December 12, 2022
IT security teams, business execs still not on same page
UK arrests five for selling ‘dodgy’ point of sale software
December 12, 2022
Multiple security vulnerabilities have been found in OpenEXR, command-line tools and a library for the OpenEXR image format. Buffer overflows or out-of-bound reads could lead to a denial of service (application crash) if a malformed image file is processed.
December 12, 2022
security update
December 11, 2022
An update that fixes one vulnerability is now available.
December 11, 2022
Security fix for CVE-2022-3500 Proper exception handling in tornado_requests
December 11, 2022
Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing
December 11, 2022
Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing
December 11, 2022
Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing
December 11, 2022
An update that fixes one vulnerability is now available.
December 10, 2022
security update
December 10, 2022
Diamond industry under attack – Week in security with Tony Anscombe
ESET researchers uncover a new wiper and its execution tool, both attributed to the Iran-aligned Agrius APT group The post Diamond industry under attack – Week in security with Tony Anscombe appeared first on WeLiveSecurity
December 10, 2022
Xenomorph: What to know about this Android banking trojan
Xenomorph pilfers victims’ login credentials for banking, payment, social media, cryptocurrency and other apps with valuable data The post Xenomorph: What to know about this Android banking trojan appeared first on WeLiveSecurity
December 10, 2022
Zhang Boyang reported that the grub2 update released as DLA 3190-1 did not correctly apply fixes for CVE-2022-2601 and CVE-2022-3775. Updated packages are now available to address this issue. For reference the original advisory text follows.
December 10, 2022
Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application (the Sequoia PGP plugin for Thunderbird).
December 10, 2022
Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application (the Sequoia PGP plugin for Thunderbird).
December 10, 2022
Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application (the Sequoia PGP plugin for Thunderbird).
December 10, 2022
Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application (the Sequoia PGP plugin for Thunderbird).
December 10, 2022
updates to screenshooter,settings, and places-plugin
December 10, 2022
Legit Android apps poisoned by sticky ‘Zombinder’ malware
December 9, 2022
Italy, Japan, UK to jointly launch sixth-gen fighter jet by 2035
December 9, 2022
S3 Ep112: Data breaches can haunt you more than once! [Audio + Text]
December 9, 2022
The container bci/bci-busybox was updated. The following patches have been included in this update:
December 9, 2022
North Korea using freelance techies to fund missiles and nukes
December 9, 2022
Fix a possible double free in `woffEncode()`. – Update License to SPDX – improved summary and description – Add hand-written man pages – Install HTML format description as documentation
December 9, 2022
Openshift Logging Bug Fix Release (5.3.14) Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 8, 2022
REvil-hit Medibank to pull plug on IT, shore up defenses
December 8, 2022
An update that fixes one vulnerability is now available.
December 8, 2022
An update that fixes four vulnerabilities is now available.
December 8, 2022
An update that fixes one vulnerability is now available.
December 8, 2022
Fantasy – a new Agrius wiper deployed through a supply‑chain attack
ESET researchers analyzed a supply-chain attack abusing an Israeli software developer to deploy Fantasy, Agrius’s new wiper, with victims including the diamond industry The post Fantasy – a new Agrius wiper deployed through a supply‑chain attack appeared first on WeLiveSecurity
December 8, 2022
Metaparasites: The cybercriminals who rip each other off
December 8, 2022
Several security issues were fixed in Python.
December 8, 2022
Logging Subsystem 5.5.5 – Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 8, 2022
An update for python-oslo-utils is now available for Red Hat OpenStack Platform 16.1.9 (Train) for Red Hat Enterprise Linux (RHEL) 8.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 8, 2022
An update for python-ujson is now available for Red Hat OpenStack Platform 16.1.9 (Train) for Red Hat Enterprise Linux (RHEL) 8.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 8, 2022
An update for erlang is now available for Red Hat OpenStack Platform 16.2.4 (Train) on Red Hat Enterprise Linux (RHEL) 8.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 8, 2022
An update for python-django20 is now available for Red Hat OpenStack Platform 16.1.9 (Train) for Red Hat Enterprise Linux (RHEL) 8.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 8, 2022
States label TikTok ‘a malicious and menacing threat’
December 8, 2022
security update
December 7, 2022
security update
December 7, 2022
San Francisco terminates explosive killer cop bots
December 7, 2022
Complexity is the enemy of cloud security
December 7, 2022
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 7, 2022
Red Hat AMQ Broker 7.10.2 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 7, 2022
Several security issues were fixed in NumPy.
December 7, 2022
Taiwan bans state-owned devices from running Chinese platform TikTok
December 7, 2022
The container suse/sles12sp5 was updated. The following patches have been included in this update:
December 7, 2022
The container suse/sles12sp4 was updated. The following patches have been included in this update:
December 7, 2022
The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:
December 7, 2022
Amnesty International Canada claims attack by China-backed forces
December 7, 2022
South Pacific vacations may be wrecked by ransomware
December 7, 2022
Rackspace confirms ransomware attack behind days-long email meltdown
December 6, 2022
SIM swapper sent to prison for 2FA cryptocurrency heist of over $20m
December 6, 2022
Tractors vs. threat actors: How to hack a farm
Forget pests for a minute. Modern farms also face another – and more insidious – breed of threat. The post Tractors vs. threat actors: How to hack a farm appeared first on WeLiveSecurity
December 6, 2022
Want to detect Cobalt Strike on the network? Look to process memory
December 6, 2022
KmsdBot botnet is down after operator sends typo in command
December 6, 2022
An update for grub2 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.
December 6, 2022
An update for usbguard is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 6, 2022
An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 6, 2022
An update for dbus is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 6, 2022
An update for pki-core is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
December 6, 2022
Complexity is the enemy of security
December 6, 2022
How to secure application identities at developmental speed
December 6, 2022
A distrusted certificate authority has been removed from ca-certificates.
December 6, 2022
TSA to expand facial recognition across America
December 6, 2022
Four suspects cuffed, face extradition over tax refund scam plot
December 6, 2022
Gunfire at electrical grid kills power for 45,000 in North Carolina
December 5, 2022
Google warns stolen Android keys used to sign info-stealing malware
December 5, 2022
Russian courts attacked by CryWiper malware that poses as ransomware
December 5, 2022
security update
December 5, 2022
security update
December 5, 2022
security update
December 5, 2022
Hacking cars remotely with just their VIN
December 5, 2022
ScarCruft updates its toolset – Week in security with Tony Anscombe
Deployed against carefully selected targets, the new backdoor combs through the drives of compromised systems for files of interest before exfiltrating them to Google Drive The post ScarCruft updates its toolset – Week in security with Tony Anscombe appeared first on WeLiveSecurity
December 5, 2022
A distrusted certificate authority has been removed from ca-certificates.
December 5, 2022
Several security issues were fixed in libxml2.
December 5, 2022
Securing Application Identities in 2023
December 5, 2022
Several security issues were fixed in libxml2.
December 5, 2022
Remuneration coming for TrustCor customers impacted by CA revocation
December 5, 2022
The 6.0.11 stable kernel update contains a number of important fixes across the tree.
December 5, 2022
The 6.0.11 stable kernel update contains a number of important fixes across the tree.
December 5, 2022
The 6.0.11 stable kernel update contains a number of important fixes across the tree.
December 5, 2022