Menu

Latest articles

Russian invasion has dangerously destabilized cyber security norms
AWS and Splunk partner for faster cyberattack response
Ex-CIA security boss predicts coming crackdown on spyware
Sonatype spots another PyPI package behaving badly
Keeping the enemy at the gate
Don’t be surprised if your organization suffers multiple cyberattacks
Starlink Successfully Hacked Using $25 Modchip
New Hacker Forum Takes Pro-Ukraine Stance
Years after claiming DogWalk wasn’t a vulnerability, Microsoft confirms flaw is being exploited and issues patch
S3 Ep95: Slack leak, Github onslaught, and post-quantum crypto [Audio + Text]

The following updated rpms for Oracle Linux 7 have been uploaded to the Unb= reakable Linux Network:

Cisco Confirms Network Breach Via Hacked Employee Google Account
Implementing security benchmarks with Red Hat Ansible Automation Platform

An update that fixes 5 vulnerabilities is now available.

Making the cloud a safer place with SANS

Booth could be made to be stop working under certain circumstances.

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Cisco admits corporate network compromised by gang with links to Lapsus$
Podcast: Inside the Hackers’ Toolkit
Meta privacy red team lead: Does your business know its privacy adversaries?
Boffins rate npm and PyPI package security and it’s not good
Ex-CISA chief Krebs calls for US to get serious on security
As Black Hat kicks off, the US government is getting the message on hiring security talent

security update

Maui ransomware linked to North Korean group Andariel
APIC/EPIC! Intel chips leak secrets even the kernel shouldn’t see…
Google’s bug bounty boss: Finding and patching vulns? ‘Totally useless’

When was the last time you secretly smiled when ransomware gangs had their bitcoin stolen, their malware servers shut down, or were forced to disband? We hang on to these infrequent victories because history tells us that most ransomware collectives don’t go away—they reinvent themselves under a new name, with new rules, new targets, and […]

Cloudflare: Someone tried to pull the Twilio phishing tactic on us too

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Microsoft Patches ‘Dogwalk’ Zero-Day and 17 Critical Flaws

The container suse/sle15 was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

The container bci/ruby was updated. The following patches have been included in this update:

The Story Behind the Linux Security Quick Reference Guide
Businesses should dump Windows for the Linux desktop
Patch Tuesday: Yet another Microsoft RCE bug under active exploit

security update

security update

Slack admits to leaking hashed passwords for five years
Virtual Currency Platform ‘Tornado Cash’ Accused of Aiding APTs
APIC fail: Intel ‘Sunny Cove’ chips with SGX spill secrets
Malicious deepfakes used in attacks up 13% from last year, VMware finds

Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened.

Microsoft’s fix for ‘data damage’ risk hits PC performance

An update that fixes three vulnerabilities is now available.

Benefits & Drawbacks of Using a VPN on Linux
How to check if your PC has been hacked, and what to do next

Has your PC been hacked? Whatever happens, don’t panic. Read on for ten signs your PC has been hacked and handy tips on how to fix it. The post How to check if your PC has been hacked, and what to do next appeared first on WeLiveSecurity

An update for vim is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update that fixes 6 vulnerabilities is now available.

Chinese scammers target kids with promise of extra gaming hours

Red Hat OpenShift Container Platform release 4.10.26 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.10.

China-linked spies used six backdoors to steal info from defense, industrial enterprise orgs
US treasury whips up sanctions for crypto mixer Tornado Cash
Twilio customer data exposed after its staffers got phished
Microsoft tightens Edge security for less visited websites
Phishers Swim Around 2FA in Coinbase Account Heists
Slack leaked hashed passwords from its servers for years

Sandipan Roy discovered two vulnerabilities in InfoZIP’s unzip program, a de-archiver for .zip files, which could result in denial of service or potentially the execution of arbitrary code.

phpLiteAdmin could allow cross-site scripting (XSS) attacks.

GDK-PixBuf could be made to crash or run programs as your login if it opened a specially crafted file.

Several security issues were fixed in libjpeg-turbo.

An update for openshift-istio-kiali-rhel8-container is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Red Hat Kiali for OpenShift Service Mesh 2.2 Containers Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

Dark Utilities C2 service draws thousands of cyber criminals

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

It was discovered that libtirpc, a transport-independent RPC library, does not properly handle idle TCP connections. A remote attacker can take advantage of this flaw to cause a denial of service.

Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.

security update

security update

DuckDuckGo says Hell, Hell, No to those Microsoft trackers after web revolt
Develop a zero‑trust environment to protect your organization – Week in security with Tony Anscombe

Learn the basics of zero-trust, and how building a zero-trust environment can protect your organization. The post Develop a zero‑trust environment to protect your organization – Week in security with Tony Anscombe appeared first on WeLiveSecurity

This kernel-linus update is based on upstream 5.15.58 and fixes at least the following security issues: Kernel lockdown bypass when UEFI secure boot is disabled / unavailable and IMA appraisal is enabled (CVE-2022-21505).

This kernel update is based on upstream 5.15.58 and fixes at least the following security issues: Kernel lockdown bypass when UEFI secure boot is disabled / unavailable and IMA appraisal is enabled (CVE-2022-21505).

Jan-Niklas Sohn discovered that multiple input validation failures in the Xkb extension of the X.org X server may result in privilege escalation if the X server is running privileged.

Hi, I’ll be your ransomware negotiator today – but don’t tell the crooks that

The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

security update

Nomad to crypto thieves: Please give us back 90%, keep 10% as a reward. Deal?
Warning! Critical flaws found in US Emergency Alert System
Traffic Light Protocol for cybersecurity responders gets a revamp
Open Redirect Flaw Snags Amex, Snapchat User Data

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Kaspersky blames “misconfiguration” after customers receive “dear and lovely” email
Critical flaws found in four Cisco SMB router ranges – for the second time this year
Bloke robbed of $800,000 in cryptocurrency by fake wallet app wants payback from Google
S3 Ep94: This sort of crypto (graphy), and the other sort of crypto (currency!) [Audio + Text]