Kevin Israel discovered that Postorius, the administrative web frontend for Mailman 3, didn’t validate whether a logged-in user owns the email address when unsubscribing.
September 9, 2021
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
September 9, 2021
Update to CVE release 3003.3-1 https://saltproject.io/security_announcements/salt-security- advisory-2021-sep-02/ CVE-2021-21996 CVE-2021-22004 CVE-2021-31607
September 9, 2021
Build of libtpms 0.8.5
September 9, 2021
8u302 update
September 9, 2021
Update to CVE release 3003.3-1 https://saltproject.io/security_announcements/salt-security- advisory-2021-sep-02/ CVE-2021-21996 CVE-2021-22004 CVE-2021-31607
September 9, 2021
Zoho Password Manager Zero-Day Bug Under Active Attack Gets a Fix
September 9, 2021
BladeHawk Attackers Target Kurds with Android Apps
September 9, 2021
What Ragnar Locker Got Wrong About Ransomware Negotiators – Podcast
September 8, 2021
security update
September 8, 2021
Tooling Network Detection & Response for Ransomware
September 8, 2021
Spoofing Bug Highlights Cybersecurity for Digital Vaccine Passports
September 8, 2021
TeamTNT’s New Tools Target Multiple OS
September 8, 2021
ProtonMail forced to log user’s IP address after an order from Swiss authorities
Following the incident the company has updated its website and privacy policy to clarify its legal obligations to its userbase The post ProtonMail forced to log user’s IP address after an order from Swiss authorities appeared first on WeLiveSecurity
September 8, 2021
BladeHawk group: Android espionage against Kurdish ethnic group
ESET researchers have investigated a targeted mobile espionage campaign against the Kurdish ethnic group, and that has been active since at least March 2020. The post BladeHawk group: Android espionage against Kurdish ethnic group appeared first on WeLiveSecurity
September 8, 2021
Windows zero-day MSHTML attack – how not to get booby trapped!
September 8, 2021
Microsoft, CISA Urge Mitigations for Zero-Day RCE Flaw in Windows
September 8, 2021
kernel: use-after-free in route4_change() in net/sched/cls_route.c (CVE-2021-3715) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE Bug Fix(es): * [SL 7.8][s390x][DASD]Crash in __list_del_entry, alias_pav_group list corrupt when running dasd_alias_remove_device() * EMBARGOED CVE-2021-3715 kern [More…]
September 8, 2021
Update to v1.41.1 Fix CVE-2021-39163, CVE-2021-39164 —- Update to v1.41.0
September 8, 2021
Cumulative bug-fix release from upstream.
September 8, 2021
– fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
September 8, 2021
Cumulative bug-fix release from upstream.
September 8, 2021
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 8, 2021
Patch now? Why enterprise exploits are still partying like it’s 1999
September 8, 2021
Ransomware attacks are inevitable. Paying the ransom isn’t
September 8, 2021
Ragnar Locker Gang Warns Victims Not to Call the FBI
September 7, 2021
Netgear Smart Switches Open to Complete Takeover
September 7, 2021
Jenkins Hit as Atlassian Confluence Cyberattacks Widen
September 7, 2021
ProtonMail Forced to Log IP Address of French Activist
September 7, 2021
Authorities Arrest Another TrickBot Gang Member in South Korea
September 7, 2021
An update for kernel is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 7, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs
September 7, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs
September 7, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs
September 7, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs
September 7, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs
September 7, 2021
Holy Grail of Security: Answers to ‘Did XYZ Work?’ – Podcast
September 7, 2021
An issue has been found in btrbk, a backup tool for btrfs subvolumes. Due to mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys an arbitrary code execution would
September 6, 2021
IOMMU page mapping issues on x86 [XSA-378, CVE-2021-28694, CVE-2021-28695, CVE-2021-28696] (#1997531) (#1997568) (#1997537) grant table v2 status pages may remain accessible after de-allocation [XSA-379, CVE-2021-28697] (#1997520) long running loops in grant table handling [XSA-380, CVE-2021-28698] (#1997526) inadequate grant-v2 status frames array bounds check [XSA-382, CVE-2021-28699]
September 6, 2021
An update that fixes two vulnerabilities is now available.
September 6, 2021
IOMMU page mapping issues on x86 [XSA-378, CVE-2021-28694, CVE-2021-28695, CVE-2021-28696] (#1997531) (#1997568) (#1997537) grant table v2 status pages may remain accessible after de-allocation [XSA-379, CVE-2021-28697] (#1997520) long running loops in grant table handling [XSA-380, CVE-2021-28698] (#1997526) inadequate grant-v2 status frames array bounds check [XSA-382, CVE-2021-28699]
September 6, 2021
Human Fraud: Detecting Them Before They Detect You
September 6, 2021
Poisoned proxy PACs! The NPM package with a network-wide security hole…
September 6, 2021
IoT Attacks Skyrocket, Doubling in 6 Months
September 6, 2021
An update that fixes one vulnerability is now available.
September 6, 2021
When the bits hit the fan: What to do when ransomware strikes
September 6, 2021
security update
September 5, 2021
Etienne Stalmans discovered that unsquashfs in squashfs-tools, the tools to create and extract Squashfs filesystems, does not validate filenames for traversal outside of the destination directory. An attacker can take advantage of this flaw for writing to arbitrary files to the filesystem
September 5, 2021
Update to 2.0.1 (fix RHBZ#1998578); fix RHBZ#1932066 (unsafe use of strncpy)
September 5, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs —- New upstream development version 1.45.7. —- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
September 5, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs —- New upstream development version 1.45.7. —- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
September 5, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs —- New upstream development version 1.45.7. —- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
September 5, 2021
Update NTFS-3G to 2021.8.22 to fix multiple CVEs —- New upstream development version 1.45.7. —- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
September 5, 2021
An XML external entity (XXE) injection in pywps allows an attacker to view files on the application server filesystem by assigning a path to the entity.
September 4, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
September 4, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
September 4, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
September 4, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
September 4, 2021
The container suse/sles12sp5 was updated. The following patches have been included in this update:
September 4, 2021
Twitter introduces new feature to automatically block abusive behavior
Dubbed Safety Mode, the feature will temporarily block authors of offensive tweets from being able to contact or follow users. The post Twitter introduces new feature to automatically block abusive behavior appeared first on WeLiveSecurity
September 3, 2021
FIN7 Capitalizes on Windows 11 Release in Latest Gambit
September 3, 2021
An update that solves one vulnerability and has two fixes is now available.
September 3, 2021
An update that solves one vulnerability and has one errata is now available.
September 3, 2021
Brute-Force Attacks Target Inboxes for Gift Card Data
September 3, 2021
An update that solves one vulnerability and has two fixes is now available.
September 3, 2021
An update that fixes two vulnerabilities is now available.
September 3, 2021
An update that fixes 7 vulnerabilities is now available.
September 3, 2021
Spring or autumn, your biggest cyber threat could be in the cloud
September 2, 2021
NFT Collector Tricked into Buying Fake Banksy
September 2, 2021