Menu

Latest articles

DeadBolt Ransomware Resurfaces to Hit QNAP Again
Microsoft: Lapsus$ Used Employee Account to Steal Source Code
Lockbit wins ransomware speed test, encrypts 25,000 files per minute

Red Hat OpenShift Container Platform release 4.6.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.6.

An update that solves three vulnerabilities and has one errata is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes 17 vulnerabilities is now available.

An update that solves three vulnerabilities and has one errata is now available.

Fresh concerns about ‘indefinite’ UK government access to doctors’ patient data

An update that fixes 17 vulnerabilities is now available.

Okta now says: Lapsus$ may in fact have accessed customer info
Nvidia’s Morpheus AI security framework to land in April
Lapsus$ Data Kidnappers Claim Snatches From Microsoft, Okta

security update

Well done patching Log4j. Now, are you ready for the next zero day disaster?
Sandworm: A tale of disruption told anew

As the war rages, the APT group with a long résumé of disruptive cyberattacks enters the spotlight again The post Sandworm: A tale of disruption told anew appeared first on WeLiveSecurity

Russia Lays Groundwork for Cyberattacks on US Infrastructure – White House
FIDO: Here’s Another Knife to Help Murder Passwords
Serpent Backdoor Slithers into Orgs Using Chocolatey Installer

Several security issues were fixed in CKEditor.

Authentication oufit Okta investigating Lapsus$ breach report

An update for rh-mariadb105-mariadb and rh-mariadb105-galera is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for rh-mariadb103-mariadb and rh-mariadb103-galera is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update that fixes three vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes four vulnerabilities is now available.

Biden says Russia exploring revenge cyberattacks
Just how do you build a healthy software pipeline and make sure it’s secure?
This is a BlackCat you don’t want crossing your path
Skyhigh Security rises from McAfee-FireEye’s SSE
What does Go-written malware look like? Here’s a sample under the microscope
Browser-in-the-Browser Attack Makes Phishing Nearly Invisible

security update

security update

Microsoft investigates Lapsus$’s boasts of Bing, Cortana code heist
Facestealer Trojan Hidden in Google Play Plunders Facebook Accounts
Conti Ransomware V. 3, Including Decryptor, Leaked
Web vendor CafePress fined $500,000 for giving cybersecurity a low value
Scottish mental health charity “devastated” by heartless RansomEXX ransomware attack
Western Digital tells EdgeRover users to patch app again
FIDO Alliance says it has finally killed the password
Satellite comms networks on alert after US govt warning
Bridgestone Hit as Ransomware Torches Toyota Supply Chain
AvosLocker group is targeting US critical infrastructure, FBI says
Zoom agrees privacy conditions, gets low-risk rating from Netherlands

Several security issues were fixed in ImageMagick.

Red Hat OpenShift Container Platform release 4.10.5 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.10.

Red Hat OpenShift Container Platform release 4.9.25 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update that fixes two vulnerabilities is now available.

An update that fixes 5 vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

Hackers demand $15 million ransom from TransUnion after cracking “password” password

The container ses/6/rook/ceph was updated. The following patches have been included in this update:

The container ses/6/ceph/ceph was updated. The following patches have been included in this update:

The container ses/6/cephcsi/cephcsi was updated. The following patches have been included in this update:

The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:

An update that fixes one vulnerability is now available.

The 5.16.15 stable kernel update includes a number of important fixes across the tree. It also includes a temporary revert of the feature that makes QNAP NFS mounts fail. We will carry this revert through the 5.16 series in attempt to give the vendor more time to come out with an update, or upstream to […]

WordPress 5.9.2 Security & Maintenance Release

New upstream release 3.1.4

The security update announced as DLA 2955-1 caused a regression in named due to an incomplete fix for CVE-2021-25220 when the Forwarders option was configured. Updated bind9 packages are now available to correct this issue.

Regulatory compliance at scale with Red Hat Insights
This browser-in-browser attack is perfect for phishing
Agencies Warn on Satellite Hacks & GPS Jamming Affecting Airplanes, Critical Infrastructure

It was found that bind9, an internet domain name server, was vulnerable to cache poisoning. When using forwarders, bogus NS records supplied by, or via, those forwarders may be cached and used by named if it needs to recurse for any reason, causing it to obtain and pass on potentially incorrect answers.

Cyclops Blink malware sets up shop in ASUS routers
DarkHotel APT Targets Wynn, Macao Hotels to Rip Off Guest Data
OpenSSL patches infinite-loop DoS bug in certificate verification
Sandworm APT Hunts for ASUS Routers with Cyclops Blink Botnet
Exotic Lily is a business-like access broker for ransomware gangs
Google Blows Lid Off Conti, Diavol Ransomware Access-Broker Ops

The container trento/trento-web was updated. The following patches have been included in this update:

The container trento/trento-runner was updated. The following patches have been included in this update:

The container trento/trento-db was updated. The following patches have been included in this update:

CISOs face ‘perfect storm’ of ransomware and state-supported cybercrime

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container bci/openjdk was updated. The following patches have been included in this update:

SAP community website leaks member data to savvy users
Has Trickbot gang hijacked your router? This scanner may have an answer
Dev Sabotages Popular NPM Package to Protest Russian Invasion
As tax deadlines approach, Emotet malware disguises itself in an IRS email
US military vs. Silicon Valley – a cultural divide

The US military knows it needs to speed up technology adoption through optimization, something at the heart of Silicon Valley culture The post US military vs. Silicon Valley – a cultural divide appeared first on WeLiveSecurity

Misconfigured Firebase Databases Exposing Data in Mobile Apps
Deepfake President Zelensky calls on Ukraine to surrender, as TV station hacked
S3 Ep74: Cybercrime busts, Apple patches, Pi Day, and disconnect effects [Podcast]
Reporting Mandates to Clear Up Feds’ Hazy Look into Threat Landscape – Podcast
How CAPTCHAs can cloak phishing URLs in emails

This is a maintenance release of OpenVPN 2.5 with a security fix when used in server mode ([CVE-2022-0547](https://community.openvpn.net/openvpn/wiki/CVE-2022-0547)). The other changes are available in [Changes.rst](https://github.com/OpenVPN/openvpn/blob/release/2.5/Changes.rst).

Update to 91.7.0

Update to version 1.5.5. This includes a fix for a denial-of-service vulnerability ([RUSTSEC-2022-0013](https://rustsec.org/advisories/RUSTSEC-2022-0013.html) / [CVE-2022-24713](https://cve.mitre.org/cgi- bin/cvename.cgi?name=CVE-2022-24713)).

Fix potential DoS in pesign daemon

Brit data regulator fines five cold-calling fiends £405k

An update that fixes one vulnerability, contains one feature is now available.

An update that fixes one vulnerability, contains one feature is now available.

Devil-may-care Lapsus$ gang is not the aspirational brand infosec needs
Smashing Security podcast #266: Dick pics, secret spies, and Kaspersky
CafePress fined for covering up 2019 customer info leak
LokiLocker ransomware family spotted with built-in wiper

security update