February 11, 2023
Ransomware crooks steal 3m+ patients’ medical records, personal info
Reddit admits it was hacked and data stolen, says “Don’t panic”
February 10, 2023
Alexa, who else is listening?
Your smart speaker is designed to listen, but could it be eavesdropping too? The post Alexa, who else is listening? appeared first on WeLiveSecurity
February 10, 2023
Dallas Central Appraisal District paid $170,000 to ransomware attackers
February 10, 2023
Securing open source development: A supply chain perspective
February 10, 2023
3 reasons not to repatriate cloud-based apps and data sets
February 10, 2023
US teases more China tech sanctions, this time to deflate balloon-makers
February 10, 2023
This update fixes multiple file format validation vulnerabilities that could result in memory access violations such as buffer overflows and floating point exceptions. It also fixes a regression in hcom parsing introduced when fixing CVE-2017-11358.
February 10, 2023
Australian government gives made-in-China CCTV cams the boot
February 10, 2023
Romance scammers’ favorite lies cost victims $1.3B last year
February 10, 2023
Reddit reveals security incident that looks more SNAFU than TIFU
February 10, 2023
Add upstream fix for CVE-2022-47021
February 10, 2023
Add upstream fix for CVE-2022-47021
February 10, 2023
Several security issues were fixed in the Linux kernel.
February 9, 2023
Several security issues were fixed in the Linux kernel.
February 9, 2023
Several security issues were fixed in the Linux kernel.
February 9, 2023
security update
February 9, 2023
security update
February 9, 2023
security update
February 9, 2023
ESET Threat Report T3 2022
A view of the T3 2022 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts The post ESET Threat Report T3 2022 appeared first on WeLiveSecurity
February 9, 2023
Bungling Optus scammer was no criminal mastermind
February 9, 2023
The container suse/sle15 was updated. The following patches have been included in this update:
February 9, 2023
The container bci/rust was updated. The following patches have been included in this update:
February 9, 2023
The container bci/rust was updated. The following patches have been included in this update:
February 9, 2023
The container bci/ruby was updated. The following patches have been included in this update:
February 9, 2023
The container suse/rmt-server was updated. The following patches have been included in this update:
February 9, 2023
The container suse/rmt-nginx was updated. The following patches have been included in this update:
February 9, 2023
Uncle Sam wants to strip the IoS out of IoT with light crypto
February 9, 2023
security update
February 8, 2023
security update
February 8, 2023
security update
February 8, 2023
Into the void: Your tech and security in digital darkness
No internet, perfect security? Two ESET researchers perform a thought experiment where they consider the implications of being plunged into digital darkness. The post Into the void: Your tech and security in digital darkness appeared first on WeLiveSecurity
February 8, 2023
Scammers steal $4 million in crypto during face-to-face meeting
February 8, 2023
Helmut Grohne discovered a flaw in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. The backports of fixes for CVE-2022-3437 accidentally inverted important memory comparisons in the arcfour-hmac-md5 and rc4-hmac integrity check
February 8, 2023
This release fixes various issues in shim bootloader and updates it to a supported version. Older versions of the shim may eventually be blocked by Secure Boot, so it is strongly advised for Secure Boot enabled systems to upgrade to this newer version to keep the system bootable.
February 8, 2023
I discovered a flaw in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. The backports of fixes for CVE-2022-3437 accidentally inverted important memory comparisons in the arcfour-hmac-md5 and rc4-hmac integrity check handlers for gssapi,
February 8, 2023
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
February 8, 2023
The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:
February 8, 2023
Suspect in Finnish psychotherapy center blackmail hack arrested
February 8, 2023
An update that fixes two vulnerabilities is now available.
February 8, 2023
OpenSSL fixes High Severity data-stealing bug – patch now!
February 8, 2023
Online safety laws: What’s in store for children’s digital playgrounds?
As children’s safety and privacy online becomes a matter of increasing urgency, lawmakers around the world push ahead on new regulations in the digital realm The post Online safety laws: What’s in store for children’s digital playgrounds? appeared first on WeLiveSecurity
February 7, 2023
History of Malware on Linux and What’s Being Done to Stop It
February 7, 2023
Red Hat OpenShift Container Platform release 4.11.26 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 7, 2023
The container bci/python was updated. The following patches have been included in this update:
February 7, 2023
The container suse/sle15 was updated. The following patches have been included in this update:
February 7, 2023
Eurocops shut down Exclu encrypted messaging app, arrest dozens
February 7, 2023
Jan-Niklas Sohn, working with Trend Micro Zero Day Initiative, discovered a vulnerability in the X.Org X server. A potential use after free mighty result in local privilege escalation if
February 7, 2023
It was discovered that there were a number of issues in graphite-web, a tool provide realtime graphing of system statistics etc. A series of cross-site scripting (XSS) vulnerabilties existed that
February 7, 2023
NULL pointer dereferences in op_get_data() and op_open1() in opusfile.c (CVE-2022-47021) References: – https://bugs.mageia.org/show_bug.cgi?id=31505
February 7, 2023
Embarrassment as US cyber ambassador’s Twitter account is hacked
February 6, 2023
Here’s a list of proxy IPs to help block KillNet’s DDoS bots
February 6, 2023
security update
February 6, 2023
Ikeda Soji reported that libhtml-stripscripts-perl, a Perl module for removing scripts from HTML, is prone to a regular expression denial of service, due to catastrophic backtracking for HTML content with specially crafted style attributes.
February 6, 2023
Tracers in the Dark: The Global Hunt for the Crime Lords of Crypto
February 6, 2023
Finnish psychotherapy extortion suspect arrested in France
February 6, 2023
Keeping unstructured data safe and sound
February 6, 2023
The tech leader’s guide to 2023
February 6, 2023
EditorConfig Core C could be made to crash or run programs if it received specially crafted input.
February 6, 2023
Trust, not tech, is holding back a safer internet
February 6, 2023
School laptop auction devolves into extortion allegation
February 6, 2023
Several security issues were fixed in Thunderbird.
February 6, 2023
USN-5825-1 caused some minor regressions in PAM.
February 6, 2023
USN-5816-1 caused some minor regressions in Firefox.
February 6, 2023
Security fix for CVE-2022-4510
February 5, 2023
# New in release [OpenJDK 8u362](https://bit.ly/openjdk8u362) (2023-01-17) ## CVEs Fixed – CVE-2023-21830 – CVE-2023-21843 ## Security Fixes – JDK-8285021: Improve CORBA communication – JDK-8286496: Improve Thread labels – JDK-8288516: Enhance font creation – JDK-8289350: Better media supports – JDK-8293554: Enhanced DH Key Exchanges – JDK-8293598: Enhance InetAddress
February 5, 2023
# New in release [OpenJDK 11.0.18](https://bit.ly/openjdk11018) (2023-01-17) ## CVEs Fixed – CVE-2023-21835 – CVE-2023-21843 ## Security Fixes – JDK-8286070: Improve UTF8 representation – JDK-8286496: Improve Thread labels – JDK-8287411: Enhance DTLS performance – JDK-8288516: Enhance font creation – JDK-8289350: Better media supports – JDK-8293554: Enhanced DH Key Exchanges
February 5, 2023
# New in release [OpenJDK 17.0.6](https://bit.ly/openjdk1706) (2023-01-17) ## CVEs Fixed – CVE-2023-21835 – CVE-2023-21843 ## Security Fixes – JDK-8286070: Improve UTF8 representation – JDK-8286496: Improve Thread labels – JDK-8287411: Enhance DTLS performance – JDK-8288516: Enhance font creation – JDK-8289350: Better media supports – JDK-8293554: Enhanced DH Key Exchanges
February 5, 2023
# New in release OpenJDK 19.0.2 (2023-01-17) ## CVEs Fixed * CVE-2023-21835 * CVE-2023-21843 ## Security Fixes – JDK-8286070: Improve UTF8 representation – JDK-8286496: Improve Thread labels – JDK-8287411: Enhance DTLS performance – JDK-8288516: Enhance font creation – JDK-8293554: Enhanced DH Key Exchanges – JDK-8293598: Enhance InetAddress address handling – JDK-8293717: Objective
February 5, 2023
Rebase to sudo 1.9.12p2 – security fix for CVE-2023-22809
February 5, 2023
Key takeaways from ESET’s new APT Activity Report – Week in security with Tony Anscombe
As our latest APT Activity Report makes abundantly clear, the threat of cyberespionage and stealthy attacks remains very real The post Key takeaways from ESET’s new APT Activity Report – Week in security with Tony Anscombe appeared first on WeLiveSecurity
February 4, 2023
Red Hat OpenShift sandboxed containers: Peer-pods solution overview
February 4, 2023
Red Hat OpenShift sandboxed containers: Peer-pods hands-on
February 4, 2023
CSAF VEX documents now generally available
February 4, 2023
An update that fixes one vulnerability is now available.
February 4, 2023
Iran crew stole Charlie Hebdo database, says Microsoft
February 4, 2023
The 6.1.9 stable kernel update contains a number of important fixes across the tree.
February 4, 2023
Update to version 1.23.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.23.0 Additionally, this update was built with a version of golang that addresses CVE-2022-41717, and it fixes the installation of icon files.
February 4, 2023
The 6.1.9 stable kernel update contains a number of important fixes across the tree.
February 4, 2023
Update to version 1.23.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.23.0 Additionally, this update was built with a version of golang that addresses CVE-2022-41717, and it fixes the installation of icon files.
February 4, 2023
HeadCrab bots pinch 1,000+ Redis servers to mine coins
February 4, 2023
Fast-evolving Prilex POS malware can block contactless payments
February 3, 2023
Guy accused of wrecking crypto exchange now hauled into court
February 3, 2023
Several security issues were fixed in LibTIFF.
February 3, 2023
Several security issues were fixed in Long Range ZIP.
February 3, 2023
Several security issues were fixed in Apache HTTP Server.
February 3, 2023