Multiple vulnerabilities have been discovered in virglrenderer, the worst of which could result in remote code execution.
October 16, 2022
Multiple vulnerabilities have been discovered in Wireshark, the worst of which could result in denial of service.
October 16, 2022
Several security issues were fixed in the Linux kernel.
October 15, 2022
ESET research into POLONIUM’s arsenal – Week in security with Tony Anscombe
More than a dozen organizations operating in various verticals were attacked by the threat actor The post ESET research into POLONIUM’s arsenal – Week in security with Tony Anscombe appeared first on WeLiveSecurity
October 15, 2022
Infosec still (mostly) a boys club
October 15, 2022
Multiple security issues were found in Django, a Python web development framework, which could result in denial of service, SQL injection or cross-site scripting.
October 15, 2022
‘Baby Al Capone’ to pay $22m to SIM-swap crypto-heist victim
October 15, 2022
The package linux-zen before version 6.0.1.zen2-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and denial of service.
October 14, 2022
The package linux-lts before version 5.15.73-3 is vulnerable to multiple issues including arbitrary code execution, information disclosure and denial of service.
October 14, 2022
The package linux before version 6.0.1.arch2-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and denial of service.
October 14, 2022
The package linux-hardened before version 5.19.15.hardened2-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and denial of service.
October 14, 2022
security update
October 14, 2022
Life in pursuit of answers: In the words of Ada Yonath
From a little girl financially helping her family in Jerusalem to a Nobel Prize laureate. That is the exceptional life of Ada Yonath in a nutshell. The post Life in pursuit of answers: In the words of Ada Yonath appeared first on WeLiveSecurity
October 14, 2022
Several security issues were fixed in gThumb.
October 14, 2022
An update that solves 8 vulnerabilities and has 12 fixes is now available.
October 14, 2022
An update that solves 8 vulnerabilities and has 11 fixes is now available.
October 14, 2022
An update that solves 5 vulnerabilities and has two fixes is now available.
October 14, 2022
An update that fixes one vulnerability is now available.
October 14, 2022
An update that solves 9 vulnerabilities, contains 12 features and has 38 fixes is now available.
October 14, 2022
Just how critical is data sovereignty?
October 14, 2022
security update
October 13, 2022
How scammers target Zelle users – and how you can stay safe
Fraudsters use various tactics to separate people from their hard-earned cash on Zelle. Here’s how to keep your money safe while using the popular P2P payment service. The post How scammers target Zelle users – and how you can stay safe appeared first on WeLiveSecurity
October 13, 2022
Insurer Medibank hit by targeted cyberattack
October 13, 2022
Several security issues were fixed in unzip.
October 13, 2022
XML Security Library could be made to crash if it opened a specially crafted file.
October 13, 2022
An update that fixes two vulnerabilities is now available.
October 13, 2022
An update is now available for the Red Hat build of Quarkus Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each
October 13, 2022
Get ready to defend your data against cyber warfare
October 13, 2022
An update that fixes one vulnerability is now available.
October 13, 2022
Red Hat OpenShift Container Platform release 4.8.51 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.8.
October 13, 2022
US election workers slammed with phishing, malware-stuffed emails
October 12, 2022
POLONIUM targets Israel with Creepy malware
ESET researchers analyzed previously undocumented custom backdoors and cyberespionage tools deployed in Israel by the POLONIUM APT group The post POLONIUM targets Israel with Creepy malware appeared first on WeLiveSecurity
October 12, 2022
Microsoft tries to Ignite interest in DevOps cloud security tweaks
October 12, 2022
Internet outages hit Ukraine following Russian missile strikes
October 12, 2022
It was discovered that insufficient validation of “vnd.libreoffice.command” URI schemes could result in the execution of arbitrary macro commands.
October 12, 2022
Patch your iPhone now against mystery Mail crash bug
October 12, 2022
Several security issues were fixed in AdvanceCOMP.
October 12, 2022
A command injection vulnerability was found in Rexical, a lexical scanner generator for the Ruby programming language. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user
October 12, 2022
Multiple vulnerabilities were discovered in Nokogiri, an HTML/XML/SAX/Reader parser for the Ruby programming language, leading to command injection, XML external entity injection (XXE), and denial-of-service (DoS).
October 12, 2022
Red Hat AMQ Broker 7.10.1 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 12, 2022
An update for expat is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 12, 2022
How Wi-Fi spy drones snooped on financial firm
October 12, 2022
“Stealing the crown jewels” – see me talk at UK Cyber Week
October 11, 2022
Steam account stolen? Here’s how to get it back
Has your Steam account been hacked? Here are the signs to look for and what you can do to get your account back. The post Steam account stolen? Here’s how to get it back appeared first on WeLiveSecurity
October 11, 2022
Move over Patch Tuesday – it’s Ada Lovelace Day!
October 11, 2022
China could use Digital Yuan to swerve Russia-style sanctions
October 11, 2022
An update that fixes one vulnerability is now available.
October 11, 2022
An update that fixes 6 vulnerabilities is now available.
October 11, 2022
An update that fixes one vulnerability is now available.
October 11, 2022
An update that fixes one vulnerability is now available.
October 11, 2022
The Most Important Things you Can do to Quickly Secure Ubuntu Linux
October 11, 2022
An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 11, 2022
An update is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 11, 2022
Cloud security is the new battle zone
October 11, 2022
Can IAM help save on cyber insurance?
October 11, 2022
Optus data breach prompts pincer movement of twin regulatory probes
October 11, 2022
Mystery iPhone update patches against iOS 16 mail crash-attack
October 11, 2022
Intel Alder Lake BIOS code leak may contain vital secrets
October 10, 2022
Red Hat backs CNCF project, spills TEE support over Kubernetes
October 10, 2022
Evgeny Vereshchagin discovered multiple vulnerabilities in D-Bus, a simple interprocess messaging system, which may result in denial of service by an authenticated user.
October 10, 2022
Several security vulnerabilities were discovered in WordPress, a popular content management framework. Server Side Request Forgery and cross-site scripting (XSS) attacks may facilitate the bypass of access controls or the injection of client-side scripts.
October 10, 2022
Singtel confirms digital burglary at Dialog subsidiary
October 10, 2022
Criminal multitool LilithBot arrives on malware-as-a-service scene
October 10, 2022
How do you protect your online systems? Cultivate an insider threat
October 10, 2022
A security issue was fixed in nginx’s lua module.
October 10, 2022
Mastercard moves to protect ‘risky and frisky’ crypto transactions
October 10, 2022
Security fix for CVE-2022-38784
October 9, 2022
There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the ‘err_msg’ of ‘sqlite3_exec’ is not releasing after use, while libxml2 emphasizes that the caller needs to release it. (CVE-2021-42523)
October 8, 2022
A syntactically invalid type signature with incorrectly nested parentheses and curly brackets would cause an assertion failure in debug builds. Similar messages could potentially result in a crash or incorrect message processing in a production build, although we are not aware of a practical example. (CVE-2022-42010)
October 8, 2022
In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup. (CVE-2022-41322)
October 8, 2022
libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup(). (CVE-2020-29260) References: – https://bugs.mageia.org/show_bug.cgi?id=30917
October 8, 2022
Core Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) Fixed bug GH-9361 (Segmentation fault on script exit #9379). Fixed bug GH-9407 (LSP error in eval’d code refers to wrong class for static type).
October 8, 2022
Non-Responsive Delegation Attack. (CVE-2022-3204) Improves performance when under load, by cutting promiscuous queries for nameserver discovery and limiting the number of times a delegation point can look in the cache for missing records.
October 8, 2022