Menu

Latest articles

An update that fixes two vulnerabilities is now available.

Ransomwared payroll provider leaks data on 38,000 Australian government workers

The container suse/sle15 was updated. The following patches have been included in this update:

An update for python-django20 is now available for Red Hat OpenStack Platform 16.1 (Train). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for etcd is now available for Red Hat OpenStack Platform 16.1 (Train). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Canadian Ransomware Arrest Is a Meaningful Flex, Experts Say
Fueled by Pandemic Realities, Grinchbots Aggressively Surge in Activity
A third of you slackers out there still aren’t using HTTPS by default
S3 Ep62: The S in IoT stands for security (and much more) [Podcast+Transcript]
How MikroTik Routers Became a Cybercriminal Target
Resistance is … cheap? Cloudflare, Mandiant, and pals form incident response ‘n’ cyber insurance borg
Smashing Security podcast #255: Revolting receipts, a Twitter fandango, and shopkeeper cyber tips

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for the virt:8.2 and virt-devel:8.2 modules is now available for Advanced Virtualization for RHEL 8.2.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Ransomware giving you sleepless nights? Here’s how to insure a good night’s sleep
Oz Feds reveal distribution model behind backdoored ‘An0m’ chat app spread by crims
Malicious npm Code Packages Built for Hijacking Discord Servers
Moobot Botnet Chews Up Hikvision Surveillance Systems
Not with a Bang but a Whisper: The Shift to Stealthy C2
Critical SonicWall VPN Bugs Allow Complete Appliance Takeover
Canadian charged with running ransomware attack on US state of Alaska
AWS Among 12 Cloud Services Affected by Flaws in Eltima SDK
Not all tech disasters are ‘all hands’ events. But how do you tell which is which?
5 common gift card scams and how to spot them

It often pays to look a gift horse in the mouth – recognizing these types of gift card fraud will go a long way toward helping you stay safe from this growing threat not just this holiday season The post 5 common gift card scams and how to spot them appeared first on WeLiveSecurity

Virgin Media fined £50,000 after spamming 451,000 who didn’t want marketing emails
Emotet’s Behavior & Spread Are Omens of Ransomware Attacks
20 years of Red Hat Product Security: The rise of branded exploits (Part 2)

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for firefox is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for firefox is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact

An update for firefox is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

What’s the right amount of trust to build into your network? Less than Zero
Microsoft extends Secured-core concept to servers
Windows 10 Drive-By RCE Triggered by Default URI Handler
When Scammers Get Scammed, They Take It to Cybercrime Court
Leaked Downing Street video footage exposes staff laughing about party
Ransomware hits Spar supermarkets and petrol stations
Firefox update brings a whole new sort of security sandbox
Google Takes Down Glupteba Botnet; Files Lawsuit Against Operators
What are buffer overflow attacks and how are they thwarted?

Ever since the Morris worm, buffer overflows have become notorious fare in the world of vulnerabilities The post What are buffer overflow attacks and how are they thwarted? appeared first on WeLiveSecurity

Cryptominers aren’t just a headache – they’re a big neon sign that Bad Things are on your network
Foreign Office IT chaos: Shocking testimony reveals poor tech support hindered Afghan evac attempts
SolarWinds Attackers Spotted Using New Tactics, Malware
Integrate security into CI/CD with the Trivy scanner

The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:

An update for rpm is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update Support, and Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions.

An update is now available for Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Several security issues were fixed in BusyBox.

Django could be made to expose sensitive information.

An update that fixes 7 vulnerabilities is now available.

Microsoft wins court approval to take over sites run by Chinese crime gang
LINE Pay leaks around 133,000 users’ data to GitHub, of all places
Crypto-Exchange BitMart to Pay Users for $200M Theft
Are You Guilty of These 8 Network-Security Bad Practices?
Cyber Command Publicly Joins Fight Against Ransomware Groups  

security update

Spar shops across northern UK shut after cyber attack hits payment processing abilities
Cuba Ransomware Gang Hauls in $44M in Payouts
Miscreants make off with $150m of digital assets in BitMart security breach
Pegasus Spyware Infects U.S. State Department iPhones
Apache Kafka Cloud Clusters Expose Sensitive Data for Large Companies
Cryptocurrency startup fails to subtract before adding, loses $31m
Cuba ransomware gang scores almost $44m in ransom payments across 49 orgs, say Feds

A security issue was fixed in MariaDB

Upstream details at : https://access.redhat.com/errata/RHSA-2021:4904

Ransomware – how to stop it, and how to survive an attack. Free eBook by Recorded Future

libmodbus could be made to crash if it received specially crafted input.

Several security issues were fixed in uriparser.

Several security issues were fixed in Long Range ZIP.

USN-5142-1 introduced regressions in Samba.

Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information leaks.

The container suse/sle15 was updated. The following patches have been included in this update:

The container bci/golang was updated. The following patches have been included in this update:

The container bci/golang was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sles12sp3 was updated. The following patches have been included in this update:

The container sles-15-sp3-chost-byos-v20211202 was updated. The following patches have been included in this update:

The container suse-sles-15-sp3-chost-byos-v20211202-hvm-ssd-x86_64 was updated. The following patches have been included in this update:

The container suse-sles-15-sp3-chost-byos-v20211202-gen2 was updated. The following patches have been included in this update:

American diplomats’ iPhones reportedly compromised by NSO Group intrusion software
Utility biz Delta-Montrose Electric Association loses billing capability and two decades of records after cyber attack
Feds charge two men with claiming ownership of others’ songs to steal YouTube royalty payments

NSS rebase to 3.73, includes fix for CVE-2021-43527

Pandemic-Influenced Car Shopping: Just Use the Manufacturer API
Omicron Phishing Scam Already Spotted in UK
Protecting your critical infrastructure is one thing…protecting your backups is the same thing
Mozilla patches critical “BigSig” cryptographic bug: Here’s how to track it down and fix it
What Are Your Top Cloud Security Challenges? Threatpost Poll
Netgear router flaws exploitable with authentication … like the default creds on Netgear’s website
Launching ESET Research Podcast: A peek behind the scenes of ESET discoveries

Press play for the first episode as host Aryeh Goretsky is joined by Zuzana Hromcová to discuss native IIS malware The post Launching ESET Research Podcast: A peek behind the scenes of ESET discoveries appeared first on WeLiveSecurity

UK Government fined £500,000 after revealing home addresses in New Year honours data breach
Threat Group Takes Aim Again at Cloud Platform Provider Zoho