Menu

Latest articles

security update

ChatGPT, will you be my Valentine?

Spoiler alert: it turned me down. But that’s far from the only thing I learned while playing around with the bot that the world has fallen in love with so badly. The post ChatGPT, will you be my Valentine? appeared first on WeLiveSecurity

Cybersecurity startup Oligo debuts with new application security tech
Gulp! Pepsi hack sees personal information stolen by data-stealing malware

Red Hat OpenShift Container Platform release 4.11.27 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update is now available for the Logging subsystem for Red Hat OpenShift 5.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Storage security toughen-up for compliance and cyberwar in 2023
Hyundai and Kia issue software upgrades to thwart killer TikTok car theft hack

Red Hat OpenShift Container Platform release 4.11.27 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Apple splats zero-day bug, other gremlins in macOS, iOS

New php packages are available for Slackware 15.0 and -current to fix security issues.

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.

Security fix for CVE-2022-38725

Russian crook made $90M exploiting stolen info on Tesla, Roku, Avnet, Snap, more
Microsoft delivers 75-count box of patches for Valentine’s Day
Microsoft Patch Tuesday: 36 RCE bugs, 3 zero-days, 75 CVEs
Record-breaking number of record-breaking DDoS attacks confirmed
Confident cybersecurity means fewer headaches for SMBs

Small and medium-sized businesses have good reason to be concerned about the loss of data and financial impacts The post Confident cybersecurity means fewer headaches for SMBs appeared first on WeLiveSecurity

Google lets a few Android devices into its Privacy Sandbox
EnterpriseDB adds Transparent Data Encryption to PostgreSQL
Apple fixes zero-day spyware implant bug – patch now!

An update for grub2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

Ransomware attackers steal over 3 million patients’ medical records

The container suse-sles-15-sp4-chost-byos-v20230210-hvm-ssd-x86_64 was updated. The following patches have been included in this update:

The container suse-sles-15-sp4-chost-byos-v20230210-x86_64-gen2 was updated. The following patches have been included in this update:

Romance scam targets security researcher, hilarity ensues
Pepsi Bottling Ventures says info-stealing malware swiped sensitive data

An update that fixes 10 vulnerabilities is now available.

Bryan Gonzalez discovered that the PNG support in Imagemagick could be tricked into embedding the content of an arbitrary file when converting an image file.

An updated version of Red Hat Update Infrastructure (RHUI) is now available. RHUI 4.3 fixes a security bug, introduces multiple new features, and upgrades underlying Pulp to a Long Term Support (LTS) version. 2. Relevant releases/architectures:

Serious Security: GnuTLS follows OpenSSL, fixes timing attack bug
Namecheap admits ‘unauthorized emails’ pwning its customers
LockBit’s Royal Mail ransom deadline flies by. No data released

Several security issues were fixed in Nova.

ZeroLock: How to Defend Against Ransomware on Linux
Learn the art of malicious compliance: doing exactly what you were asked, even when it’s wrong

The container sles-15-sp4-chost-byos-v20230210-arm64 was updated. The following patches have been included in this update:

Red Hat OpenShift Container Platform release 4.9.55 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

China’s spy balloon barrage earns six of its companies a spot on US entity list

Update to 110.0.5481.77. Fixes the following security issues: CVE-2023-0696 CVE-2023-0697 CVE-2023-0698 CVE-2023-0699 CVE-2023-0700 CVE-2023-0701 CVE-2023-0702 CVE-2023-0703 CVE-2023-0704 CVE-2023-0705 CVE-2023-25193

The newest upstream commit Security fixes for CVE-2023-0433, CVE-2022-47024

Fix a possible DOS involving the Qt SQL ODBC driver plugin.

The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:

The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:

xwayland 22.1.8 – Security fix for CVE-2023-0494

security update

Key findings from the latest ESET Threat Report – Week in security with Tony Anscombe

What is behind the drop in ransomware and what should still be done for containing the ransomware scourge? The post Key findings from the latest ESET Threat Report – Week in security with Tony Anscombe appeared first on WeLiveSecurity

The container suse/manager/4.3/proxy-tftpd was updated. The following patches have been included in this update:

The container suse/manager/4.3/proxy-ssh was updated. The following patches have been included in this update:

The container suse/manager/4.3/proxy-squid was updated. The following patches have been included in this update:

The container suse/manager/4.3/proxy-salt-broker was updated. The following patches have been included in this update:

The container suse/manager/4.3/proxy-httpd was updated. The following patches have been included in this update:

The container suse/manager/4.3/proxy-httpd was updated. The following patches have been included in this update:

Ransomware crooks steal 3m+ patients’ medical records, personal info
Reddit admits it was hacked and data stolen, says “Don’t panic”
Alexa, who else is listening?

Your smart speaker is designed to listen, but could it be eavesdropping too? The post Alexa, who else is listening? appeared first on WeLiveSecurity

Dallas Central Appraisal District paid $170,000 to ransomware attackers
Hard drugs actively sold on Twitter in plain sight. Twitter says it doesn’t breach its safety policies
Urgent OpenSSL Security Advisory: High-Severity Address Type Confusion Vuln Fixed
Securing open source development: A supply chain perspective
3 reasons not to repatriate cloud-based apps and data sets
US, UK slap sanctions on Russians linked to Conti, Ryuk, Trickbot malware
US teases more China tech sanctions, this time to deflate balloon-makers

This update fixes multiple file format validation vulnerabilities that could result in memory access violations such as buffer overflows and floating point exceptions. It also fixes a regression in hcom parsing introduced when fixing CVE-2017-11358.

Australian government gives made-in-China CCTV cams the boot
Romance scammers’ favorite lies cost victims $1.3B last year
Reddit reveals security incident that looks more SNAFU than TIFU

Add upstream fix for CVE-2022-47021

Add upstream fix for CVE-2022-47021

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

security update

security update

security update

S3 Ep121: Can you get hacked and then prosecuted for it? [Audio + Text]
ESET Threat Report T3 2022

A view of the T3 2022 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts The post ESET Threat Report T3 2022 appeared first on WeLiveSecurity

Bungling Optus scammer was no criminal mastermind
Smashing Security podcast #308: Jail after VPN fail, criminal messaging apps, and wolf-crying watches

The container suse/sle15 was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

The container bci/ruby was updated. The following patches have been included in this update:

The container suse/rmt-server was updated. The following patches have been included in this update:

The container suse/rmt-nginx was updated. The following patches have been included in this update:

Codebreakers decipher Mary, Queen of Scots’ secret letters 436 years after her execution
Uncle Sam wants to strip the IoS out of IoT with light crypto
Among the thousands of ESXiArgs ransomware victims? FBI and CISA to the rescue

security update

security update

security update

VMWare user? Worried about “ESXi ransomware”? Check your patches now!
Into the void: Your tech and security in digital darkness

No internet, perfect security? Two ESET researchers perform a thought experiment where they consider the implications of being plunged into digital darkness. The post Into the void: Your tech and security in digital darkness appeared first on WeLiveSecurity

Scammers steal $4 million in crypto during face-to-face meeting

Helmut Grohne discovered a flaw in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. The backports of fixes for CVE-2022-3437 accidentally inverted important memory comparisons in the arcfour-hmac-md5 and rc4-hmac integrity check

This release fixes various issues in shim bootloader and updates it to a supported version. Older versions of the shim may eventually be blocked by Secure Boot, so it is strongly advised for Secure Boot enabled systems to upgrade to this newer version to keep the system bootable.

I discovered a flaw in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. The backports of fixes for CVE-2022-3437 accidentally inverted important memory comparisons in the arcfour-hmac-md5 and rc4-hmac integrity check handlers for gssapi,

The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:

The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:

Suspect in Finnish psychotherapy center blackmail hack arrested