March 16, 2022
Linux botnet exploits Log4j flaw to pwn Arm, x86 systems
‘CryptoRom’ Crypto-Scam is Back via Side-Loaded Apps
March 16, 2022
Another Destructive Wiper Targets Organizations in Ukraine
March 16, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
March 16, 2022
Update to 3.24: fix CVE-2022-26495, CVE-2022-26496
March 16, 2022
Update to 3.24: fix CVE-2022-26495, CVE-2022-26496
March 16, 2022
UK regulator puts NortonLifeLock merger with Avast on ice
March 16, 2022
An update that contains security fixes and contains one feature can now be installed.
March 16, 2022
An update that solves 13 vulnerabilities and has three fixes is now available.
March 16, 2022
An update that contains security fixes and contains one feature can now be installed.
March 16, 2022
Phony Instagram ‘Support Staff’ Emails Hit Insurance Company
March 16, 2022
The Windows malware on Ukraine CERT’s radar
March 16, 2022
OpenSSL patches crash-me bug triggered by rogue certs
March 15, 2022
Microsoft Azure DevOps revives TLS 1.0/1.1 with rollback
March 15, 2022
SentinelOne pays $617m for identity biz Attivo Networks
March 15, 2022
UK Supreme Court snubs Julian Assange’s anti-extradition bid
March 15, 2022
A first look at threat intelligence and threat hunting tools
An overview of some of the most popular open-source tools for threat intelligence and threat hunting The post A first look at threat intelligence and threat hunting tools appeared first on WeLiveSecurity
March 15, 2022
Most QNAP NAS Devices Affected by ‘Dirty Pipe’ Linux Flaw
March 15, 2022
Germany advises citizens to uninstall Kaspersky antivirus
March 15, 2022
NVIDIA staff shouldn’t have chosen passwords like these…
March 15, 2022
Russian demand for VPNs skyrockets by 2,692%
March 15, 2022
OpenSSL could be made to stop responding if it opened a specially crafted certificate.
March 15, 2022
Pandora Ransomware Hits Giant Automotive Supplier Denso
March 15, 2022
Tavis Ormandy discovered that the BN_mod_sqrt() function of OpenSSL could be tricked into an infinite loop. This could result in denial of service via malformed certificates.
March 15, 2022
rsh would allow unintended modification of target directory permissions.
March 15, 2022
An update that solves one vulnerability and has one errata is now available.
March 15, 2022
An update that fixes one vulnerability is now available.
March 15, 2022
An update that fixes two vulnerabilities is now available.
March 15, 2022
NASA in ‘serious jeopardy’ due to big black hole in security
March 15, 2022
Happy #PiDay – even if you aren’t in North America!
March 14, 2022
CaddyWiper: New wiper malware discovered in Ukraine
This is the third time in as many weeks that ESET researchers have spotted previously unknown data wiping malware taking aim at Ukrainian organizations The post CaddyWiper: New wiper malware discovered in Ukraine appeared first on WeLiveSecurity
March 14, 2022
Staff Think Conti Group Is a Legit Employer – Podcast
March 14, 2022
security update
March 14, 2022
security update
March 14, 2022
security update
March 14, 2022
China thrilled it captured already-leaked NSA cyber-weapon
March 14, 2022
Valorant aimbot hack lures the unwary into malware infection
March 14, 2022
Command injection in ruby bundler. (CVE-2021-43809) References: – https://bugs.mageia.org/show_bug.cgi?id=30162 – https://blog.sonarsource.com/securing-developer-tools-package-managers
March 14, 2022
This kernel-linus update is based on upstream 5.15.28 and fixes at least the following security issues: Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially
March 14, 2022
This kernel update is based on upstream 5.15.28 and fixes at least the following security issues: Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially
March 14, 2022
The chromium-browser-stable package has been updated to the 99.0.4844.51 version that fixes multiples security vulnerabilities. References: – https://bugs.mageia.org/show_bug.cgi?id=29988
March 14, 2022
Cybercrooks’ Political In-Fighting Threatens the West
March 14, 2022
New US law: Cyberattacks to be reported within 72 hours
March 14, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
March 14, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 14, 2022
Brit techie shows us life in Ukraine amid Russian invasion
March 14, 2022
Is low-code safe and secure?
March 14, 2022
A flaw was discovered in the way HAProxy, a fast and reliable load balancing reverse proxy, processes HTTP responses containing the “Set-Cookie2” header, which can result in an unbounded loop, causing a denial of service.
March 13, 2022
The update for expat released as DSA 5085-1 introduced regressions for applications using URI characters (‘:’ in particular) for a namespace separator (while the HTML API docs of function XML_ParserCreateNS have been advising against their use). Updated expat packages are now
March 13, 2022
Emmet Leahy reported that libphp-adodb, a PHP database abstraction layer library, allows to inject values into a PostgreSQL connection string. Depending on how the library is used this flaw can result in authentication bypass, reveal a server IP address or have other
March 13, 2022
Improve your hybrid cloud security with these 3 tips
March 12, 2022
Two vulnerabilities were discovered in the server for the Network Block Device (NBD), which could result in the execution of arbitrary code. For the oldstable distribution (buster), these problems have been fixed
March 12, 2022
The container sles-15-sp3-chost-byos-v20220310 was updated. The following patches have been included in this update:
March 12, 2022
The container suse-sles-15-sp3-chost-byos-v20220310-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
March 12, 2022
The container suse-sles-15-sp3-chost-byos-v20220310-gen2 was updated. The following patches have been included in this update:
March 12, 2022
Null pointer dereference in MD_UPDATE. (CVE-2021-4209) References: – https://bugs.mageia.org/show_bug.cgi?id=30112 – https://lists.suse.com/pipermail/sle-security-updates/2022-March/010333.html
March 11, 2022
security update
March 11, 2022
security update
March 11, 2022
Multiple security vulnerabilities have been discovered in vim, an enhanced vi editor. Buffer overflows, out-of-bounds reads and Null pointer dereferences may lead to a denial of service (application crash) or other unspecified impact.
March 11, 2022
Russia Issues Its Own TLS Certs
March 11, 2022
Raccoon Stealer Crawls Into Telegram
March 11, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
March 11, 2022
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
March 11, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
March 11, 2022
– New upstream update (98.0)
March 11, 2022
Update Chromium to 99.0.4844.51. Fixes, well, a LOT of security bugs. Sorry about that. CVE-2021-22570 CVE-2022-0096 CVE-2022-0097 CVE-2022-0098 CVE-2022-0099 CVE-2022-0100 CVE-2022-0101 CVE-2022-0102 CVE-2022-0103 CVE-2022-0104 CVE-2022-0105 CVE-2022-0106 CVE-2022-0107 CVE-2022-0108 CVE-2022-0109 CVE-2022-0110 CVE-2022-0111 CVE-2022-0112 CVE-2022-0113
March 11, 2022
Bugfix release. fixes CVE-2022-0518 2055256, 2055130 – https://github.com/radare org/radare2/commit/9650e3c352f675687bf6c6f65ff2c4a3d0e288fa fixes CVE-2022-0519 2055103, 2055104 – https://github.com/radareorg/radare2/commit/6c4428f018d385fc8 0a33ecddcb37becea685dd5 fixes CVE-2022-0520 2055145, 2055146 – https://github.co m/radareorg/radare2/commit/8525ad0b9fd596f4b251bb3d7b114e6dc7ce1ee8 fixes
March 11, 2022
Infosys, Wipro silent on their Russian operations
March 11, 2022
Moscow to issue HTTPS certs to Russian websites
March 11, 2022
Analysis of leaked Conti files blows lid off ransomware gang
March 11, 2022
Fortinet says it’s all about the security ASICs
March 10, 2022
security update
March 10, 2022
security update
March 10, 2022
security update
March 10, 2022
Malware Posing as Russia DDoS Tool Bites Pro-Ukraine Hackers
March 10, 2022
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure, spoofing or sandbox bypass.
March 10, 2022
An update that solves one vulnerability and has two fixes is now available.
March 10, 2022
True or false? How to spot – and stop – fake news
How can you tell fact from fiction and avoid falling for and spreading falsehoods about the war in Ukraine? The post True or false? How to spot – and stop – fake news appeared first on WeLiveSecurity
March 10, 2022