Menu

Latest articles

DarkSide Hits Toshiba; XSS Forum Bans Ransomware
Bizarro Banking Trojan Sports Sophisticated Backdoor
CISOs Struggle to Cope with Mounting Job Stress
Axa insurance offshoots pwned as Ireland reveals second ransomware hit
“Those aren’t my kids!” – Eufy camera owners report video mixups
Take action now – FluBot malware may be on its way

Why FluBot is a major threat for Android users, how to avoid falling victim, and how to get rid of the malware if your device has already been compromised The post Take action now – FluBot malware may be on its way appeared first on WeLiveSecurity

We’d love to report on the outcome of the CREST exam cheatsheet probe, but UK infosec body won’t publish it
Cyberinsurance giant AXA hit by ransomware attack after saying it would stop covering ransom payments
7 keys to selecting a low-code platform
Android stalkerware threatens victims further and exposes snoopers themselves

ESET research reveals that common Android stalkerware apps are riddled with vulnerabilities that further jeopardize victims and expose the privacy and security of the snoopers themselves The post Android stalkerware threatens victims further and exposes snoopers themselves appeared first on WeLiveSecurity

Mammoth grab of GP patient data in the UK set to benefit private-sector market access as rules remain unchanged
Apple sent my data to the FBI, says boss of controversial research paper trove Sci-Hub
Singapore bolsters Bluetooth contact-tracing as new COVID wave sends students and workers home again
China signals dissatisfaction with gig economy impact on ride-share drivers

**MariaDB 10.5.10** Release notes: https://mariadb.com/kb/en/mariadb-10510-release-notes/

Several vulnerabilities were discovered in jetty, a Java servlet engine and webserver. An attacker may reveal cryptographic credentials such as passwords to a local user, disclose installation paths, hijack user sessions or tamper with collocated webapps.

An update that solves two vulnerabilities and has one errata is now available.

Multiple security issues have been discovered in the PostgreSQL database system, which could result in the execution of arbitrary code or disclosure of memory content.

One security issue has been discovered in libgetdata CVE-2021-20204

Red Hat AMQ Streams 1.6.4 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update that fixes 20 vulnerabilities is now available.

An update that contains security fixes can now be installed.

– New upstream version (88.0.1) – Fixes CVE-2021-29952 (https://www.mozilla.org/en-US/security/advisories/mfsa2021-20/) —- – Fixed WebRTC indicator (mozbz#1705048). —- – Enable Wayland backend on Plasma/KDE by default (rhbz#1922608)

Update to Chromium 90.0.4430.93. Fixes the following security issues: CVE-2021-21206 CVE-2021-21220 CVE-2021-21201 CVE-2021-21202 CVE-2021-21203 CVE-2021-21204 CVE-2021-21221 CVE-2021-21207 CVE-2021-21208 CVE-2021-21209 CVE-2021-21210 CVE-2021-21211 CVE-2021-21212 CVE-2021-21213 CVE-2021-21214 CVE-2021-21215 CVE-2021-21216 CVE-2021-21217 CVE-2021-21218 CVE-2021-21219

Exiv2 update fixing security issues.

An update that fixes four vulnerabilities is now available.

security update

security update

Verizon’s 2021 DBIR: Phishing and ransomware threats looming ever larger

The report provides unique insights into how the COVID-19 pandemic affected the data breach landscape The post Verizon’s 2021 DBIR: Phishing and ransomware threats looming ever larger appeared first on WeLiveSecurity

FIN7 Backdoor Masquerades as Ethical Hacking Tool
European police bust major online investment fraud ring

The operation was carried out against an organized group that used online trading platforms to swindle victims out of US$36 million The post European police bust major online investment fraud ring appeared first on WeLiveSecurity

Apple AirTag hacked again – free internet with no mobile data plan!
DarkSide Ransomware Suffers ‘Oh, Crap!’ Server Shutdowns
Free SANS Cyber Security Summits: Sign up now, learn online, keep your network safe
Gamers warned of downloading fake Afterburner overclocking tool to boost graphics card performance
‘Scheme Flooding’ Allows Websites to Track Users Across Browsers
Tor users, beware: ‘Scheme flooding’ technique may be used to deanonymize you
Verizon: Pandemic Ushers in ⅓ More Cyber-Misery
Ransomware’s New Swindle: Triple Extortion
How to Get into the Bug-Bounty Biz: The Good, Bad and Ugly
Hospitals cancel outpatient appointments as Irish health service struck by ransomware
Want to be a cybersecurity manager? Colonial Pipeline is recruiting
NHS-backed org reacted to GitHub leak disclosure with legal threats and police call, complains IT pro
Don’t migrate your problems to the cloud
Report: Colonial Pipeline paid ransomware attackers $5 million, but still had to rely on its own backups
Scumbag ransomware attackers hit Irish Health Service
Cloudflare launches campaign to ‘end the madness’ of CAPTCHAs
Gamers beware! Crooks take advantage of MSI download outage…
Colonial Pipeline Shells Out $5M in Extortion Payout, Report
Ransomware Going for $4K on the Cyber-Underground

The Red Hat Build of OpenJDK 8 (java-1.8.0-openjdk) is now available for portable Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

The Red Hat Build of OpenJDK 8 (java-1.8.0-openjdk) is now available for Windows. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

The Red Hat Build of OpenJDK 11 (java-11-openjdk) is now available for portable Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

The Red Hat Build of OpenJDK 11 (java-11-openjdk) is now available for Windows. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Update to feature release 3003-1 for Python 3, Security fix for CVE-2021-31607

Several vulnerabilities have been discovered in the chromium web browser. CVE-2021-21201

Ransomware victim Colonial Pipeline paid $5m to get oil pumping again, restored from backups anyway – report
1 million risky apps rejected or removed from Apple’s App Store in 2020

Apple also claims to have foiled US$1.5 billion worth of potentially fraudulent transactions The post 1 million risky apps rejected or removed from Apple’s App Store in 2020 appeared first on WeLiveSecurity

ESET Research goes to RSA Conference 2021 with two presentations

We will explore two threats – Android stalkerware and XP exploits The post ESET Research goes to RSA Conference 2021 with two presentations appeared first on WeLiveSecurity

Beyond MFA: Rethinking the Authentication Key
S3 Ep32: AirTag jailbreak, Dell vulns, and a never-ending scam [Podcast]
Fresh Loader Targets Aviation Victims with Spy RATs
Muddy waters. Ofwat reveals it has received 20,000 spam and phishing emails so far this year
Apple’s ‘Find My’ Network Exploited via Bluetooth
Five Critical Password Security Rules Your Employees Are Ignoring
Colonial Pipeline was looking to hire cybersecurity manager before ransomware attack shut down operations
Smashing Security podcast #227: Phishing foul-up, Twitter tip jars, and Facebook’s Apple fury
Pipeline Update: Biden Executive Order, DarkSide Detailed and Gas Bags
Oops, says Manchester City Council after thousands of number plates exposed in parking ticket spreadsheet
When it comes to cybersecurity, there’s always time for summer school or winter training

“What Bitcoin was to 2011, NFTs are to 2021.” That’s a claim from the highly respected “techno-geek” bible Ars Technica in it’s wonderful explainer on NFTs, or non-fungible tokens. Since cryptocurrencies were, are and will continue to be impactful technologies, surely NFTs are a topic worth exploring. They exploded into public consciousness this year as […]

Although they didn’t always call themselves a managed service provider, that’s exactly what T-Consulting has been since its inception. According to Vera Tucci, founder and CEO of the Italy-based MSP, it was her mission to give her clients more than a basic hardware/software bundle with a few hours of IT consultation. She knew her clients […]

Aging infrastructure in the United States is not confined to crumbling roads and bridges. Recent events have shown that connected devices in our pipelines, water treatment facilities and power grids are also vulnerable to exploitation. As of now, we still don’t know much about the ransomware attack against the operators of the Colonial Pipeline. Details […]

Manchester City win the Carabao Cup Final, many illegal streamers lose The COVID pandemic has led to a surge in content consumption as people stayed home and turned to Netflix, Youtube and other streaming services for entertainment. Not everyone agrees with paying for the latest episode or album, however, and this rise has ran parallel […]

Researchers Flag e-Voting Security Flaws
Apple’s Find My network can be abused to leak secrets to the outside world via passing devices
Telegram Fraudsters Ramp Up Forged COVID-19 Vaccine Card Sales
Gig Workers Being Paid $500 for Payroll Passwords
Happy to pay out to ransomware masterminds? Yup, we thought so
‘FragAttacks’: Wi-Fi Bugs Affect Millions of Devices
Tempted by cryptocoins? Fake trading apps get personal…
TeaBot Trojan Targets Banks via Hijacked Android Handsets
Britain to spend £22m influencing Indo-Pacific nations’ cybersecurity policies against ‘authoritarian regimes’
ESET Research goes to RSA Conference 2021 with record number of presentations

We will explore Android stalkerware, air-gapped networks and XP exploits The post ESET Research goes to RSA Conference 2021 with record number of presentations appeared first on WeLiveSecurity

Blessed are the cryptographers, labelling them criminal enablers is just foolish
Beijing twirls ban-hammer at 84 more apps it says need to stop slurping excess data
South Korea orders urgent review of energy infrastructure cybersecurity
Tech industry quietly patches FragAttacks Wi-Fi flaws that leak data, weaken security

security update

Wormable Windows Bug Opens Door to DoS, RCE
SolarWinds CEO describes overhauled Orion build system after that ‘very small, unique’ security breach
GitHub Prepares to Move Beyond Passwords
Microsoft emits more fixes for Exchange Server plus patches for remote-code exec holes in HTTP stack, Visual Studio
Hackers Leverage Adobe Zero-Day Bug Impacting Acrobat Reader
Fake Chrome App Anchors Rapidly Worming ‘Smish’ Cyberattack
Shifting Threats in a Changed World: Edge, IoT and Vaccine Fraud
UK’s Computer Misuse Act to be reviewed, says Home Secretary as she condemns ransomware payoffs
200K Veterans’ Medical Records May Have Been Stolen by Ransomware Gang
NHS App gets go-ahead for vaccine passport use despite protest from privacy groups
DarkSide Wanted Money, Not Disruption from Colonial Pipeline Attack