An update that solves one vulnerability and has two fixes is now available.
August 27, 2021
Winning the Cyber-Defense Race: Understand the Finish Line
August 27, 2021
An update that fixes 15 vulnerabilities is now available.
August 27, 2021
FIN8 Targets US Bank With New ‘Sardonic’ Backdoor
August 27, 2021
Man impersonates Apple support, steals 620,000 photos from iCloud accounts
The man was after sexually explicit photos and videos that he would then share online or store in his own collection The post Man impersonates Apple support, steals 620,000 photos from iCloud accounts appeared first on WeLiveSecurity
August 27, 2021
Critical Azure Cosmos DB Bug Allows Full Cloud Account Takeover
August 27, 2021
Ragnarok Ransomware Gang Bites the Dust, Releases Decryptor
August 27, 2021
Updated libass packages fix security vulnerability: libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction (CVE-2020-36430).
August 27, 2021
runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition (CVE-2021-30465).
August 27, 2021
‘Pay Ransom’ Screen? Too Late, Humpty Dumpty – Podcast
August 27, 2021
An update that solves 7 vulnerabilities and has one errata is now available.
August 27, 2021
An update that solves one vulnerability, contains two features and has 6 fixes is now available.
August 27, 2021
Big bad decryption bug in OpenSSL – but no cause for alarm
August 27, 2021
Man Sues Parents of Teens Who Hijacked Nearly $1M in Bitcoin
August 26, 2021
An update that fixes one vulnerability is now available.
August 26, 2021
F5 Bug Could Lead to Complete System Takeover
August 26, 2021
exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp (CVE-2021-31291) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE7 — SL7 x86_64 – compat-exiv2-023-0.23-2.el7_9.i686.rpm – compat-exiv2-023-0.23-2.el7_9.x86_64.rpm – compat-exiv2-023-debuginfo-0.23-2.el7_9.i686.rpm – compat- [More…]
August 26, 2021
exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp (CVE-2021-31291) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE7 — SL7 x86_64 – compat-exiv2-026-0.26-3.el7_9.i686.rpm – compat-exiv2-026-0.26-3.el7_9.x86_64.rpm – compat-exiv2-026-debuginfo-0.26-3.el7_9.i686.rpm – compat-e [More…]
August 26, 2021
Microsoft Breaks Silence on Barrage of ProxyShell Attacks
August 26, 2021
libssh could be made to crash or run programs if it received specially crafted network traffic.
August 26, 2021
An update for servicemesh and servicemesh-proxy is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 26, 2021
An update for libsndfile is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
August 26, 2021
An update for python27-babel, python27-python, python27-python-jinja2, and python27-python-pygments is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
August 26, 2021
FBI warns of OnePercent ransomware gang – what you need to know
August 26, 2021
Red Hat’s open approach to vulnerability management
August 26, 2021
Watch now: 2021 Red Hat Security Symposium on-demand
August 26, 2021
Atlassian warns of critical Confluence flaw
August 26, 2021
Cisco Issues Critical Fixes for High-End Nexus Gear
August 25, 2021
security update
August 25, 2021
Win10 Admin Rights Tossed Off by Yet Another Plug-In
August 25, 2021
US Media, Retailers Targeted by New SparklingGoblin APT
August 25, 2021
USN-5037-1 caused a regression in Firefox.
August 25, 2021
California Man Hacked iCloud Accounts to Steal Nude Photos
August 25, 2021
Building a DevSecOps culture and shifting security left
August 25, 2021
An update that fixes one vulnerability is now available.
August 25, 2021
An update that fixes two vulnerabilities is now available.
August 25, 2021
An update that fixes one vulnerability is now available.
August 25, 2021
The container suse/sles12sp5 was updated. The following patches have been included in this update:
August 25, 2021
The container suse/sles12sp4 was updated. The following patches have been included in this update:
August 25, 2021
security update
August 24, 2021
security update
August 24, 2021
Microsoft Power Apps misconfiguration exposes millions of records
The caches of data that were publicly accessible included names, email addresses and social security numbers The post Microsoft Power Apps misconfiguration exposes millions of records appeared first on WeLiveSecurity
August 24, 2021
Poly Network Recoups $610M Stolen from DeFi Platform
August 24, 2021
The SideWalk may be as dangerous as the CROSSWALK
Meet SparklingGoblin, a member of the Winnti family The post The SideWalk may be as dangerous as the CROSSWALK appeared first on WeLiveSecurity
August 24, 2021
Pegasus Spyware Uses iPhone Zero-Click iMessage Zero-Day
August 24, 2021
How a gaming mouse can get you Windows superpowers!
August 24, 2021
Custom WhatsApp Build Delivers Triada Malware
August 24, 2021
Several security issues were fixed in OpenSSL.
August 24, 2021
Effective Threat-Hunting Queries in a Redacted World
August 24, 2021
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. CVE-2021-3711
August 24, 2021
What You Need to Know About Linux Rootkits>
August 24, 2021
Microsoft, Google partner on eBPF
August 24, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
August 24, 2021
Several security issues were fixed in the Linux kernel.
August 24, 2021
update to latest upstream release -fixes CVE-2021-38385
August 23, 2021
upstream release 1.13.1, including fix for CVE-2021-23358
August 23, 2021
ProxyShell Attacks Pummel Unpatched Exchange Servers
August 23, 2021
Windows 10 Admin Rights Gobbled by Razer Devices
August 23, 2021
Managing Privileged Access to Secure the Post-COVID Perimeter
August 23, 2021
Attackers Actively Exploiting Realtek SDK Flaws
August 23, 2021
An update that solves one vulnerability and has one errata is now available.
August 23, 2021
An update that fixes one vulnerability is now available.
August 23, 2021
An update that fixes 7 vulnerabilities is now available.
August 23, 2021
An update that solves two vulnerabilities and has three fixes is now available.
August 23, 2021
An update that solves two vulnerabilities and has two fixes is now available.
August 23, 2021
An update that fixes one vulnerability is now available.
August 23, 2021
An update that fixes one vulnerability is now available.
August 22, 2021
An issue has been found in ircii, an Internet Relay Chat client. A crafted CTCP UTC message could allow an attacker to disconnect the victim from an IRC server due to a segmentation fault and client crash.
August 22, 2021
Sync with F34 for CVE fixes.
August 21, 2021
Update to version 2.2.1. Resolves CVE-2021-38512 / RUSTSEC-2021-0081.
August 21, 2021
An update that fixes four vulnerabilities is now available.
August 21, 2021
T-Mobile confirms fifth data breach in three years
August 21, 2021
An update that fixes one vulnerability is now available.
August 21, 2021
An update that fixes one vulnerability is now available.
August 20, 2021
An update that fixes 7 vulnerabilities is now available.
August 20, 2021
The 5.13.12 stable kernel update contains a number of important fixes across the tree.
August 20, 2021