security update
December 19, 2021
An update that fixes one vulnerability is now available.
December 18, 2021
It was discovered that modsecurity-apache, an Apache module to tighten the Web application security, does not properly handles excessively nested JSON objects, which could result in denial of service. The update introduces a new ‘SecRequestBodyJsonDepthLimit’ option to limit the
December 18, 2021
CISA issues emergency directive to fix Log4j vulnerability
December 17, 2021
security update
December 17, 2021
xwayland 21.1.4 Security fix for CVE-2021-4008, CVE-2021-4009, CVE-2021-4010, CVE-2021-4011 Store EGLcontext to avoid superfluous eglMakeCurrent() calls Prefer EGLStream with NVIDIA proprietary driver if both GBM and EGLstream are available
December 17, 2021
Update log4j to 2.16.0 – Disables JNDI by default
December 17, 2021
Fix out of bounds read issue in *larrv functions (CVE-2021-4048)
December 17, 2021
– Update the libsqlite3-sys crate to version 0.23.2. – Update the rusqlite crate to version 0.26.3. This update also contains a fix for RUSTSEC-2021-0128.
December 17, 2021
Facebook Bans Spy-for-Hire Firms for Targeting 50K People
December 17, 2021
Spider-Man Movie Release Frenzy Bites Fans with Credit-Card Harvesting
December 17, 2021
Malicious Joker App Scores Half-Million Downloads on Google Play
December 17, 2021
Brand-New Log4Shell Attack Vector Threatens Local Hosts
December 17, 2021
Convergence Ahoy: Get Ready for Cloud-Based Ransomware
December 17, 2021
Conti Gang Suspected of Ransomware Attack on McMenamins
December 17, 2021
Over Log4j? VMware has another critical flaw for you to patch
December 17, 2021
security update
December 16, 2021
‘Tropic Trooper’ Reemerges to Target Transportation Outfits
December 16, 2021
Managed service providers (MSPs) deliver critical operational support for businesses around the world. As third-party providers of remote management, MSPs are typically contracted by small and medium-sized businesses (SMBs), government agencies and non-profit organizations to perform daily maintenance of information technology (IT) systems. Similar to an MSP, managed security service providers (MSSPs) offer comparable organizations […]
December 16, 2021
‘PseudoManuscrypt’ Mass Spyware Campaign Targets 35K Systems
December 16, 2021
Why ransomware attacks happen out of hours or during the holidays
December 16, 2021
The dirty dozen of Latin America: From Amavaldo to Zumanek
The grand finale of our series dedicated to demystifying Latin American banking trojans The post The dirty dozen of Latin America: From Amavaldo to Zumanek appeared first on WeLiveSecurity
December 16, 2021
Free eBook! Ransomware – how to stop it, and how to survive an attack
December 16, 2021
How developers scrambled to secure the Log4j vulnerability
December 16, 2021
‘DarkWatchman’ RAT Shows Evolution in Fileless Malware
December 16, 2021
Move fast, break security: Why CISOs must push back against Agile IT
December 16, 2021
Japan draws a LINE: web giants must reveal where they store user data
December 16, 2021
Relentless Log4j Attacks Include State Actors, Possible Worm
December 15, 2021
Malicious Exchange Server Module Hoovers Up Outlook Credentials
December 15, 2021
SAP Kicks Log4Shell Vulnerability Out of 20 Apps
December 15, 2021
What every business leader needs to know about Log4Shell
Hundreds of thousands of attempts to exploit the vulnerability are under way The post What every business leader needs to know about Log4Shell appeared first on WeLiveSecurity
December 15, 2021
5 warning signs your identity has been stolen
By spotting these early warning signs of identity theft, you can minimize the impact on you and your family The post 5 warning signs your identity has been stolen appeared first on WeLiveSecurity
December 15, 2021
Apache’s Fix for Log4Shell Can Lead to DoS Attacks
December 15, 2021
Gathering security data for container images using the Pyxis API
December 15, 2021
Securing the Kubernetes software supply chain
December 15, 2021
In 2022, Expect More Supply Chain Pain and Changing Security Roles
December 15, 2021
Apple iOS Update Fixes Cringey iPhone 13 Jailbreak Exploit
December 14, 2021
400 Banks’ Customers Targeted with Anubis Trojan
December 14, 2021
What the Log4Shell Bug Means for SMBs: Experts Weigh In
December 14, 2021
How to Buy Precious Patching Time as Log4j Exploits Fly
December 14, 2021
Popular password manager LastPass to be spun out from LogMeIn
December 14, 2021
‘Seedworm’ Attackers Target Telcos in Asia, Middle East
December 14, 2021
Apple security updates are out – and not a Log4Shell mention in sight
December 14, 2021
Kronos Ransomware Outage Drives Widespread Payroll Chaos
December 13, 2021
Log4Shell vulnerability: What we know so far
The critical flaw in the ubiquitous Log4j utility has sent shockwaves far beyond the security industry – here’s what we know so far The post Log4Shell vulnerability: What we know so far appeared first on WeLiveSecurity
December 13, 2021
Where the Latest Log4Shell Attacks Are Coming From
December 13, 2021
Malicious PyPI Code Packages Rack Up Thousands of Downloads
December 13, 2021
Log4Shell Is Spawning Even Nastier Mutations
December 13, 2021
When disaster strikes, data recovery really is a race against time
December 13, 2021
Is VPOTUS Bluetooth-phobic or sensible? The answer’s pretty clear
December 13, 2021
Ooh, an update. Let’s install it. What could possibly go wro-
December 13, 2021
security update
December 12, 2021
Chen Zhaojun of Alibaba Cloud Security Team discovered a critical security vulnerability in Apache Log4j, a popular Logging Framework for Java. JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker
December 12, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
December 12, 2021
An update that fixes 7 vulnerabilities is now available.
December 12, 2021
An update that fixes 9 vulnerabilities is now available.
December 12, 2021
security update
December 11, 2021
How to detect the Log4j vulnerability in your applications
December 10, 2021
Apache Log4j2
December 10, 2021
– Update to latest upstream (95.0)
December 10, 2021
**MariaDB 10.5.13** Release notes: https://mariadb.com/kb/en/mariadb-10513-release-notes/ Maintainer notes: This update contains – conditionally only on F>=35 – patch for OpenSSL 3 This update enables LTO – Link Time Optimization This update disables DTRACE on ARMv7hl architecture as a temporary workaround for BZ #2026600
December 10, 2021
**MariaDB 10.5.13** Release notes: https://mariadb.com/kb/en/mariadb-10513-release-notes/ Maintainer notes: This update contains – conditionally only on F>=35 – patch for OpenSSL 3 This update enables LTO – Link Time Optimization This update disables DTRACE on ARMv7hl architecture as a temporary workaround for BZ #2026600
December 10, 2021
security update
December 10, 2021
Next-Gen Maldocs & How to Solve the Human Vulnerability
December 10, 2021
An update that contains security fixes can now be installed.
December 10, 2021
‘Appalling’ Riot Games Job Fraud Takes Aim at Wallets
December 10, 2021
CVE-2021-4052: Use after free in web apps. CVE-2021-4053: Use after free in UI. CVE-2021-4079: Out of bounds write in WebRTC. CVE-2021-4054: Incorrect security UI in autofill. CVE-2021-4078: Type confusion in V8.
December 10, 2021
Zero Day in Ubiquitous Apache Log4j Tool Under Active Attack
December 10, 2021
SnapHack: Watch out for those who can hack into anyone’s Snapchat!
Oh snap! This is how easy it may be for somebody to hijack your Snapchat account – all they need to do is peer over your shoulder. The post SnapHack: Watch out for those who can hack into anyone’s Snapchat! appeared first on WeLiveSecurity
December 10, 2021
“Log4Shell” Java vulnerability – how to safeguard your servers
December 10, 2021
Sprawling Active Attack Aims to Take Over 1.6M WordPress Sites
December 10, 2021
‘Karakurt’ Extortion Threat Emerges, But Says No to Ransomware
December 10, 2021
Gathering security data using the Red Hat Security Data API
December 10, 2021
An update that fixes one vulnerability is now available.
December 10, 2021
An update that fixes one vulnerability is now available.
December 10, 2021