August 9, 2021
‘Glowworm’ Attack Turns Power Light Flickers into Audio
August 9, 2021
Auth Bypass Bug Exploited, Affecting Millions of Routers
August 9, 2021
Android Malware ‘FlyTrap’ Hijacks Facebook Accounts
August 9, 2021
Perl could be made to run arbitrary programs.
August 9, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2021:3028
August 9, 2021
Upstream details at : https://access.redhat.com/errata/RHSA-2021:1002
August 9, 2021
Black Hat USA 2021 & DEF CON 29 Highlights & Key Takeaways>
August 9, 2021
An update that fixes one vulnerability is now available.
August 9, 2021
This update provides a new upstream version.
August 9, 2021
An update for microcode_ctl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 9, 2021
security update
August 8, 2021
Several vulnerabilities were discovered in Bluez, the Linux Bluetooth protocol stack. CVE-2020-26558 / CVE-2021-0129
August 8, 2021
– Resolves: rhbz#1985153 – mod_auth_openidc-2.4.9 is available – Resolves: rhbz#1986103 – CVE-2021-32786 mod_auth_openidc: open redirect in oidc_validate_redirect_url() – Resolves: rhbz#1986396 – CVE-2021-32791 mod_auth_openidc: hardcoded static IV and AAD with a reused key in AES GCM encryption – Resolves:
August 7, 2021
This kernel-linus update is based on upstream 5.10.56 and fixes atleast the following security issues: In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store
August 7, 2021
This kernel update is based on upstream 5.10.56 and fixes atleast the following security issues: In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store
August 7, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
August 7, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
August 7, 2021
The container suse/sle15 was updated. The following patches have been included in this update:
August 7, 2021
Several vulnerabilities have been found in Ansible, a configuration management, deployment and task execution system, which could result in information disclosure or argument injection. In addition a race condition in become_user was fixed.
August 7, 2021
security update
August 7, 2021
Golang Cryptomining Worm Offers 15% Speed Boost
August 6, 2021
Amazon Kindle Vulnerable to Malicious EBooks
August 6, 2021
A cyber resilience strategy “I have used a lot of different security products over the years, and I get approached by a lot of vendors,” says Pedro Nuñez. As president and CEO of New England based MSP IT Management Solutions, Nuñez is always on the lookout for products that go beyond just a traditional security […]
August 6, 2021
A Global Challenge The steady stream of cyberattacks seen throughout 2019 turned into a torrent over the last year – ransomware, phishing scams and data breaches are now at an all-time high. Of course, the growing cybersecurity threat isn’t contained to just one country. The effects are being felt the world over. The National Cybersecurity […]
August 6, 2021
Is your personal information being abused?
Drowning in spam? A study presented at Black Hat USA 2021 examines if sharing your personal information with major companies contributes to the deluge of nuisance emails, texts and phone calls. The post Is your personal information being abused? appeared first on WeLiveSecurity
August 6, 2021
Why cloud security is the key to unlocking value from hybrid working
How can companies and employees who start to adapt to hybrid working practices protect themselves against cloud security threats? The post Why cloud security is the key to unlocking value from hybrid working appeared first on WeLiveSecurity
August 6, 2021
Critical Cisco Bug in VPN Routers Allows Remote Takeover
August 6, 2021
Scanning for Child Sexual Abuse Material (CSAM) on iPhones
August 6, 2021
Angry Affiliate Leaks Conti Ransomware Gang Playbook
August 6, 2021
Conti ransomware affiliate goes rogue, leaks “gang data”
August 6, 2021
An update that fixes two vulnerabilities is now available.
August 6, 2021
Updated exiv2 packages fix security vulnerability: A heap-based buffer overflow vulnerability in jp2image.cpp of Exiv2 0.27.3 allows attackers to cause a denial of service (DOS) via crafted metadata (CVE-2021-31291).
August 6, 2021
Updated bluez packages fix security vulnerability: Adapter incorrectly restores Discoverable state after powered down (CVE-2021-3658).
August 6, 2021
Updated nodejs packages fix security vulnerability: Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior (CVE-2021-22930)
August 6, 2021
Updated php-pear packages fix security vulnerability: In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive (CVE-2021-32610).
August 6, 2021
Updated libsndfile packages fix security vulnerability: A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file (CVE-2021-3246).
August 6, 2021
South Korea to test grenade-launching drones
August 6, 2021
Webroot put forward another strong performance in its latest round of independent third-party testing, besting all competitors and taking home the highest overall score. In taking the highest score in the category for 2021, Webroot beat out competitors including BitDefender, McAfee® and ESET® endpoint security solutions. In the report, the company conducted objective testing of […]
August 6, 2021
In March of 2020 schools throughout the United Kingdom closed their doors to try to stem the spread of the coronavirus. In addition to disruptions to the lives of students and their families, the pandemic put unprecedented pressure on IT departments across the UK and wider world. Notoriously strapped for resources, many schools’ IT departments […]
August 5, 2021
Auditors: Feds’ Cybersecurity Gets the Dunce Cap
August 5, 2021
security update
August 5, 2021
Black Hat 2021 – non‑virtual edition
How is Black Hat USA 2021 different from the past editions of the conference and what kinds of themes may steal the show this year? The post Black Hat 2021 – non‑virtual edition appeared first on WeLiveSecurity
August 5, 2021
MacOS Flaw in Telegram Retrieves Deleted Messages
August 5, 2021
Black Hat: Charming Kitten Leaves More Paw Prints
August 5, 2021
An update that fixes four vulnerabilities is now available.
August 5, 2021
This update provides a new upstream version.
August 5, 2021
An update that fixes one vulnerability is now available.
August 5, 2021
An update that solves four vulnerabilities and has one errata is now available.
August 5, 2021
An update that fixes 6 vulnerabilities is now available.
August 5, 2021
An update that solves four vulnerabilities and has two fixes is now available.
August 5, 2021
‘I’m Calling About Your Car Warranty’, aka PII Hijinx
August 4, 2021
Black Hat: Let’s All Help Cyber-Immunize Each Other
August 4, 2021
Phishing Campaign Dangles SharePoint File-Shares
August 4, 2021
openCryptoki could be made to allow invalid curve attacks if it received a specially crafted key.
August 4, 2021
Best File & Disk Encryption Tools for Linux>
August 4, 2021
PEAR could be made to overwrite files as the administrator.
August 4, 2021
Several security issues were fixed in Perl DBI module.
August 4, 2021
Legacy EDR. Yes, it’s a thing
August 4, 2021
We COVID-Clicked on Garbage, Report Finds: Podcast
August 4, 2021
An update that fixes four vulnerabilities is now available.
August 4, 2021
Security fix for CVE-2021-34558
August 3, 2021
Security fix for CVE-2021-34558
August 3, 2021
Ransomware Volumes Hit Record Highs as 2021 Wears On
August 3, 2021
On course for a good hacking
A story of how easily hackers could hit a hole-in-one with the computer network of a premier golf club in the UK. The post On course for a good hacking appeared first on WeLiveSecurity
August 3, 2021
Raccoon Stealer Bundles Malware, Propagates Via Google SEO
August 3, 2021
‘DeadRinger’ Targeted Exchange Servers Long Before Discovery
August 3, 2021
The package chromium before version 92.0.4515.131-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and content spoofing.
August 3, 2021
The package nodejs-lts-erbium before version 12.22.4-1 is vulnerable to arbitrary code execution.
August 3, 2021
The package nodejs-lts-fermium before version 14.17.4-1 is vulnerable to arbitrary code execution.
August 3, 2021
The package nodejs before version 16.6.0-1 is vulnerable to arbitrary code execution.
August 3, 2021
lasso: XML signature wrapping vulnerability when parsing SAML responses (CVE-2021-28091) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE — SL7 x86_64 – lasso-2.5.1-8.el7_9.i686.rpm – lasso-2.5.1-8.el7_9.x86_64.rpm – lasso-debuginfo-2.5.1-8.el7_9.i686.rpm – lasso-debuginfo-2.5.1-8.el7_9 [More…]
August 3, 2021
An update for glibc is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
August 3, 2021