September 29, 2020
Las Vegas Students’ Personal Data Leaked, Post-Ransomware Attack
September 29, 2020
The package podman before version 2.1.0-1 is vulnerable to information disclosure.
September 29, 2020
The package firefox before version 81.0-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing, cross-site scripting and denial of service.
September 29, 2020
The package chromium before version 85.0.4183.121-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution, information disclosure and insufficient validation.
September 29, 2020
The package libvirt before version 6.5.0-2 is vulnerable to privilege escalation.
September 29, 2020
An update that solves 11 vulnerabilities and has one errata is now available.
September 29, 2020
An update that solves 10 vulnerabilities and has one errata is now available.
September 29, 2020
Telehealth Poll: How Risky Are Remote Doctor Visits?
September 29, 2020
2 egregious cloud security threats the CSA missed
September 29, 2020
McAfee seeks $2bn return to stock market after Intel unpleasantness
September 29, 2020
Windows 7 ‘Upgrade’ Emails Steal Outlook Credentials
September 28, 2020
Mac, Linux Users Now Targeted by FinSpy Variants
September 28, 2020
Universal Health Services Ransomware Attack Impacts Hospitals Nationwide
September 28, 2020
Joker Trojans Flood the Android Ecosystem
September 28, 2020
Twitter Warns Developers of API Bug That Exposed App Keys, Tokens
September 28, 2020
REvil ransomware crew dangles $1,000,000 cybercrime carrot
September 28, 2020
Should your employer know who you’re dating *outside* work?
September 28, 2020
Several security issues were fixed in iTALC.
September 28, 2020
libuv could be made to crash or execute arbitrary code if it received a specially crafted path.
September 28, 2020
Reading Time: ~ 2 min. “Ten years ago, you didn’t see state actors attacking [small businesses]. But it’s happening now,” warns George Anderson, product marketing director at Carbonite + Webroot, OpenText companies. Sadly, many of today’s managed service providers who serve small and medium-sized businesses now have to concern themselves with these very threats. Independent […]
September 28, 2020
ImageMagick could be made to crash if it opened a specially crafted file.
September 28, 2020
Several vulnerabilities were discovered in the Perl5 Database Interface (DBI). An attacker could trigger a denial-of-service (DoS) and possibly execute arbitrary code.
September 28, 2020
An update that solves one vulnerability and has one errata is now available.
September 28, 2020
An update that solves one vulnerability and has one errata is now available.
September 28, 2020
Are injection flaws the Bohemian Rhapsody of cybersecurity?
September 28, 2020
Putin to Trump: Let’s collude to stop election hacking
September 28, 2020
An update that solves one vulnerability and has 6 fixes is now available.
September 27, 2020
An update that fixes 7 vulnerabilities is now available.
September 27, 2020
grub2 updates for boothole vulnerabilities in f31/f32.
September 26, 2020
security update
September 26, 2020
x86 pv: Crash when handling guest access to MSR_MISC_ENABLE [XSA-333, CVE-2020-25602] (#1881619) Missing unlock in XENMEM_acquire_resource error path [XSA-334, CVE-2020-25598] (#1881616) race when migrating timers between x86 HVM vCPU-s [XSA-336, CVE-2020-25604] (#1881618) PCI passthrough code reading back hardware registers [XSA-337, CVE-2020-25595] (#1881587) once valid event
September 26, 2020
An update that fixes 7 vulnerabilities is now available.
September 26, 2020
Two issues have been found in yaws, a high performance HTTP 1.1 webserver written in Erlang.
September 26, 2020
Two issues have been found in nfdump, a netflow capture daemon. Both issues are related to either a buffer overflow or an integer overflow, which could result in a denial of service or a local code
September 26, 2020
An issue has been found in curl, a command line tool for transferring data with URL syntax. In rare circumstances, when using the multi API of curl in combination
September 26, 2020
An update that fixes four vulnerabilities is now available.
September 26, 2020
Bug Bounty FAQ: Top Questions, Expert Answers
September 26, 2020
An update that fixes one vulnerability is now available.
September 26, 2020
FortiGate VPN Default Config Allows MitM Attacks
September 25, 2020
security update
September 25, 2020
Industrial Cyberattacks Get Rarer but More Complex
September 25, 2020
Ring’s Flying In-Home Camera Drone Escalates Privacy Worries
September 25, 2020
Ray‑Ban parent company reportedly suffers major ransomware attack
There is no evidence that cybercriminals were also able to steal customer data The post Ray‑Ban parent company reportedly suffers major ransomware attack appeared first on WeLiveSecurity
September 25, 2020
Blast from the past! Windows XP source code allegedly leaked online
September 25, 2020
Microsoft Kills 18 Azure Accounts Tied to Nation-State Attacks
September 25, 2020
An update that solves one vulnerability and has one errata is now available.
September 25, 2020
Several security issues were fixed in Gnuplot.
September 25, 2020
Multiple security issues were discovered in MediaWiki, a website engine for collaborative work: SpecialUserRights could leak whether a user existed or not, multiple code paths lacked HTML sanitisation allowing for cross-site scripting and TOTP validation applied insufficient rate
September 25, 2020
Sanitize could be made to perform XSS attacks if it received specially crafted input.
September 25, 2020
Disable pkcs11 related test case running into GnuTLS locking bug
September 25, 2020
CVE-2020-12100: Parsing mails with a large number of MIME parts could have resulted in excessive CPU usage or a crash due to running out of stack memory. CVE-2020-12673: Dovecot’s NTLM implementation does not correctly check message buffer size, which leads to reading past allocation which can lead to crash. CVE-2020-10967: lmtp/submission:
September 25, 2020
The Windows XP and Windows Server 2003 source code leaks online
September 25, 2020
Feds Hit with Successful Cyberattack, Data Stolen
September 24, 2020
Cisco Patch-Palooza Tackles 29 High-Severity Bugs
September 24, 2020
We need to talk about criminal hackers using Cobalt Strike, says Cisco Talos
September 24, 2020
Free Apple iPhone 12? Chatbot Scam Spreads Via Texts
September 24, 2020
179 arrested in massive dark web bust
The sting is said to be the US Government’s largest operation targeting crime in the internet’s seedy underbelly The post 179 arrested in massive dark web bust appeared first on WeLiveSecurity
September 24, 2020
Reading Time: ~ 5 min. Guest blog by Mit Patel, Managing Director of London based IT Support company, Netstar. In this article, Webroot sits down with Mit Patel, Managing Director of London-based MSP partner, Netstar, to discuss the topic of remote work during a pandemic and tips to stay cyber resilient. Why is it important […]
September 24, 2020
Alien Android Banking Trojan Sidesteps 2FA
September 24, 2020
An update that solves 6 vulnerabilities and has two fixes is now available.
September 24, 2020
An update that fixes 14 vulnerabilities is now available.
September 24, 2020
Several security issues were fixed in SPIP.
September 24, 2020
An update that fixes 19 vulnerabilities is now available.
September 24, 2020
An update that fixes one vulnerability is now available.
September 24, 2020
An update that contains security fixes can now be installed.
September 24, 2020
Zerologon Patches Roll Out Beyond Microsoft
September 23, 2020
Gamer Credentials Now a Booming, Juicy Target for Hackers
September 23, 2020
Critical Industrial Flaws Pose Patching Headache For Manufacturers
September 23, 2020
CISA: LokiBot Stealer Storms Into a Resurgence
September 23, 2020
OldGremlin Ransomware Group Bedevils Russian Orgs
September 23, 2020
An update that fixes 19 vulnerabilities is now available.
September 23, 2020
RDFLib could be made to made to execute arbitrary code if it were running in a directory with a specially crafted file.
September 23, 2020
– New upstream version (81.0)
September 23, 2020
Security fixes for CVE-2020-1472
September 23, 2020