An update that fixes 5 vulnerabilities is now available.
December 16, 2022
Sting op takes down 50 DDoS-for-hire domains, seven people collared
December 15, 2022
security update
December 15, 2022
Unmasking MirrorFace: Operation LiberalFace targeting Japanese political entities
ESET researchers discovered a spearphishing campaign targeting Japanese political entities a few weeks before the House of Councillors elections, and in the process uncovered a previously undescribed MirrorFace credential stealer The post Unmasking MirrorFace: Operation LiberalFace targeting Japanese political entities appeared first on WeLiveSecurity
December 15, 2022
Microsoft to Europe: We’re setting an EU ‘data boundary’ from 2023
December 15, 2022
Smashing Security podcast #302: Lensa AI, and a dog called Bob
December 15, 2022
Using system tags to enable extended security hardening recommendations
December 15, 2022
Beyond the STIG: The wider world of cybersecurity
December 15, 2022
On the 12th day of the Rackspace email disaster, it did not give to me …
December 14, 2022
Malicious Microsoft-signed Windows drivers wielded in cyberattacks
December 14, 2022
Seven smuggled US military tech for Moscow, say Feds
December 14, 2022
AWS strains to make Simple Storage Service not so simple to screw up
December 14, 2022
TikTok could be banned from America, thanks to proposed bipartisan bill
December 14, 2022
Patch Tuesday updates spark errors when creating Hyper-V VMs
December 14, 2022
Top tips for security‑ and privacy‑enhancing holiday gifts
Think outside the (gift) box. Here are a few ideas for security and privacy gifts to get for your relatives – or even for yourself. Some don’t cost a penny! The post Top tips for security‑ and privacy‑enhancing holiday gifts appeared first on WeLiveSecurity
December 14, 2022
EU takes another step towards US data-sharing agreement
December 14, 2022
The container suse/manager/4.3/proxy-tftpd was updated. The following patches have been included in this update:
December 14, 2022
The container suse/manager/4.3/proxy-ssh was updated. The following patches have been included in this update:
December 14, 2022
The container suse/manager/4.3/proxy-squid was updated. The following patches have been included in this update:
December 14, 2022
The container suse/manager/4.3/proxy-salt-broker was updated. The following patches have been included in this update:
December 14, 2022
The container suse/manager/4.3/proxy-httpd was updated. The following patches have been included in this update:
December 14, 2022
Several security issues were fixed in X.Org X Server.
December 14, 2022
Apple patches everything, finally reveals mystery of iOS 16.1.2
December 14, 2022
Patch Tuesday: 0-days, RCE bugs, and a curious tale of signed malware
December 14, 2022
Uber staff info leaks after supplier Teqtivity gets pwned
December 13, 2022
security update
December 13, 2022
COVID-bit: the wireless spyware trick with an unfortunate name
December 13, 2022
Cybersecurity Trends 2023: Securing our hybrid lives
ESET experts offer their reflections on what the continued blurring of boundaries between different spheres of life means for our human and social experience – and especially our cybersecurity and privacy The post Cybersecurity Trends 2023: Securing our hybrid lives appeared first on WeLiveSecurity
December 13, 2022
An update that contains security fixes can now be installed.
December 13, 2022
An update that solves 12 vulnerabilities, contains one feature and has two fixes is now available.
December 13, 2022
An update that solves 12 vulnerabilities, contains one feature and has two fixes is now available.
December 13, 2022
An update that contains security fixes can now be installed.
December 13, 2022
An update that fixes 12 vulnerabilities, contains one feature is now available.
December 13, 2022
Several security issues were fixed in containerd.
December 13, 2022
Researchers smell a cryptomining Chaos RAT targeting Linux systems
December 13, 2022
Pwn2Own contest concludes with nearly $1m paid out to ethical hackers
December 13, 2022
Timothee Desurmont discovered an information leak vulnerability in node-eventsource, a W3C compliant EventSource client for Node.js: the module was not honoring the same-origin-policy and upon following a redirect would leak cookies to the the target URL.
December 12, 2022
Pwn2Own Toronto: 54 hacks, 63 new bugs, $1 million in bounties
December 12, 2022
Using threat modeling to get your priorities right
December 12, 2022
Open source security fought back in 2022
December 12, 2022
Several security issues were fixed in the Linux kernel.
December 12, 2022
Several security issues were fixed in the Linux kernel.
December 12, 2022
Several security issues were fixed in the Linux kernel.
December 12, 2022
IT security teams, business execs still not on same page
December 12, 2022
UK arrests five for selling ‘dodgy’ point of sale software
December 12, 2022
Multiple security vulnerabilities have been found in OpenEXR, command-line tools and a library for the OpenEXR image format. Buffer overflows or out-of-bound reads could lead to a denial of service (application crash) if a malformed image file is processed.
December 12, 2022
security update
December 11, 2022
An update that fixes one vulnerability is now available.
December 11, 2022
Security fix for CVE-2022-3500 Proper exception handling in tornado_requests
December 11, 2022
Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing
December 11, 2022
Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing
December 11, 2022
Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing
December 11, 2022
An update that fixes one vulnerability is now available.
December 10, 2022
security update
December 10, 2022
Diamond industry under attack – Week in security with Tony Anscombe
ESET researchers uncover a new wiper and its execution tool, both attributed to the Iran-aligned Agrius APT group The post Diamond industry under attack – Week in security with Tony Anscombe appeared first on WeLiveSecurity
December 10, 2022
Xenomorph: What to know about this Android banking trojan
Xenomorph pilfers victims’ login credentials for banking, payment, social media, cryptocurrency and other apps with valuable data The post Xenomorph: What to know about this Android banking trojan appeared first on WeLiveSecurity
December 10, 2022
Zhang Boyang reported that the grub2 update released as DLA 3190-1 did not correctly apply fixes for CVE-2022-2601 and CVE-2022-3775. Updated packages are now available to address this issue. For reference the original advisory text follows.
December 10, 2022
Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application (the Sequoia PGP plugin for Thunderbird).
December 10, 2022
Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application (the Sequoia PGP plugin for Thunderbird).
December 10, 2022
Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application (the Sequoia PGP plugin for Thunderbird).
December 10, 2022
Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application (the Sequoia PGP plugin for Thunderbird).
December 10, 2022
updates to screenshooter,settings, and places-plugin
December 10, 2022
Legit Android apps poisoned by sticky ‘Zombinder’ malware
December 9, 2022
Italy, Japan, UK to jointly launch sixth-gen fighter jet by 2035
December 9, 2022
S3 Ep112: Data breaches can haunt you more than once! [Audio + Text]
December 9, 2022
The container bci/bci-busybox was updated. The following patches have been included in this update:
December 9, 2022
North Korea using freelance techies to fund missiles and nukes
December 9, 2022
Fix a possible double free in `woffEncode()`. – Update License to SPDX – improved summary and description – Add hand-written man pages – Install HTML format description as documentation
December 9, 2022
Openshift Logging Bug Fix Release (5.3.14) Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 8, 2022
REvil-hit Medibank to pull plug on IT, shore up defenses
December 8, 2022
An update that fixes one vulnerability is now available.
December 8, 2022
An update that fixes four vulnerabilities is now available.
December 8, 2022
An update that fixes one vulnerability is now available.
December 8, 2022
Fantasy – a new Agrius wiper deployed through a supply‑chain attack
ESET researchers analyzed a supply-chain attack abusing an Israeli software developer to deploy Fantasy, Agrius’s new wiper, with victims including the diamond industry The post Fantasy – a new Agrius wiper deployed through a supply‑chain attack appeared first on WeLiveSecurity
December 8, 2022
Metaparasites: The cybercriminals who rip each other off
December 8, 2022
Several security issues were fixed in Python.
December 8, 2022
Logging Subsystem 5.5.5 – Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 8, 2022
An update for python-oslo-utils is now available for Red Hat OpenStack Platform 16.1.9 (Train) for Red Hat Enterprise Linux (RHEL) 8.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 8, 2022