Fix PAC buffer overflow
October 5, 2020
Update to 85.0.4183.121. Why? Because security, that’s why. It fixes these CVEs: CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966 It also has a fix for an issue where networking… uh… didn’t.
October 5, 2020
Mumble 1.3.2. === Client * Fixed: Overlay not starting (#4282) Server * Fixed: keychain-error on macOS for custom certificates (#4345) Known issues * Overlay blocked by BattleEye. A request to whitelist it has been made. * Overlay blocked by CS:GO Trusted Mode
October 5, 2020
UK loses 16,000 COVID-19 cases due to Excel spreadsheet snafu
October 5, 2020
If you connect it, protect it
October 5, 2020
Google warns of security holes in other vendors’ Android phones
October 4, 2020
security update
October 4, 2020
Grindr security hole made it easy to hijack accounts
October 4, 2020
An update that fixes four vulnerabilities is now available.
October 4, 2020
An update that solves 10 vulnerabilities and has one errata is now available.
October 4, 2020
An update that fixes two vulnerabilities is now available.
October 4, 2020
An update that fixes 5 vulnerabilities is now available.
October 4, 2020
An update that fixes one vulnerability is now available.
October 4, 2020
Security fixes for CVE-2020-1472
October 3, 2020
An update that fixes 5 vulnerabilities is now available.
October 3, 2020
An update that contains security fixes can now be installed.
October 3, 2020
Update to 85.0.4183.121. Why? Because security, that’s why. It fixes these CVEs: CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966 It also has a fix for an issue where networking… uh… didn’t. —- Update Chromium to 85.0.4183.102. Fix issue where unpackaged components prevented hardware accelerated rendering from
October 2, 2020
Mumble 1.3.2. === Client * Fixed: Overlay not starting (#4282) Server * Fixed: keychain-error on macOS for custom certificates (#4345) Known issues * Overlay blocked by BattleEye. A request to whitelist it has been made. * Overlay blocked by CS:GO Trusted Mode
October 2, 2020
It was found that SNMP Trap Translator does not drop privileges as configured and does not properly escape shell commands in certain functions. A remote attacker, by sending a malicious crafted SNMP trap, could possibly execute arbitrary shell code with the privileges of the
October 2, 2020
Researchers Mixed on Sanctions for Ransomware Negotiators
October 2, 2020
Cyber Security Awareness Month is here!
A month teaching us that when everyone pitches in and does their part, then almost everyone is protected The post Cyber Security Awareness Month is here! appeared first on WeLiveSecurity
October 2, 2020
LATAM financial cybercrime: Competitors‑in‑crime sharing TTPs
ESET researchers discover surprisingly many indicators of close cooperation among Latin American banking trojans’ authors The post LATAM financial cybercrime: Competitors‑in‑crime sharing TTPs appeared first on WeLiveSecurity
October 2, 2020
LatAm Banking Trojans Collaborate in Never-Before-Seen Effort
October 2, 2020
Years-Long ‘SilentFade’ Attack Drained Facebook Victims of $4M
October 2, 2020
Several security vulnerabilities have been discovered in Squid, a high- performance proxy caching server for web clients. CVE-2020-15049
October 2, 2020
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, guest-to-host privilege escalation or information leaks.
October 2, 2020
Reading Time: ~ 2 min. Ryuk Shuts Down Universal Health Services Computer systems for all 400 Universal Health Services facilities around the globe have reportedly been shut down following an attack by the Ryuk ransomware group. Ryuk is known for targeting large organizations, but the healthcare industry has been gaining popularity among these groups due […]
October 2, 2020
An update that solves one vulnerability and has 25 fixes is now available.
October 2, 2020
An update that fixes one vulnerability is now available.
October 2, 2020
An update that fixes one vulnerability is now available.
October 2, 2020
An update that solves two vulnerabilities and has one errata is now available.
October 2, 2020
Malware campaign poses as Team Blue Take Action email
October 2, 2020
Reading Time: ~ 4 min. Have you ever met a person who thinks they know it all? Or maybe you’ve occasionally been that person in your own life? No shame and no shade intended – it’s great (and important) to be confident about your skills. And in cases where you know your stuff, we encourage […]
October 1, 2020
Emotet Emails Strike Thousands of DNC Volunteers
October 1, 2020
QR Codes: A Sneaky Security Threat
October 1, 2020
Microsoft Office 365 Phishing Attack Uses Multiple CAPTCHAs
October 1, 2020
A potential HTTP request smuggling vulnerability in WEBrick was reported. WEBrick (bundled along with jruby) was too tolerant against
October 1, 2020
A potential HTTP request smuggling vulnerability in WEBrick was reported. WEBrick (bundled along with ruby2.3) was too tolerant against
October 1, 2020
Microsoft 365 services back online after hours‑long outage
Microsoft resolves a service disruption that affected Office 365, Outlook.com, Teams and other cloud-based services The post Microsoft 365 services back online after hours‑long outage appeared first on WeLiveSecurity
October 1, 2020
APT‑C‑23 group evolves its Android spyware
ESET researchers uncover a new version of Android spyware used by the APT-C-23 threat group against targets in the Middle East The post APT‑C‑23 group evolves its Android spyware appeared first on WeLiveSecurity
October 1, 2020
NFL, NBA Players Hacked in Would-Be Cyber-Slam-Dunk
October 1, 2020
Spammers Smuggle LokiBot Via URL Obfuscation Tactic
October 1, 2020
An update that solves two vulnerabilities and has one errata is now available.
October 1, 2020
An update that fixes 12 vulnerabilities is now available.
October 1, 2020
The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string. Therefore, there was a need to explicitly specify the number
October 1, 2020
This package allowed ../ directory traversal to access private resources because resource matching did not ensure that pathnames were in a canonical format.
October 1, 2020
What to do first when your company suffers a ransomware attack
October 1, 2020
#BeCyberSmart – why friends don’t let friends get scammed
October 1, 2020
InterPlanetary Storm Botnet Infects 13K Mac, Android Devices
October 1, 2020
Smashing Security podcast #198: Chucky the coffee maker
October 1, 2020
GitHub adds code scanning for security bugs
September 30, 2020
OAuth Consent Phishing Ramps Up with Microsoft Office 365 Attacks
September 30, 2020
Android Spyware Variant Snoops on WhatsApp, Telegram Messages
September 30, 2020
FBI, CISA warn of disinformation campaigns about hacked voting systems
Threat actors may spread false claims about compromised voting systems in order to undermine confidence in the electoral process The post FBI, CISA warn of disinformation campaigns about hacked voting systems appeared first on WeLiveSecurity
September 30, 2020
Facebook Small Business Grants Spark Identity-Theft Scam
September 30, 2020
Microsoft Exchange Servers Still Open to Actively Exploited Flaw
September 30, 2020
An update that fixes one vulnerability is now available.
September 30, 2020
An update that fixes two vulnerabilities is now available.
September 30, 2020
Updated OpenShift Container Storage packages fixing various security issues and other bugs are now available for Red Hat OpenShift Container Storage with 3.11.z Async update. Red Hat Product Security has rated this update as having a security impact
September 30, 2020
An update that solves four vulnerabilities and has two fixes is now available.
September 30, 2020
Several security improvements were added to Samba.
September 30, 2020
Several security issues were fixed in Tomcat.
September 30, 2020
Why Web Browser Padlocks Shouldn’t Be Trusted
September 29, 2020
security update
September 29, 2020
Reading Time: ~ 2 min. DHS Announces Massive Increase in LokiBot Attacks By monitoring and tracking of cyberattacks over 2020, U.S. Department of Homeland Security (DHS) officials have uncovered a significant increase in cyberattacks being carried out by LokiBot, a malicious info-stealer of stored passwords and cryptocurrency information. The increase in LokiBot attacks can likely […]
September 29, 2020
Zerologon Attacks Against Microsoft DCs Snowball in a Week
September 29, 2020
The Network Perimeter: This Time, It’s Personal
September 29, 2020