security update
August 14, 2021
The recent fix for CVE-2021-33574 released in MGASA-2021-0308 introduced a NULL pointer dereference that will result in segmentation fault. This update adds the missing NULL pointer check to resolve this issue. References:
August 14, 2021
Updated firefox packages fix security vulnerabilities: Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash (CVE-2021-29980).
August 14, 2021
Updated mariadb packages fix security vulnerabilities: A security issue has been found in the InnoDB component of MariaDB before version 10.6.4. A difficult to exploit vulnerability allows a high privileged attacker with network access via multiple protocols to
August 14, 2021
Updated dino packages fix security vulnerability: Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new files) via URI-encoded path separators (CVE-2021-33896).
August 14, 2021
Updated webkit2 packages fix security vulnerabilities: A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further
August 14, 2021
Updated libvirt packages fix security vulnerability: insecure sVirt label generation (CVE-2021-3631). References:
August 14, 2021
Cyberattackers Embrace CAPTCHAs to Hide Phishing, Malware
August 13, 2021
SolarWinds 2.0 Could Ignite Financial Crisis – Podcast
August 13, 2021
Exchange Servers Under Active Attack via ProxyShell Bugs
August 13, 2021
Examining threats to device security in the hybrid workplace
As employees split their time between office and off-site work, there’s a greater potential for company devices and data to fall into the wrong hands The post Examining threats to device security in the hybrid workplace appeared first on WeLiveSecurity
August 13, 2021
WordPress Sites Abused in Aggah Spear-Phishing Campaign
August 13, 2021
An update that fixes three vulnerabilities is now available.
August 13, 2021
An update that fixes one vulnerability is now available.
August 13, 2021
Several vulnerabilities were fixed in curl, a client-side URL transfer library. CVE-2021-22898
August 13, 2021
Fedora 33 Fixed 1984005 Fedora 34 – Fixed CVE-2021-36770 – Ensure that UTF-16 decode always includes a trailing NUL. – Replace non-ASCII apostrophes w/ x27, which were introduced in #155 – Addressed: find_encoding returns Internal encoding `Unicode` is no longer a valid encoding name.
August 12, 2021
Rogue Marketplace AlphaBay Reboots
August 12, 2021
security update
August 12, 2021
security update
August 12, 2021
Black Hat: Novel DNS Hack Spills Confidential Corp Data
August 12, 2021
The system could be made to crash or run programs as an administrator.
August 12, 2021
Lukas Euler discovered a path traversal vulnerability in commons-io, a Java library for common useful IO related classes. When invoking the method FileNameUtils.normalize with an improper input string, like “//../foo”, or “\..foo”, the result would be the same value, thus possibly providing access
August 12, 2021
AdLoad Malware 2021 Samples Skate Past Apple XProtect
August 12, 2021
IISerpent: Malware‑driven SEO fraud as a service
The last in our series on IIS threats introduces a malicious IIS extension used to manipulate page rankings for third-party websites The post IISerpent: Malware‑driven SEO fraud as a service appeared first on WeLiveSecurity
August 12, 2021
Ransomware Payments Explode Amid ‘Quadruple Extortion’
August 12, 2021
Accenture hit by apparent ransomware attack
August 12, 2021
QR Code Scammers Get Creative with Bitcoin ATMs
August 12, 2021
Microsoft Warns: Another Unpatched PrintNightmare Zero-Day
August 12, 2021
An update that solves 5 vulnerabilities, contains one feature and has one errata is now available.
August 12, 2021
An update that fixes 5 vulnerabilities is now available.
August 12, 2021
An update that fixes one vulnerability, contains one feature is now available.
August 12, 2021
USN-3809-1 introduced a regression in OpenSSH.
August 12, 2021
Singaporean telco leaked personal data of over 57,000 customers
August 12, 2021
An update for .NET 5.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
August 12, 2021
An update for rh-dotnet50-dotnet is now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 12, 2021
Accenture Confirms LockBit Ransomware Attack
August 11, 2021
NSA Watchdog Will Review Tucker Carlson Spying Claims
August 11, 2021
Ransomware runs rampant, so how can you combat this threat?
A new paper explains how ransomware has become one of the top cyberthreats of the day and how your organization can avoid becoming the next victim The post Ransomware runs rampant, so how can you combat this threat? appeared first on WeLiveSecurity
August 11, 2021
‘Friends’ Reunion Anchors Video Swindle
August 11, 2021
Kaseya’s ‘Master Key’ to REvil Attack Leaked Online
August 11, 2021
SAP Patches Nine Critical & High-Severity Bugs
August 11, 2021
Crypto Hack Earned Crooks $600 Million
August 11, 2021
Philipp Jeitner and Haya Shulman discovered a stack-based buffer overflow in libspf2, a library for validating mail senders with SPF, which could result in denial of service, or potentially execution of arbitrary code when processing a specially crafted SPF record.
August 11, 2021
Philipp Jeitner and Haya Shulman discovered a stack-based buffer overflow in libspf2, a library for validating mail senders with SPF, which could result in denial of service, or potentially execution of arbitrary code when processing a specially crafted SPF record.
August 11, 2021
Red Hat OpenShift Container Platform release 4.7.23 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score,
August 11, 2021
An update that fixes 27 vulnerabilities is now available.
August 11, 2021
Connected Farms Easy Pickings for Global Food Supply-Chain Hack
August 10, 2021
Security fix for CVE-2021-34558
August 10, 2021
Actively Exploited Windows Zero-Day Gets a Patch
August 10, 2021
Security fix for CVE-2021-34558
August 10, 2021
security update
August 10, 2021
The issue at the heart of ransomware insurance will be familiar to most parents of young children: rewarding bad behavior only invites more of the same, so it’s generally not a good idea. But critics of the ransomware insurance industry argue that’s exactly what the practice does. Ransomware insurance has by now long been suspected […]
August 10, 2021
eCh0raix Ransomware Variant Targets QNAP, Synology NAS Devices
August 10, 2021
Deepfakes – the bot made me do it
As fraud involving highly believable synthetic media soars, what can you do to avoid getting scammed? The post Deepfakes – the bot made me do it appeared first on WeLiveSecurity
August 10, 2021
DEF CON 29: Satellite hacking 101
How peering into the innards of a future satellite can make cybersecurity in space more palatable The post DEF CON 29: Satellite hacking 101 appeared first on WeLiveSecurity
August 10, 2021
IISpy: A complex server‑side backdoor with anti‑forensic features
The second in our series on IIS threats dissects a malicious IIS extension that employs nifty tricks in an attempt to secure long-term espionage on the compromised servers The post IISpy: A complex server‑side backdoor with anti‑forensic features appeared first on WeLiveSecurity
August 10, 2021
Chaos Malware Walks Line Between Ransomware and Wiper
August 10, 2021
Fuzz Off: How to Shake Up Code to Get It Right – Podcast
August 10, 2021
Learn how to build a culture of security with 1Password
August 10, 2021
Cutting Through the Noise from Daily Alerts
August 10, 2021
1M Stolen Credit Cards Hit Dark Web for Free
August 10, 2021
Red Hat OpenShift Virtualization release 2.6.6 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
August 10, 2021
Tails 4.21 Is Out – Here’s What’s New & How To Get Started>
August 10, 2021
An update that fixes 27 vulnerabilities is now available.
August 10, 2021
An update that fixes two vulnerabilities is now available.
August 10, 2021
An update that solves 7 vulnerabilities and has 58 fixes is now available.
August 10, 2021
An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
August 10, 2021
An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which
August 10, 2021
Solving authorization for software developers
August 10, 2021
security update
August 10, 2021
security update
August 10, 2021