October 2, 2022
Steganography alert: Backdoor spyware stashed in Microsoft logo
BlackCat malware lashes out at US defense IT contractor
October 2, 2022
The container bci/python was updated. The following patches have been included in this update:
October 2, 2022
The container bci/nodejs was updated. The following patches have been included in this update:
October 2, 2022
The container bci/bci-init was updated. The following patches have been included in this update:
October 2, 2022
The container bci/golang was updated. The following patches have been included in this update:
October 2, 2022
The container bci/golang was updated. The following patches have been included in this update:
October 2, 2022
ESET Research into new attacks by Lazarus – Week in security with Tony Anscombe
The attack involved the first recorded abuse of a security vulnerability in a Dell driver that was patched in May 2021 The post ESET Research into new attacks by Lazarus – Week in security with Tony Anscombe appeared first on WeLiveSecurity
October 1, 2022
Amazon‑themed campaigns of Lazarus in the Netherlands and Belgium
ESET researchers have discovered Lazarus attacks against targets in the Netherlands and Belgium that use spearphishing emails connected to fake job offers The post Amazon‑themed campaigns of Lazarus in the Netherlands and Belgium appeared first on WeLiveSecurity
October 1, 2022
An update that fixes two vulnerabilities is now available.
October 1, 2022
The container suse/sles12sp4 was updated. The following patches have been included in this update:
October 1, 2022
Two issues were found in GDAL, a geospatial library, that could lead to denial of service via application crash or possibly the execution of arbitrary code if maliciously crafted data was parsed.
October 1, 2022
thenify is a Promisify a callback-based function using any-promise. Affected versions of this package are vulnerable to Arbitrary Code Execution. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval
October 1, 2022
Update to 102.3.1 * https://www.mozilla.org/en- US/security/advisories/mfsa2022-43/ * https://www.thunderbird.net/en- US/thunderbird/102.3.1/releasenotes/
September 30, 2022
security update
September 30, 2022
An issue has been found in tinyxml, a C++ XML parsing library. Crafted XML messages could lead to an infinite loop in TiXmlParsingData::Stamp(), which results in a denial of service.
September 30, 2022
Protecting teens from sextortion: What parents should know
Online predators increasingly trick or coerce youth into sharing explicit videos and photos of themselves before threatening to post the content online The post Protecting teens from sextortion: What parents should know appeared first on WeLiveSecurity
September 30, 2022
Enterprises embrace devsecops practices against supply chain attacks
September 30, 2022
Watchfinder warns customers that hackers stole their data
September 30, 2022
An issue has been found in libhttp-daemon-perl, a simple http server class. Due to insufficient Content-Length: handling in HTTP-header an attacker
September 30, 2022
Connecting to the RHEL web console, part 2: Running the Cockpit web server
September 30, 2022
An update that solves three vulnerabilities and has one errata is now available.
September 30, 2022
An update that fixes two vulnerabilities is now available.
September 30, 2022
An update that fixes one vulnerability is now available.
September 30, 2022
This update upgrades Thunderbird to version 102.3.0. * Mozilla: Leaking of sensitive information when composing a response to an HTML email with a META refresh tag (CVE-2022-3033) * Mozilla: Bypassing FeaturePolicy restrictions on transient pages (CVE-2022-40959) * Mozilla: Data-race when parsing non-UTF-8 URLs in threads (CVE-2022-40960) * Mozilla: Memory safety bugs fixed in Firefox 105 […]
September 30, 2022
This update upgrades Firefox to version 102.3.0 ESR. * Mozilla: Bypassing FeaturePolicy restrictions on transient pages (CVE-2022-40959) * Mozilla: Data-race when parsing non-UTF-8 URLs in threads (CVE-2022-40960) * Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3 (CVE-2022-40962) * Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure pref [More…]
September 30, 2022
Microsoft warns of North Korean crew posing as LinkedIn recruiters
September 30, 2022
Ex-eBay execs jailed for cyberstalking web critics
September 30, 2022
Pentagon is far too tight with its security bug bounties
September 29, 2022
security update
September 29, 2022
security update
September 29, 2022
IT admin admits sabotaging ex-employer’s network in bid for higher salary
September 29, 2022
S3 Ep102: Cutting through cybersecurity news hype [Audio + Transcript]
September 29, 2022
Covert malware targets VMware shops for hypervisor-level espionage
September 29, 2022
An update that fixes one vulnerability is now available.
September 29, 2022
An update that fixes three vulnerabilities is now available.
September 29, 2022
An update that fixes two vulnerabilities is now available.
September 29, 2022
An update that fixes one vulnerability is now available.
September 29, 2022
An update that fixes three vulnerabilities is now available.
September 29, 2022
An update that fixes three vulnerabilities is now available.
September 29, 2022
Red Hat Shares ― Edge computing: Security
September 29, 2022
Why developers hold the key to cloud security
September 29, 2022
Microsoft to kill off old access rules in Exchange Online
September 28, 2022
Matrix chat encryption sunk by five now-patched holes
September 28, 2022
Cryptojacking, DDoS attacks increase in container-based cloud systems
September 28, 2022
security update
September 28, 2022
security update
September 28, 2022
The web’s cruising at 13 million new and nefarious domain names a month
September 28, 2022
Want to sneak a RAT into Windows? Buy Quantum Builder on the dark web
September 28, 2022
Hacked Fast Company sends ‘obscene and racist’ alerts via Apple News
September 28, 2022
Reducing the risk of human error in cyber security
September 28, 2022
Optus breach – Aussie telco told it will have to pay to replace IDs
September 28, 2022
Several vulnerabilities were discovered in lighttpd, a fast webserver with minimal memory footprint. CVE-2022-37797
September 28, 2022
An update that fixes two vulnerabilities is now available.
September 28, 2022
It was discovered that the Commandline class in maven-shared-utils, a collection of various utility classes for the Maven build system, can emit double-quoted strings without proper escaping, allowing shell injection attacks.
September 28, 2022
An update that solves 20 vulnerabilities and has 8 fixes is now available.
September 28, 2022
Memory-related security fixes, BZ 2127755
September 28, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
September 28, 2022
Here’s how crooks will use deepfakes to scam your biz
September 28, 2022
A question of identity
September 28, 2022
Sophos fixes critical firewall hole exploited by miscreants
September 28, 2022
security update
September 28, 2022
security update
September 28, 2022
What happens with a hacked Instagram account – and how to recover it
Had your Instagram account stolen? Don’t panic – here’s how to get your account back and how to avoid getting hacked (again) The post What happens with a hacked Instagram account – and how to recover it appeared first on WeLiveSecurity
September 27, 2022
WhatsApp “zero-day exploit” news scare – what you need to know
September 27, 2022
Meta busts first Chinese campaign prodding US midterms
September 27, 2022
Microsoft boosts phishing protection in Windows 11 22H2
September 27, 2022
Microsoft bets on hardware/software duo for Win11 security
September 27, 2022
An update that fixes 6 vulnerabilities is now available.
September 27, 2022
An update that fixes one vulnerability is now available.
September 27, 2022
An update that fixes two vulnerabilities is now available.
September 27, 2022
An update that fixes two vulnerabilities is now available.
September 27, 2022
Official Guide on Rocky Linux & How to Install It
September 27, 2022
Several security issues were fixed in Ghostscript.
September 27, 2022
Cloud’s key role in the emerging hybrid workforce
September 27, 2022
An update that solves 11 vulnerabilities and has 21 fixes is now available.
September 27, 2022
Ukraine fears ‘massive’ Russian cyberattacks on power, infrastructure
September 27, 2022
SQL Server admins warned about Fargo ransomware
September 26, 2022
Beware Revolut frozen card scams sent via SMS text
September 26, 2022
How do you run rings around ransomware?
September 26, 2022
Several security issues were fixed in WebKitGTK.
September 26, 2022
Several security issues were fixed in Squid.
September 26, 2022
Several security issues were fixed in the Linux kernel.
September 26, 2022
Several security issues were fixed in the Linux kernel.
September 26, 2022
An update that solves one vulnerability and has two fixes is now available.
September 26, 2022
Expat could be made to crash or execute arbitrary code.
September 26, 2022