October 16, 2020
TikTok Launches Bug Bounty Program Amid Security Snafus
News Wrap: Barnes & Noble Hack, DDoS Extortion Threats and More
October 16, 2020
CVE-2020-26116: HTTP request method CRLF injection in httplib
October 16, 2020
Critical Magento Holes Open Online Shops to Code Execution
October 15, 2020
security update
October 15, 2020
FIFA 21 Blockbuster Release Gives Fraudsters an Open Field for Theft
October 15, 2020
Priyank Nigam discovered that HttpComponents Client, a Java HTTP agent implementation, could misinterpret malformed authority component in a request URI and pick the wrong target host for request execution.
October 15, 2020
50,000 home cameras reportedly hacked, footage posted online
Some footage has already appeared on adult sites, with cybercriminals offering lifetime access to the entire loot for US$150 The post 50,000 home cameras reportedly hacked, footage posted online appeared first on WeLiveSecurity
October 15, 2020
Zoom Rolls Out End-to-End Encryption After Setbacks
October 15, 2020
Broadvoice Leak Exposes 350M Records, Personal Voicemail Transcripts
October 15, 2020
Barnes & Noble Hack: A Reading List for Phishers and Crooks
October 15, 2020
Beware COVID-19 charity fraudsters, warns the FBI
October 15, 2020
Carnival Corp. Ransomware Attack Affects Three Cruise Lines
October 15, 2020
An update that contains security fixes can now be installed.
October 15, 2020
An update that contains security fixes can now be installed.
October 15, 2020
Update to 3.17.7 — https://www.claws-mail.org/news.php
October 15, 2020
Smashing Security podcast #200: Two flipping hundred
October 15, 2020
BEC Attacks: Nigeria No Longer the Epicenter as Losses Top $26B
October 14, 2020
Critical SonicWall VPN Portal Bug Allows DoS, Worming RCE
October 14, 2020
The rise of fearware and how to fight back
October 14, 2020
FIN11 Cybercrime Gang Shifts Tactics to Double-Extortion Ransomware
October 14, 2020
Intel Adds Memory Encryption, Firmware Security to Ice Lake Chips
October 14, 2020
An update that fixes one vulnerability is now available.
October 14, 2020
An update that solves one vulnerability and has one errata is now available.
October 14, 2020
Several security issues were fixed in Vim.
October 14, 2020
The package chromium before version 86.0.4240.75-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, information disclosure and insufficient validation.
October 14, 2020
October 14, 2020
Security flaws and CVSS rescore process with NVD
October 14, 2020
Red Hat Ansible Tower 3.6 runner release (CVE-2019-18874) 2. Description: * Updated python-psutil version to 5.6.6 inside ansible-runner container (CVE-2019-18874)
October 14, 2020
Windows “Ping of Death” bug revealed – patch now!
October 14, 2020
October Patch Tuesday: Microsoft Patches Critical, Wormable RCE Bug
October 13, 2020
Lemon Duck Cryptocurrency-Mining Botnet Activity Spikes
October 13, 2020
Software AG Data Released After Clop Ransomware Strike – Report
October 13, 2020
Critical Flash Player Flaw Opens Adobe Users to RCE
October 13, 2020
Attackers chain Windows, VPN flaws to target US government agencies
Bad actors have accessed US elections support systems, although there’s no evidence to suggest that election data has been compromised, say FBI and CISA The post Attackers chain Windows, VPN flaws to target US government agencies appeared first on WeLiveSecurity
October 13, 2020
ESET takes part in global operation to disrupt Trickbot
Throughout its monitoring, ESET analyzed thousands of malicious samples every month to help this effort The post ESET takes part in global operation to disrupt Trickbot appeared first on WeLiveSecurity
October 13, 2020
Creepy covert camera “feature” found in popular smartwatch for kids
October 13, 2020
Election Systems Under Attack via Microsoft Zerologon Exploits
October 13, 2020
Authentication Bug Opens Android Smart-TV Box to Data Theft
October 13, 2020
TrickBot Takedown Disrupts Major Crimeware Apparatus
October 13, 2020
Hackney hacked. Council hit by “serious cyber attack”, data breached
October 13, 2020
An update that fixes two vulnerabilities is now available.
October 13, 2020
An update that fixes one vulnerability is now available.
October 13, 2020
An update that solves two vulnerabilities and has one errata is now available.
October 13, 2020
An update that fixes two vulnerabilities is now available.
October 13, 2020
An update that fixes one vulnerability is now available.
October 13, 2020
Office 365: A Favorite for Cyberattack Persistence
October 13, 2020
An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 13, 2020
An update that contains security fixes can now be installed.
October 12, 2020
An update that solves 12 vulnerabilities and has 59 fixes is now available.
October 12, 2020
Android ransomware learns new tricks to lock devices
October 12, 2020
Ransomware Attackers Buy Network Access in Cyberattack Shortcut
October 12, 2020
An update that solves two vulnerabilities and has one errata is now available.
October 12, 2020
Securing A Linux Web Server: Preventing Information Leakage>
October 11, 2020
An update that fixes one vulnerability is now available.
October 11, 2020
Frediano Ziglio discovered multiple buffer overflow vulnerabilities in the QUIC image decoding process of spice, a SPICE protocol client and server library, which could result in denial of service, or possibly, execution of arbitrary code.
October 11, 2020
security update
October 11, 2020
An update that fixes 5 vulnerabilities is now available.
October 10, 2020
An update that fixes 5 vulnerabilities is now available.
October 10, 2020
A potential Cross-Site Scripting (XSS) vulnerability was found in rails, a ruby based MVC framework. Views that allow the user to control the default (not found) value of the `t` and `translate` helpers could be susceptible to XSS attacks. When an HTML-unsafe string is passed as the
October 10, 2020
Oleg Kalnichevski discovered that httpcomponents-client, a Java library for building HTTP-aware applications, can misinterpret a malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request
October 10, 2020
An update that fixes two vulnerabilities is now available.
October 10, 2020
An update that fixes one vulnerability is now available.
October 10, 2020
Taking a screwdriver to unlock your IoT sex toy is nuts
October 10, 2020
An update that solves one vulnerability and has one errata is now available.
October 10, 2020
In Eclipse Web Tools Platform, a component of the Eclipse IDE, XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in the user
October 9, 2020
Reading Time: ~ 2 min. New Jersey Hospital Pays Massive Ransom Officials have decided to pay roughly $670,000 in ransom following a ransomware attack on the University Hospital in New Jersey. The hospital was likely forced into this decision after being unable to restore from backups the 240GB of data stolen in the attack on […]
October 9, 2020