security update
August 18, 2022
Google, Apple squash exploitable browser bugs
August 17, 2022
security update
August 17, 2022
security update
August 17, 2022
security update
August 17, 2022
security update
August 17, 2022
The following vulnerabilities have been discovered in the WPE WebKit web engine: CVE-2022-32792
August 17, 2022
How to stop the evil lurking in the shadows
August 17, 2022
TikTok wants your trust around US midterm elections data
August 17, 2022
APT Lazarus Targets Engineers with macOS Malware
August 17, 2022
USN-5526-1 introduced a regression in PyJWT.
August 17, 2022
Kubescape boosts Kubernetes scanning capabilities
August 17, 2022
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-32792
August 17, 2022
The container suse/sles12sp4 was updated. The following patches have been included in this update:
August 17, 2022
Update to yara-4.2.3 —- Update to 4.2.0 —- Update to 4.2.2
August 16, 2022
Update to yara-4.2.3 —- Update to 4.2.0 —- Update to 4.2.2
August 16, 2022
security update
August 16, 2022
Do you know what’s happening on your users’ devices?
August 16, 2022
U.K. Water Supplier Hit with Clop Ransomware Attack
August 16, 2022
Microsoft’s macOS Tamper Protection hits general availability
August 16, 2022
DEF CON – “don’t worry, the elections are safe” edition
Don’t worry, elections are safe. Our Security Researcher Cameron Camp provide us highlights from the DEF CON 30 conference. The post DEF CON – “don’t worry, the elections are safe” edition appeared first on WeLiveSecurity
August 16, 2022
Xiaomi Phone Bug Allowed Payment Forgery
August 16, 2022
An update that solves one vulnerability, contains one feature and has 7 fixes is now available.
August 16, 2022
An update that fixes 22 vulnerabilities is now available.
August 16, 2022
An update that contains security fixes can now be installed.
August 16, 2022
An update that fixes four vulnerabilities is now available.
August 16, 2022
An update that fixes one vulnerability is now available.
August 16, 2022
An update that fixes one vulnerability is now available.
August 16, 2022
How a spoofed email passed the SPF check and landed in my inbox
The Sender Policy Framework can’t help prevent spam and phishing if you allow billions of IP addresses to send as your domain The post How a spoofed email passed the SPF check and landed in my inbox appeared first on WeLiveSecurity
August 16, 2022
Oh Deere: Farm hardware jailbroken to run Doom
August 16, 2022
Zoom for Mac patches get-root bug – update now!
August 15, 2022
Black Hat and DEF CON Roundup
August 15, 2022
Open Source OSINT Tools and Techniques
August 15, 2022
An update that fixes three vulnerabilities is now available.
August 15, 2022
Black Hat USA 2022: Burnout, a significant issue
The digital skills gap, especially in cybersecurity, is not a new phenomenon. This problematic is now exacerbate by the prevalence of burnout, which was presented at Black Hat USA 2022 The post Black Hat USA 2022: Burnout, a significant issue appeared first on WeLiveSecurity
August 15, 2022
Black Hat – Windows isn’t the only mass casualty platform anymore
Windows used to be the big talking point when it came to exploits resulting in mass casualties. Nowadays, talks turned to other massive attack platforms like #cloud and cars The post Black Hat – Windows isn’t the only mass casualty platform anymore appeared first on WeLiveSecurity
August 15, 2022
Several security issues were fixed in WebKitGTK.
August 15, 2022
An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
August 15, 2022
An update for collectd-libpod-stats is now available for Red Hat OpenStack Platform 16.2 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 15, 2022
An update for collectd-libpod-stats is now available for Red Hat OpenStack Platform 16.1 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 15, 2022
An update for .NET 6.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
August 15, 2022
Multiple vulnerabilities have been discovered in libarchive, the worst of which could result in arbitrary code execution.
August 14, 2022
Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape).
August 14, 2022
Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.
August 14, 2022
Multiple vulnerabilities have been discovered in the GNU C Library, the worst of which could result in denial of service.
August 14, 2022
Multiple vulnerabilities have been discovered in Xen, the worst of which could result in remote code execution (guest sandbox escape).
August 14, 2022
The 5.18.17 stable kernel update contains a number of important fixes across the tree.
August 13, 2022
security update
August 13, 2022
The potential consequences of data breach, and romance scams – Week in security with Tony Anscombe
The NHS was victim of a potential cyberattack, which raises the question of the impact of those data breach for the public. The post The potential consequences of data breach, and romance scams – Week in security with Tony Anscombe appeared first on WeLiveSecurity
August 13, 2022
Black Hat 2022‑ Cyberdefense in a global threats era
Our Security evangelist’s take on this first day of Black Hat 2022, where cyberdefense was on every mind. The post Black Hat 2022‑ Cyberdefense in a global threats era appeared first on WeLiveSecurity
August 13, 2022
Safety first: how to tweak the settings on your dating apps
Tinder, Bumble or Grindr – popular dating apps depend heavily on your location, personal data, and loose privacy settings. Find out how to put yourself out there safely by following our suggested settings tweaks. The post Safety first: how to tweak the settings on your dating apps appeared first on WeLiveSecurity
August 13, 2022
Ukraine’s cyber chief comes to Black Hat in surprise visit
August 13, 2022
The container bci/bci-micro was updated. The following patches have been included in this update:
August 13, 2022
A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit (CVE-2022-34526) References: – https://bugs.mageia.org/show_bug.cgi?id=30716
August 13, 2022
A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service. (CVE-2022-32189) References:
August 13, 2022
A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. (CVE-2022-27337) References:
August 13, 2022
An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected. (CVE-2022-34265)
August 13, 2022
Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files. (CVE-2022-29970) References: – https://bugs.mageia.org/show_bug.cgi?id=30542
August 13, 2022
Let there be ambient light sensing, without fear of data theft
August 13, 2022
Palo Alto bug used for DDoS attacks and there’s no fix yet
August 12, 2022
Starlink satellite dish cracked on stage at Black Hat
August 12, 2022
security update
August 12, 2022
US reveals ‘Target’ pic of Conti man with $10m reward offer
August 12, 2022
Microsoft trumps Google for 2021-22 bug bounty payouts
August 12, 2022
An eighties classic – Zero Trust
A deep-dive in Zero-trust, to help you navigate in a zero-trust world and further secure your organization. The post An eighties classic – Zero Trust appeared first on WeLiveSecurity
August 12, 2022
Intel ups protection against physical chip attacks in Alder Lake
August 12, 2022
An update that fixes one vulnerability is now available.
August 12, 2022
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in HTTP request smuggling, cache poisoning or information disclosure.
August 12, 2022
The container bci/rust was updated. The following patches have been included in this update:
August 12, 2022
The container bci/nodejs was updated. The following patches have been included in this update:
August 12, 2022
The container bci/bci-micro was updated. The following patches have been included in this update:
August 12, 2022
The container suse/sle15 was updated. The following patches have been included in this update:
August 12, 2022
FAANGs failing on keeping user data safe from bug hunters
August 12, 2022
Security needs to learn from the aviation biz to avoid crashing
August 11, 2022
AWS and Splunk partner for faster cyberattack response
August 11, 2022
Ex-CIA security boss predicts coming crackdown on spyware
August 11, 2022