September 6, 2021
IoT Attacks Skyrocket, Doubling in 6 Months
September 6, 2021
An update that fixes one vulnerability is now available.
September 6, 2021
When the bits hit the fan: What to do when ransomware strikes
September 6, 2021
security update
September 5, 2021
Etienne Stalmans discovered that unsquashfs in squashfs-tools, the tools to create and extract Squashfs filesystems, does not validate filenames for traversal outside of the destination directory. An attacker can take advantage of this flaw for writing to arbitrary files to the filesystem
September 5, 2021
Update to 2.0.1 (fix RHBZ#1998578); fix RHBZ#1932066 (unsafe use of strncpy)
September 5, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs —- New upstream development version 1.45.7. —- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
September 5, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs —- New upstream development version 1.45.7. —- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
September 5, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs —- New upstream development version 1.45.7. —- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
September 5, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs —- New upstream development version 1.45.7. —- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
September 5, 2021
An XML external entity (XXE) injection in pywps allows an attacker to view files on the application server filesystem by assigning a path to the entity.
September 4, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
September 4, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
September 4, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
September 4, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
September 4, 2021
The container suse/sles12sp5 was updated. The following patches have been included in this update:
September 4, 2021
Twitter introduces new feature to automatically block abusive behavior
Dubbed Safety Mode, the feature will temporarily block authors of offensive tweets from being able to contact or follow users. The post Twitter introduces new feature to automatically block abusive behavior appeared first on WeLiveSecurity
September 3, 2021
FIN7 Capitalizes on Windows 11 Release in Latest Gambit
September 3, 2021
An update that solves one vulnerability and has two fixes is now available.
September 3, 2021
An update that solves one vulnerability and has one errata is now available.
September 3, 2021
Brute-Force Attacks Target Inboxes for Gift Card Data
September 3, 2021
An update that solves one vulnerability and has two fixes is now available.
September 3, 2021
An update that fixes two vulnerabilities is now available.
September 3, 2021
An update that fixes 7 vulnerabilities is now available.
September 3, 2021
Spring or autumn, your biggest cyber threat could be in the cloud
September 2, 2021
NFT Collector Tricked into Buying Fake Banksy
September 2, 2021
SpyFone & CEO Banned From Stalkerware Biz
September 2, 2021
Security release for the 0.4 branch: https://lib.openmpt.org/libopenmpt/2021/08/22/security- updates-0.5.11-0.4.23-0.3.32/
September 2, 2021
Bluetooth Bugs Open Billions of Devices to DoS, Code Execution
September 2, 2021
Google Play Sign-Ins Allow Covert Location-Tracking
September 2, 2021
Cisco Patches Critical Authentication Bug With Public Exploit
September 2, 2021
In space, no one can hear cyber security professionals scream
September 2, 2021
7 Ways to Defend Mobile Apps, APIs from Cyberattacks
September 2, 2021
WhatsApp Photo Filter Bug Allows Sensitive Info to Be Lifted
September 2, 2021
An update that solves 11 vulnerabilities and has 7 fixes is now available.
September 2, 2021
Digital State IDs Start Rollouts Despite Privacy Concerns
September 2, 2021
An update that fixes two vulnerabilities is now available.
September 2, 2021
An update that fixes 8 vulnerabilities is now available.
September 2, 2021
Comcast RF Attack Leveraged Remotes for Surveillance
September 2, 2021
How to secure REST with Spring Security
September 2, 2021
How a Bumble dating app vulnerability revealed any user’s exact location
September 2, 2021
The container sles-15-sp3-chost-byos-v20210827 was updated. The following patches have been included in this update:
September 2, 2021
The container suse-sles-15-sp3-chost-byos-v20210827-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
September 2, 2021
The container suse-sles-15-sp3-chost-byos-v20210827-gen2 was updated. The following patches have been included in this update:
September 2, 2021
security update
September 1, 2021
Gutenberg Template Library & Redux Framework Bugs Plague WordPress Sites
September 1, 2021
Vaccine passports: Is your personal data in safe hands?
Vaccination passports may facilitate the return to normalcy, but there are also concerns about what kinds of personal data they collect and how well they protect it. Here’s what you should know. The post Vaccine passports: Is your personal data in safe hands? appeared first on WeLiveSecurity
September 1, 2021
LockBit Jumps Its Own Countdown, Publishes Bangkok Air Files
September 1, 2021
BEC Scammers Seek Native English Speakers on Underground
September 1, 2021
Feds Warn of Ransomware Attacks Ahead of Labor Day
September 1, 2021
Network Controls in the DevSecOps life cycle
September 1, 2021
Best Linux Backup Solutions to Prevent Data Loss in A Ransomware Attack>
September 1, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2021:3338
September 1, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2021:3336
September 1, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2021:3325
September 1, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2020:1021
September 1, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2018:3140
September 1, 2021
Indonesian authorities probe million-record leak from national COVID app
September 1, 2021
Fortress Home Security Open to Remote Disarmament
August 31, 2021
Cream Finance DeFi Platform Rooked For $29M
August 31, 2021
An update that solves two vulnerabilities, contains one feature and has one errata is now available.
August 31, 2021
Proxyware Services Open Orgs to Abuse – Report
August 31, 2021
Flaw in the Quebec vaccine passport: analysis
ESET’s cybersecurity expert Marc-Étienne Léveillé analyses in-depth the Quebec’s vaccine proof apps VaxiCode and VaxiCode Verif. The post Flaw in the Quebec vaccine passport: analysis appeared first on WeLiveSecurity
August 31, 2021
Don’t use single‑factor authentication, warns CISA
The federal agency urges organizations to ditch the bad practice and instead use multi-factor authentication methods The post Don’t use single‑factor authentication, warns CISA appeared first on WeLiveSecurity
August 31, 2021
WooCommerce Pricing Plugin Allows Malicious Code-Injection
August 31, 2021
QNAP Is Latest to Get Dinged by OpenSSL Bugs Fallout
August 31, 2021
NTFS-3G could be made to execute arbitrary code if it received a specially crafted image file.
August 31, 2021
Top 3 APIs Vulnerabilities: Why Apps are Owned by Cyberattackers
August 31, 2021
sssd: shell command injection in sssctl (CVE-2021-3621) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE Bug Fix(es): * Memory leak in the simple access provider * id lookup is failing intermittently * SSSD is NOT able to contact the Global Catalog […]
August 31, 2021
kernel: out-of-bounds write in xt_compat_target_from_user() in net/netfilter/x_tables.c (CVE-2021-22555) * kernel: race condition for removal of the HCI controller (CVE-2021-32399) * kernel: powerpc: RTAS calls can be used to compromise kernel integrity (CVE-2020-27777) * kernel: Local privilege escalation due to incorrect BPF JIT branch displacement computation (CVE-2021-29154) * kernel: [More…]
August 31, 2021
bind: Broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly (CVE-2021-25214) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE — SL7 x86_64 bind-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-chroot-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-debuginfo-9.11.4-26.P2.el7_9.7.i68 [More…]
August 31, 2021
libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution (CVE-2021-3246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE — SL7 x86_64 libsndfile-1.0.25-12.el7_9.1.i686.rpm libsndfile-1.0.25-12.el7_9.1.x86_64.rpm libsndfile-debuginfo-1.0.25-12.el7_9.1.i686.rpm li [More…]
August 31, 2021
hivex: stack overflow due to recursive call of _get_children() (CVE-2021-3622) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE — SL7 x86_64 hivex-1.3.10-6.12.el7_9.i686.rpm hivex-1.3.10-6.12.el7_9.x86_64.rpm hivex-debuginfo-1.3.10-6.12.el7_9.i686.rpm hivex-debuginfo-1.3.10-6.12.el7_9.x86_64 [More…]
August 31, 2021
Where are you on your DevSecOps journey?
August 31, 2021