Menu

Latest articles

App Tracking: Apps plead for users to press allow, but 85% of Apple iOS consumers are not opting in
The DarkSide ransomware gang must be shitting itself right now
Apple AirTag jailbroken already – hacked in rickroll attack
WhatsApp will limit features for users who don’t accept new data‑sharing rules

Your account won’t be deleted, but here’s what you may want to be aware of if not even repeated reminders do the trick The post WhatsApp will limit features for users who don’t accept new data‑sharing rules appeared first on WeLiveSecurity

Compsci boffin publishes proof-of-concept code for 54-year-old zero-day in Universal Turing Machine

An update is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for kernel is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Train operator phlunks phishing test by teasing employees with non-existent COVID bonus
Tencent research team scores free powerups for electric cars with Raspberry Pi-powered X-in-the-middle attack
Indian government says 5G doesn’t cause COVID-19. Also points out India has no 5G networks
Trend Micro hosted email service is down, inboxes still stuck in cloudy limbo

Update to latest upstream version.

This update fixes several issues in djvulibre. These are mostly related to opening of corrupted files.

An update that fixes one vulnerability is now available.

An update that contains security fixes can now be installed.

Never say never! Warren Buffett caught up in integer overflow error…
Kubecon 2021: A largely dry and corporate affair where the best bits involved a spot of Kubernetes-hacking roleplay

Openshift Logging Bug Fix Release (5.0.3) This release includes a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for postgresql is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

It was discovered that there was potential directory-traversal vulnerability in Django, a popular Python-based web development framework.

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

Colonial Pipeline’s Ransomware Attack Sparks Emergency Declaration
Lemon Duck Cryptojacking Botnet Changes Up Tactics
City of Tulsa struck by ransomware attack
Uncle Sam wants ‘ethical hackers’ to crack its planetary defenses, but don’t expect a pay-day from this bug bounty
Major US oil pipeline shut down after ransomware attack
Namecheap hosted 25%+ of fake UK govt phishing sites last year – NCSC report
US declares emergency after ransomware shuts oil pipeline that pumps 100 million gallons a day
Major U.S. Pipeline Crippled in Ransomware Attack
iPhone Hack Allegedly Used to Spy on China’s Uyghurs
Russian cyber-spies changed tactics after the UK and US outed their techniques – so here’s a list of those changes

Several vulnerabilities were discovered in mediawiki, a wiki website engine for collaborative work. CVE-2021-20270

The Qualys Research Labs reported several vulnerabilities in Exim, a mail transport agent, which could result in local privilege escalation and remote code execution.

Privacy activist Max Schrems on Microsoft’s EU data move: It won’t keep the NSA away
80% of Net Neutrality Comments to FCC Were Fudged
Insurer AXA says it will no longer cover ransomware payments in France
Chinese smart TVs caught hoovering up data about devices on customers’ networks
When not to use edge computing
Cisco HyperFlex web interface has critical flaw that lets attackers get root and execute arbitrary commands
Kids in Hong Kong and other highly surveilled states worry infosec careers are just asking for trouble
Google Play to require privacy labels on apps in 2022, almost two years after Apple
Google will make you use two-step verification to login

What’s better for getting your business’ name out there and boosting sales than having a killer business marketing plan with well-placed ads, zippy copy, and a slick design? The answer is: having a group of dedicated real-world customers who use their own platforms to advocate for your business and its offerings. Thanks to social media, […]

Popular routers found vulnerable to hacker attacks

Millions of Brits could be at risk of cyberattacks due to poor default passwords and a lack of firmware updates The post Popular routers found vulnerable to hacker attacks appeared first on WeLiveSecurity

Qualcomm Chip Bug Opens Android Fans to Eavesdropping
Critical Cisco SD-WAN, HyperFlex Bugs Threaten Corporate Networks
Ryuk Ransomware Attack Sprung by Frugal Student
DDoS attack knocks Belgian government websites offline

The attack overwhelmed the systems of a Belgian ISP, leading to widespread service outages and disruptions The post DDoS attack knocks Belgian government websites offline appeared first on WeLiveSecurity

Vulnerability in Snapdragon 855 SoCs could pwn Android modems, allow baddies to snoop on conversations
Massive DDoS Attack Disrupts Belgium Parliament
S3 Ep31: Apple zero-days, Flubot scammers and PHP supply chain bug [Podcast]
NSA offers advice: connecting OT to the rest of the net can lead to “indefensible levels of risk”
Firefox for Android gets critical update to block cookie-stealing hole
How to accurately match OVAL security data to installed RPMs
Smashing Security podcast #226: Cryptocrazies and NFTs
Fantastic passwords and where your children can find them

How witches, wizards and superheroes can help your kids stay safe from cyber-villains, plus other parenting hacks to encourage your children to use secure passwords The post Fantastic passwords and where your children can find them appeared first on WeLiveSecurity

Crane horror Reg reader uses his severed finger to unlock Samsung Galaxy phone
Chrome on Windows turns on Intel, AMD chip-level defenses against malicious websites
JET engine flaws can crash Microsoft’s IIS, SQL Server, say Palo Alto researchers
Signal says its Instagram ads were banned for being too honest
New Crypto-Stealer ‘Panda’ Spread via Discord
Anti-Spam WordPress Plugin Could Expose Website User Data
Raft of Exim Security Holes Allow Linux Mail Server Takeovers
Microsoft will soon remove Flash Player from Windows 10 devices

The Patch Tuesday security update due in July should hammer the last nail in the coffin of Adobe Flash Player The post Microsoft will soon remove Flash Player from Windows 10 devices appeared first on WeLiveSecurity

21 nails in Exim mail server: Vulnerabilities enable ‘full remote unauthenticated code execution’, millions of boxes at risk
Peloton’s Leaky API Spilled Riders’ Private Data
Peloton exercise bikes found exposing user data – company dawdles in its response
East London council blurts thousands of residents’ email addresses in To field blunder
Feds Shut Down Fake COVID-19 Vaccine Phishing Website
Dell fixes exploitable holes in its own firmware update driver – patch now!
21Nails: Multiple Critical Vulnerabilities Discovered in Exim Mail Server – Patch Now!>
Twilio’s private GitHub repositories cloned by Codecov attacker, cloud comms platform confirms
Compliance clarity with Red Hat Insights
Ousaban: Private photo collection hidden in a CABinet

Another in our occasional series demystifying Latin American banking trojans The post Ousaban: Private photo collection hidden in a CABinet appeared first on WeLiveSecurity

What not to expect when you’re expecting: Fertility apps may be selling intimate health secrets

Red Hat OpenShift Container Platform release 4.6.27 is now available with updates to packages and images that fix several bugs. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which

The container suse/sle15 was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

Four security issues have been discovered in cgal. A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL. CVE-2020-28601

An update that fixes one vulnerability is now available.

Update to bugfix release 4.1.0 Security fix for CVE-2017-9438, CVE-2021-3402, CVE-2019-19648, CVE-2017-9438

Global Phishing Attacks Spawn Three New Malware Strains

security update

‘Millions’ of Dell PCs will grant malware, rogue users admin-level access if asked nicely

Typically, when cryptocurrency values change, one would expect to see changes in crypto-related cybercrime. In particular, trends in Bitcoin values tend to be the bellwether you can use to predict how other currencies’ values will shift, and there are usually corresponding shifts in crypto-based crime, such as ransomware, though it’s not necessarily the kind of […]

Red Hat open-sources StackRox Kubernetes security product
Pulse Secure VPNs Get a Fix for Critical Zero-Day Bugs
INTERPOL aims to deal a blow to digital piracy

The agency’s new initiative will also warn about the high cost of the free lunch – the increased risk of malware exposure The post INTERPOL aims to deal a blow to digital piracy appeared first on WeLiveSecurity

Apple Fixes Zero‑Day Security Bugs Under Active Attack
Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs
Sneakers, Gaming, Nvidia Cards: Retailers Can Stop Shopping Bots
Bait Boost: Phishers Delivering Increasingly Convincing Lures
Apple products hit by fourfecta of zero-day exploits – patch now!

An update that fixes one vulnerability is now available.

Boystown, dark web child abuse image website with 400,000 members, shut down by police

The Qualys Research Labs reported several vulnerabilities in Exim, a mail transport agent, which could result in local privilege escalation and remote code execution.

Several vulnerabilities were discovered in BIND, a DNS server implementation. CVE-2021-25214

One security issue has been discovered in subversion: CVE-2020-17525: