkins and jenkins-2-plugins is now available for OpenShift Developer Tools and Services for OCP 4.13. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 15, 2023
Requests could be made to expose sensitive information over the network.
June 15, 2023
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2023-28204
June 15, 2023
Click-jacking certificate exceptions through rendering lag (CVE-2023-34414) Memory safety bugs fixed in Thunderbird 102.12 (CVE-2023-34416) References: – https://bugs.mageia.org/show_bug.cgi?id=31996
June 15, 2023
security update
June 15, 2023
security update
June 14, 2023
security update
June 14, 2023
Cyber insurance: What is it and does my company need it?
While not a ‘get out of jail free card’ for your business, cyber insurance can help insulate it from the financial impact of a cyber-incident The post Cyber insurance: What is it and does my company need it? appeared first on WeLiveSecurity
June 14, 2023
Lethal weather
June 14, 2023
Talking cybersecurity on “Learning Curve”
June 14, 2023
An update for .NET 7.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 14, 2023
An update for python3.11 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 14, 2023
An update for nodejs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 14, 2023
An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions.
June 14, 2023
An update for .NET 7.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 14, 2023
An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.
June 14, 2023