February 4, 2021
Myanmar’s new military government bans Facebook
February 4, 2021
Emotet’s Takedown: Have We Seen the Last of the Malware?
February 3, 2021
Second SolarWinds Attack Group Breaks into USDA Payroll — Report
February 3, 2021
New Malware Hijacks Kubernetes Clusters to Mine Monero
February 3, 2021
We’ve been doing our homework, and two things seem to be true about cybersecurity awareness training simultaneously: It can be very effective at protecting businesses from one of the most common security threats they face (the majority, according to the Ponemon Institute). Namely, phishing. MSPs, often the single most reliable source of cybersecurity for small […]
February 3, 2021
A video Q&A session
February 3, 2021
Identity theft spikes amid pandemic
The US Federal Trade Commission received 1.4 million reports of identity theft last year, double the number from 2019 The post Identity theft spikes amid pandemic appeared first on WeLiveSecurity
February 3, 2021
Dairy farm group faces $30 million ransom The Dairy Farm Group, one of the largest retailers in Asia, has suffered a ransomware attack by the REvil group, which has demanded a roughly $30 million ransom. The attack is still ongoing nearly nine days after being first identified. The attackers still have full control over the […]
February 3, 2021
Kobalos – A complex Linux threat to high performance computing infrastructure
ESET researchers publish a white paper about unique multiplatform malware they’ve named Kobalos The post Kobalos – A complex Linux threat to high performance computing infrastructure appeared first on WeLiveSecurity
February 3, 2021
Five Critical Android Bugs Patched, Part of Feb. Security Bulletin
February 3, 2021
CVE-2020-8020 An improper neutralization of input during web page generation vulnerability in open-build-service allows remote attackers to
February 3, 2021
An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact
February 3, 2021
SolarWinds Orion Bug Allows Easy Remote-Code Execution and Takeover
February 3, 2021
Several vulnerabilities were discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated remote attacker can take advantage of these flaws to cause a denial of service (slapd daemon crash, infinite loops) via
February 3, 2021
An update for thunderbird is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 3, 2021
An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 3, 2021
Red Hat OpenShift Container Platform release 4.4.33 is now available with updates to packages and images that fix several bugs and add enhancements. This release also includes a security update for Red Hat OpenShift Container Platform 4.4.
February 3, 2021
security update
February 3, 2021
TrickBot Continues Resurgence with Port-Scanning Module
February 2, 2021
security update
February 2, 2021
Crypto Crook Hired Steven Seagal to Promote Scam, Now Faces Charges
February 2, 2021
Tiny Kobalos Malware Bedevils Supercomputers to Steal Logins
February 2, 2021
Magento Web Skimmers Piggyback in Ongoing Costway Website Compromise
February 2, 2021
Operation NightScout: Supply‑chain attack targets online gaming in Asia
ESET researchers uncover a supply-chain attack used in a cyberespionage operation targeting online‑gaming communities in Asia The post Operation NightScout: Supply‑chain attack targets online gaming in Asia appeared first on WeLiveSecurity
February 2, 2021
Agent Tesla Trojan ‘Kneecaps’ Microsoft’s Anti-Malware Interface
February 2, 2021
Today, the average enterprise uses over 2000 cloud applications and services, and we expect this number will continue to grow as more businesses realize the efficiency, flexibility and collaboration benefits these services bring. But the use of cloud-based applications also comes with a few caveats; for example, the apps themselves may pose potential security vulnerabilities, […]
February 2, 2021
Identity Theft Spikes Due to COVID-19 Relief
February 2, 2021
An update that contains security fixes can now be installed.
February 2, 2021
kernel: use-after-free in fs/block_dev.c (CVE-2020-15436) * kernel: Nfsd failure to clear umask after processing an open or create (CVE-2020-35513) Bug Fix(es): * double free issue in filelayout_alloc_commit_info * Regression: Plantronics Device SHS2355-11 PTT button does not work after update to 7.7 * Openstack network node reports unregister_netdevice: waiting for qr- 3cec0c92-9a to bec [More…]
February 2, 2021
An update that fixes one vulnerability is now available.
February 2, 2021
An update is now available for Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
February 2, 2021
Updated ovirt-engine packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 2, 2021
Updated ovirt-engine packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which
February 2, 2021
Wind River Security Incident Affects SSNs, Passport Numbers
February 1, 2021
Hezbollah-Linked Lebanese Cedar APT Infiltrates Hundreds of Servers
February 1, 2021
SolarWinds Hack Prompts Congress to Put NSA in Encryption Hot Seat
February 1, 2021
security update
February 1, 2021
Critical Libgcrypt Crypto Bug Opens Machines to Arbitrary Code
February 1, 2021
Alleged Gaming Software Supply-Chain Attack Installs Spyware
February 1, 2021
Hacked road sign talks back after driver complains to council
February 1, 2021
This kernel-linus update is based on upstream 5.10.12 and fixes atleast the following security issue: An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local
February 1, 2021
An update that fixes three vulnerabilities is now available.
February 1, 2021
£30m in contracts awarded in Post Office’s £357m ATM overhaul
February 1, 2021
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
February 1, 2021
New Red Hat Single Sign-On 7.4.5 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 1, 2021
New Red Hat Single Sign-On 7.4.5 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 1, 2021
New Red Hat Single Sign-On 7.4.5 packages are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 1, 2021
Emotet takedown – Europol attacks “world’s most dangerous malware”
February 1, 2021
Poor password security at the British branch of Mensa?
January 31, 2021
GnuPG crypto library can be pwned during decryption – patch now!
January 31, 2021
New upstream version 10.94.00. Introduced new script pamhomography.
January 30, 2021
Fixes heap use-after-free when parsing malformed file (upstream issue [2989](https://gitlab.com/mbunkus/mkvtoolnix/-/issues/2989)).
January 30, 2021
New upstream version 2.0.24 with all reported CVE fixes available.
January 30, 2021
IRQ vector leak on x86 [XSA-360]
January 30, 2021
This is probably not the update you want. Let me be clear, it does fix the security vulnerabilities in this list: CVE-2020-16044 CVE-2021-21118 CVE-2021-21119 CVE-2021-21120 CVE-2021-21121 CVE-2021-21122 CVE-2021-21123 CVE-2021-21124 CVE-2021-21125 CVE-2021-21126 CVE-2021-21127 CVE-2021-21129 CVE-2021-21130 CVE-2021-21131 CVE-2021-21132 CVE-2021-21133 CVE-2021-21134
January 30, 2021
An update that fixes 6 vulnerabilities is now available.
January 30, 2021
An update that contains security fixes can now be installed.
January 30, 2021
An update that contains security fixes can now be installed.
January 30, 2021
An update that fixes one vulnerability is now available.
January 30, 2021
An update that solves two vulnerabilities and has one errata is now available.
January 29, 2021
WordPress Pop-Up Builder Plugin Flaw Plagues 200K Sites
January 29, 2021
Microsoft 365 Becomes Haven for BEC Innovation
January 29, 2021
Fixes startup crash.
January 29, 2021
Update to latest upstream version.
January 29, 2021
Industrial Gear at Risk from Fuji Code-Execution Bugs
January 29, 2021
Emotet botnet disrupted in global operation
The law enforcement action is one of the most significant operations against cybercriminal enterprises ever The post Emotet botnet disrupted in global operation appeared first on WeLiveSecurity
January 29, 2021
Data Privacy Day: Top tips for safe remote learning
As schools and students continue to contend with the very real cyber-risks of virtual classrooms, we share some advice for protecting children’s data and privacy The post Data Privacy Day: Top tips for safe remote learning appeared first on WeLiveSecurity
January 29, 2021
Apple iOS 14 Thwarts iMessage Attacks With BlastDoor System
January 29, 2021
The mystery of the missing Perl website
January 29, 2021
The package libgcrypt before version 1.9.1-1 is vulnerable to arbitrary code execution.
January 29, 2021
The package home-assistant before version 2021.1.4-1 is vulnerable to information disclosure.
January 29, 2021
The package mutt before version 2.0.5-1 is vulnerable to denial of service.
January 29, 2021
The package libvirt before version 1:7.0.0-1 is vulnerable to arbitrary code execution.
January 29, 2021
Considering privacy in a work from home world
January 29, 2021
An update that fixes 26 vulnerabilities is now available.
January 29, 2021
BEC scammers take advantage of “Out-of-office” Microsoft 365 users
January 29, 2021
New Firefox version (85.0) with various Wayland fixes. New NSS version (3.60).
January 28, 2021
security update
January 28, 2021
security update
January 28, 2021
Rocke Group’s Malware Now Has Worm Capabilities
January 28, 2021
Utah Ponders Making Online ‘Catfishing’ a Crime
January 28, 2021
Cybersecurity tips for university students
January 28, 2021
LogoKit Simplifies Office 365, SharePoint ‘Login’ Phishing Pages
January 28, 2021