February 23, 2023
That ticking noise is your end users’ laptops
Writing like a boss with ChatGPT and how to get better at spotting phishing scams
It’s never been easier to write a convincing message that can trick you into handing over your money or personal data The post Writing like a boss with ChatGPT and how to get better at spotting phishing scams appeared first on WeLiveSecurity
February 23, 2023
Fake ChatGPT apps spread Windows and Android malware
February 23, 2023
Security by design: Security principles and threat modeling
February 23, 2023
Several security issues were fixed in DCMTK.
February 23, 2023
Multiple security vulnerabilities have been discovered in Asterisk, an Open Source Private Branch Exchange. Buffer overflows and other programming errors could be exploited for launching a denial of service attack or the execution of arbitrary code.
February 23, 2023
A new MariaDB minor maintenance release 10.3.38 has been released. It includes fix for a major performance/memory consumption issue (MDEV-29988). For further details, see the MariaDB 10.3 release notes:
February 23, 2023
Brief introduction CVE-2023-22490
February 23, 2023
Red Hat OpenShift Container Platform release 4.9.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9.
February 23, 2023
Red Hat OpenShift Container Platform release 4.9.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9.
February 23, 2023
NPM JavaScript packages abused to create scambait links in bulk
February 22, 2023
ESET SMB Digital Security Sentiment Report: The damaging effects of a breach
SMBs need to not only reduce their odds of being hit by an attack, but also implement processes that they can follow if their defenses are breached The post ESET SMB Digital Security Sentiment Report: The damaging effects of a breach appeared first on WeLiveSecurity
February 22, 2023
* Fix large memory allocation when uploading content. * Fix scrolling after a history navigation with PSON enabled. * Always update the active uri of WebKitFrame. * Fix several crashes and rendering issues. * Security fixes: CVE-2023-23529 —- * Improve GStreamer multimedia playback across the board with improved codec selection logic, better handling of latency, […]
February 22, 2023
Update to upstream 1.1.6
February 22, 2023
Update to 2.39.2 (CVE-2023-22490, CVE-2023-23946) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.2/Documentation/RelNotes/2.30.8.txt) and the security advisories ([CVE-2023-22490](https://github.com/git/git/security/advisories/GHSA-
February 22, 2023
Rebase to upstream version 3.0.8 Resolves: CVE-2022-4203 Resolves: CVE-2022-4304 Resolves: CVE-2022-4450 Resolves: CVE-2023-0215 Resolves: CVE-2023-0216 Resolves: CVE-2023-0217 Resolves: CVE-2023-0286 Resolves: CVE-2023-0401
February 22, 2023
CVE-2023-0494: potential use-after-free in DeepCopyPointerClasses
February 22, 2023
xwayland 22.1.8 – Security fix for CVE-2023-0494
February 22, 2023
Global threats fuel cyber defence training
February 22, 2023
Coinbase breached by social engineers, employee data stolen
February 21, 2023
Will ChatGPT start writing killer malware?
AI-pocalypse soon? As stunning as ChatGPT’s output can be, should we also expect the chatbot to spit out sophisticated malware? The post Will ChatGPT start writing killer malware? appeared first on WeLiveSecurity
February 21, 2023
An update for tar is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 21, 2023
An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. An update for redhat-release-virtualization-host,
February 21, 2023
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 21, 2023
An update for the php:8.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 21, 2023
An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 21, 2023
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 21, 2023
Accidental WhatsApp account takeovers? It’s a thing
February 21, 2023
Locking down the remote printer
February 21, 2023
Twitter tells users: Pay up if you want to keep using insecure 2FA
February 20, 2023
An update for firefox is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 20, 2023
An update for firefox is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 20, 2023
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 20, 2023
An update for firefox is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
February 20, 2023
An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.
February 20, 2023
An update for firefox is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 20, 2023
Private Internet Access: The Best VPN for Linux
February 20, 2023
What Mary, Queen of Scots, can teach today’s cybersec royalty
February 20, 2023
GoDaddy admits: Crooks hit us with malware, poisoned customer websites
February 20, 2023
security update
February 19, 2023
security update
February 19, 2023
Online dating scams are on the RiseAccording to the FBI, Americans lost $1 billion in 2021 due to online dating scams; 2022 numbers are expected to be higher. Romance scammers are masters of disguise. They lead people on with talk of love and then attempt to trick them into giving money or personal data. As […]
February 19, 2023
Update to 102.8.0 ; https://www.mozilla.org/en- US/security/advisories/mfsa2023-07/ ; https://www.thunderbird.net/en- US/thunderbird/102.8.0/releasenotes/
February 19, 2023
– fix HTTP multi-header compression denial of service (CVE-2023-23916) – share HSTS between handles (CVE-2023-23915 CVE-2023-23914)
February 19, 2023
ClamAV 0.103.8 is a critical patch release with the following fixes: * CVE-2023-20032 : Fixed a possible remote code execution vulnerability in the HFS+ file parser. The issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. Thank you to Simon Scannell for reporting this issue. *
February 19, 2023
It was discovered that in c-ares, an asynchronous name resolver library, the config_sortlist function is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow and thus may cause a denial of service.
February 18, 2023
security update
February 18, 2023
security update
February 18, 2023
security update
February 18, 2023
An update that fixes 5 vulnerabilities is now available.
February 18, 2023
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the stable distribution (bullseye), these problems have been fixed in
February 18, 2023
Search ads abused to spread malware – Week in security with Tony Anscombe
Threat actors used search engine ads to impersonate makers of popular software and direct internet users to malicious websites The post Search ads abused to spread malware – Week in security with Tony Anscombe appeared first on WeLiveSecurity
February 18, 2023
New kernel packages are available for Slackware 15.0 to fix security issues.
February 18, 2023
2169641 – Syntax highlight for sh files broken —- The newest upstream commit Security fixes for CVE-2022-47024, CVE-2023-0433
February 18, 2023
* Fix large memory allocation when uploading content. * Fix scrolling after a history navigation with PSON enabled. * Always update the active uri of WebKitFrame. * Fix several crashes and rendering issues. * Security fixes: CVE-2023-23529
February 18, 2023
Christian Holler discovered that incorrect handling of PKCS 12 Safe Bag attributes in nss, the Mozilla Network Security Service library, may result in execution of arbitrary code if a specially crafted PKCS 12 certificate bundle is processed.
February 17, 2023
Intruder alert: FBI tackles ‘isolated’ IT security breach
February 17, 2023
security update
February 17, 2023
**phpMyAdmin 5.2.1** This is a bugfix release that also contains a security fix for an XSS vulnerability in the drag-and-drop upload functionality (**PMASA-2023-01**). Changelog: – issue #17522 Fix case where the routes cache file is invalid – issue #17506 Fix error when configuring 2FA without XMLWriter or Imagick – issue Fix blank page when some […]
February 17, 2023
Security amidst a global frost
No longer relegated to a side-show, tech is embedded into virtually every new piece of gear entering the battlefield The post Security amidst a global frost appeared first on WeLiveSecurity
February 17, 2023
These aren’t the apps you’re looking for: fake installers targeting Southeast and East Asia
ESET researchers have identified a campaign using trojanized installers to deliver the FatalRAT malware, distributed via malicious websites linked in ads that appear in Google search results The post These aren’t the apps you’re looking for: fake installers targeting Southeast and East Asia appeared first on WeLiveSecurity
February 17, 2023
EU lawmakers argue against signing US data pact
February 17, 2023
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2023-23529
February 17, 2023
The container suse/sle15 was updated. The following patches have been included in this update:
February 17, 2023
The container bci/rust was updated. The following patches have been included in this update:
February 17, 2023
The container bci/rust was updated. The following patches have been included in this update:
February 17, 2023
The container bci/ruby was updated. The following patches have been included in this update:
February 17, 2023
The container bci/ruby was updated. The following patches have been included in this update:
February 17, 2023
Norway finds a way to recover crypto North Korea pinched in Axie heist
February 17, 2023
VMware, Windows 11 shafted by Windows Server 2022
February 16, 2023
More victims of fake crypto investor scam speak to The Register
February 16, 2023
S3 Ep122: Stop calling every breach “sophisticated”! [Audio + Text]
February 16, 2023
10 signs that scammers have you in their sights
Don’t be their next victim – here’s a handy round-up of some the most common signs that should set your alarm bells ringing The post 10 signs that scammers have you in their sights appeared first on WeLiveSecurity
February 16, 2023
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or spoofing.
February 16, 2023
The container bci/python was updated. The following patches have been included in this update:
February 16, 2023
The container suse/pcp was updated. The following patches have been included in this update:
February 16, 2023
The container bci/openjdk-devel was updated. The following patches have been included in this update:
February 16, 2023
The container bci/openjdk-devel was updated. The following patches have been included in this update:
February 16, 2023
The container bci/nodejs was updated. The following patches have been included in this update:
February 16, 2023
ESXiArgs ransomware fights off Team America’s data recovery script
February 16, 2023
security update
February 15, 2023
security update
February 15, 2023