January 28, 2021
Emotet botnet takedown – what you need to know
An update that fixes one vulnerability is now available.
January 28, 2021
An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 28, 2021
An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 28, 2021
An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 28, 2021
Apple patches three iOS zero‑days under attack
The company emits emergency updates to fix bugs affecting devices ranging from iPhones to Apple Watches The post Apple patches three iOS zero‑days under attack appeared first on WeLiveSecurity
January 27, 2021
TeamTNT Cloaks Malware With Open-Source Tool
January 27, 2021
NetWalker Ransomware Suspect Charged: Tor Site Seized
January 27, 2021
Update to 2.53.6
January 27, 2021
Update to latest upstream version.
January 27, 2021
Knock, knock. Who’s there? NAT. Nat who? A NAT URL-borne killer
January 27, 2021
security update
January 27, 2021
Sudo Bug Gives Root Access to Mass Numbers of Linux Systems
January 27, 2021
ADT Security Camera Flaws Open Homes to Eavesdropping
January 27, 2021
Wormable Android malware spreads via WhatsApp messages
“Download This application and Win Mobile Phone”, reads the message attempting to trick users into downloading a fake Huawei app The post Wormable Android malware spreads via WhatsApp messages appeared first on WeLiveSecurity
January 27, 2021
Apple critical patches fix in-the-wild iPhone exploits – update now!
January 27, 2021
An update that fixes 26 vulnerabilities is now available.
January 27, 2021
An update for firefox is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 27, 2021
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
January 27, 2021
An update for firefox is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 27, 2021
Multiple vulnerabilities have been found in phpMyAdmin, allowing remote attackers to conduct XSS.
January 27, 2021
Multiple vulnerabilities have been found in Telegram, the worst of which could result in information disclosure.
January 27, 2021
Nvidia Squashes High-Severity Jetson DoS Flaw
January 26, 2021
DanaBot Malware Roars Back into Relevancy
January 26, 2021
security update
January 26, 2021
23M Gamer Records Exposed in VIPGames Leak
January 26, 2021
Criminal, Domestic Violence Case Info Exposed in Cook County Leak
January 26, 2021
Nefilim Ransomware Gang Hits Jackpot with Ghost Account
January 26, 2021
North Korea Targets Security Researchers in Elaborate 0-Day Campaign
January 26, 2021
The Qualys Research Labs discovered a heap-based buffer overflow vulnerability in sudo, a program designed to provide limited super user privileges to specific users. Any local user (sudoers and non-sudoers) can exploit this flaw for root privilege escalation.
January 26, 2021
XStream: remote code execution due to insecure XML deserialization when relying on blocklists (CVE-2020-26217) SL7 noarch xstream-1.3.1-12.el7_9.noarch.rpm xstream-javadoc-1.3.1-12.el7_9.noarch.rpm – Scientific Linux Development Team
January 26, 2021
TikTok Flaw Lay Bare Phone Numbers, User IDs For Phishing Attacks
January 26, 2021
An update that fixes 26 vulnerabilities is now available.
January 26, 2021
An update for cryptsetup is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
January 26, 2021
An update for gnome-settings-daemon is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
January 26, 2021
An update for net-snmp is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.
January 26, 2021
Skyrocketing Bitcoin prices prompt resurgence in mining malware As the price of the cryptocurrency Bitcoin pushes record highs, there’s been a corresponding resurgence in cryptomining malware. Illicit miners had slipped off the radar as Bitcoin’s value plummeted in recent years, but now authors are hoping to profit off the latest price increase. Researchers have identified […]
January 26, 2021
Breaking Down Joe Biden’s $10B Cybersecurity ‘Down Payment’
January 25, 2021
Outgoing FCC Chair Issues Final Security Salvo Against China
January 25, 2021
2.28M MeetMindful Daters Compromised in Data Breach
January 25, 2021
security update
January 25, 2021
Cisco DNA Center Bug Opens Enterprises to Remote Attack
January 25, 2021
SonicWall Breach Stems from ‘Probable’ Zero-Days
January 25, 2021
An update that contains security fixes can now be installed.
January 25, 2021
An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 25, 2021
An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 25, 2021
An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
January 25, 2021
urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest() (CVE-2020-26137). References:
January 25, 2021
It was discovered that pip did not properly sanitize the filename during pip install. A remote attacker could possible use this issue to read and write arbitrary files on the host filesystem as root, resulting in a directory traversal attack (CVE-2019-20916).
January 25, 2021
The update for gst-plugins-bad1.0 released as DSA 4833-1 choosed a package version incompatible with binNMUs and prevented upgrades to the fixed packages. Updated gst-plugins-bad1.0 packages are now available to correct this issue.
January 24, 2021
Several vulnerabilities were discovered in salt, a powerful remote execution manager. The flaws could result in authentication bypass and invocation of Salt SSH, creation of certificates with weak file permissions via the TLS execution module or shell injections with the
January 24, 2021
An update that fixes 35 vulnerabilities is now available.
January 24, 2021
An update that fixes one vulnerability is now available.
January 24, 2021
Security fixes: – fix buffer overrun in EUC-KR conversion module [bz #2497] (CVE-2019-25013) – arm: CVE-2020-6096: Fix multiarch memcpy for negative length [BZ #25620] – arm: CVE-2020-6096: fix memcpy and memmove for negative length [BZ #25620] – iconv: Fix incorrect UCS4 inner loop bounds [BZ #26923] (CVE-2020-29562)
January 23, 2021
Rebase SDDM to 0.19.0
January 23, 2021
security update
January 23, 2021
security update
January 23, 2021
security update
January 23, 2021
An update that fixes one vulnerability is now available.
January 23, 2021
An update that fixes one vulnerability is now available.
January 23, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
January 23, 2021
Microsoft Edge, Google Chrome Roll Out Password Protection Tools
January 22, 2021
Amazon Kindle RCE Attack Starts with an Email
January 22, 2021
Update to 87.0.4280.141. Fixes: CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112 CVE-2021-21113 CVE-2020-16043 CVE-2021-21114 CVE-2020-15995 CVE-2021-21115 CVE-2021-21116
January 22, 2021
A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling (CVE-2020-10719). References:
January 22, 2021
A heap-based buffer overflow vulnerability was found in the blosc library. Depending on how the library is used, if there is a lack of space to write compressed data, an attacker might exploit this flaw to crash the program or potentially execute arbitrary code (CVE-2020-29367).
January 22, 2021
ADT Tech Hacks Home-Security Cameras to Spy on Women
January 22, 2021
Discord-Stealing Malware Invades npm Packages
January 22, 2021
Ransomware Attackers Publish 4K Private Scottish Gov Agency Files
January 22, 2021
Vadokrist: A wolf in sheep’s clothing
Another in our occasional series demystifying Latin American banking trojans The post Vadokrist: A wolf in sheep’s clothing appeared first on WeLiveSecurity
January 22, 2021
US administration adds “subliminal” ad to White House website
January 22, 2021
An update that fixes 13 vulnerabilities is now available.
January 22, 2021