Menu

Latest articles

Two issues have been found in golang-1.7, a Go programming language compiler version 1.7

A heap-based buffer overflow flaw was discovered in MuPDF, a lightweight PDF viewer, which may result in denial of service or the execution of arbitrary code if malformed documents are opened.

security update

IBM Power9 processors beset by Cardiac Osprey data-leaking flaw as Spectre still haunts speculative chips
Google Services Weaponized to Bypass Security in Phishing, BEC Campaigns
VMware Fixes Critical Flaw in ESXi Hypervisor
Good Heavens! 10M Impacted in Pray.com Data Exposure
End to end encryption? In Android’s default messaging app? Don’t worry, nobody else noticed either
New Grelos Skimmer Variants Siphon Credit Card Data
The worst passwords of 2020: Is it time to change yours?

They’re supremely easy to remember, as well as easy to crack. Here’s how to improve your password security. The post The worst passwords of 2020: Is it time to change yours? appeared first on WeLiveSecurity

Facebook patches Messenger audio snooping bug – update now!
Robot vacuum cleaners can eavesdrop on your conversations, researchers reveal
Facebook Messenger Bug Allows Spying on Android Users

An update that fixes three vulnerabilities is now available.

An update that fixes 16 vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

An update that solves two vulnerabilities and has 12 fixes is now available.

NCSC’s London HQ was chosen because GCHQ spies panicked at the prospect of grubby Shoreditch offices
A guide to security technologies in Red Hat Enterprise Linux

An update that fixes three vulnerabilities is now available.

An update that fixes 12 vulnerabilities is now available.

UK reveals new ‘National Cyber Force’, announces Space Command and mysterious AI agency
You can protect the company from hackers, but can you protect the company from the CEO?
VMware reveals critical hypervisor bugs found at Chinese white hat hacking comp. One lets guests run code on hosts
In 2016 Australia’s online census failed. Preparations for the 2021 edition have been rated ‘partly effective’
Robot Vacuums Suck Up Sensitive Audio in ‘LidarPhone’ Hack
German COVID-19 Contact-Tracing Vulnerability Allowed RCE
US Senate approves deepfake bill to defend against manipulated media

security update

GO SMS Pro Android App Exposes Private Photos, Videos and Messages
Tis’ the Season for Online Holiday Shopping; and Phishing
AWS includes open-source Suricata for stateful inspection with Network Firewall service
Code42 Incydr Series: Protect IP with Code42 Incydr
Get the free Security Intelligence Handbook from Recorded Future
Food-Supply Giant Americold Admits Cyberattack
IoT Cybersecurity Improvement Act Passed, Heads to President’s Desk
Cyberup campaign: 80% of infosec pros fear they might fall foul of UK’s outdated Computer Misuse Act
APT Exploits Microsoft Zerologon Bug: Targets Japanese Companies
Cybercriminals Batter Automakers With Ransomware, IP Theft Cyberattacks
Egregor ransomware attack hijacks printers to spit out ransom notes

An update that solves one vulnerability and has two fixes is now available.

An update that solves one vulnerability and has two fixes is now available.

An update that solves one vulnerability, contains one feature and has two fixes is now available.

An update that fixes one vulnerability is now available.

An update that solves one vulnerability and has one errata is now available.

An update that solves one vulnerability and has one errata is now available.

In any other year, many of us would be gearing up for airline travel, big family dinners, cocktail hours or potlucks with friends, and much more. But with all the challenges this year has brought in terms of how we work and connect during a global pandemic, I’m guessing all our plans look a little […]

How security and compliance automation can help achieve a more secure hybrid cloud
Anti-adversarial machine learning defenses start to take root
Compsci guru wants ‘right to be forgotten’ for old email, urges Google and friends to expire, reveal crypto-keys
China-linked hacking gang ‘APT10’ named as probable actor behind extended attacks on Japanese companies

It’s common for savvy online shoppers to check third-party reviews before making an online purchasing decision. That’s smart, but testing the efficacy of security software can be a bit more difficult than determining if a restaurant had decent service or if clothing brand’s products are true to size. So, with the arguably more significant consequences […]

Smashing Security podcast #205: Zoom password pinching and Parler problems
Reeling from ransomware attack, Managed.com takes down its entire web hosting infrastructure
Widespread Scans Underway for RCE Bugs in WordPress Websites
Cryptocurrency exchange Liquid suffers security breach, user data exposed

security update

LAPD Bans Facial Recognition, Citing Privacy Concerns
Cisco Webex ‘Ghost’ Flaw Opens Meetings to Snooping
Heads up: A new strain of card-skimming Grelos malware is on the loose

An update for firefox is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

How AI Is powering a new generation of cyber-attacks
Bumble bugs could have exposed personal data of all users

The information at risk of theft due to API flaws included people’s pictures, locations, dating preferences and Facebook data The post Bumble bugs could have exposed personal data of all users appeared first on WeLiveSecurity

Google Chrome 87 Closes High-Severity ‘NAT Slipstreaming’ Hole
The ones who brought you Let’s Encrypt, bring you: Tools for gathering anonymized app usage metrics from netizens
Firing of CISA Chief Christopher Krebs Widely Condemned
Test and Trace chief Dido Harding prompted to self-isolate by NHS COVID-19 app
You call that DevSecOps? Why your DevSecOps practice may be falling short
Hackers steal 46 million Animal Jam account records, dating back 10 years

Release of OpenShift Serverless 1.11.0 2. Description: Red Hat OpenShift Serverless 1.11.0 is a generally available release of the OpenShift Serverless Operator. This version of the OpenShift Serverless

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

No, the creator of cURL didn’t morph into Elon Musk and give away Bitcoins. But his hijacked Twitter page tried to
Trump fires cybersecurity boss Chris Krebs for doing his job: Securing the election and telling the truth about it
Israeli spyware maker NSO channels Hollywood spy thrillers in appeal for legal immunity in WhatsApp battle
Multiple Industrial Control System Vendors Warn of Critical Bugs
Defining Security Policies to Manage Remote Insider Threats
ThreatList: Pharma Mobile Phishing Attacks Turn to Malware
COVID-19 Antigen Firm Hit by Malware Attack
Microsoft brings Trusted Platform Module functionality directly to CPUs under securo-silicon architecture Pluton
A visit to a crafted webpage would have been enough for a bad guy to munch all your Firefox for Android cookies
Zoom Takes on Zoom-Bombers Following FTC Settlement
Lazarus supply‑chain attack in South Korea

ESET researchers uncover a novel Lazarus supply-chain attack leveraging WIZVERA VeraPort software The post Lazarus supply‑chain attack in South Korea appeared first on WeLiveSecurity

Cisco Patches Critical Flaw After PoC Exploit Code Release
Legendary hacker and L0pht member Peiter Zatko joins Twitter as security chief
Some Apple Apps on macOS Big Sur Bypass Content Filters, VPNs

An update that fixes one vulnerability is now available.

An update that fixes 29 vulnerabilities is now available.

An update that fixes 8 vulnerabilities is now available.

An update for firefox is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

An update for firefox is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which

Kerberos could be made to consume unlimited resources if it received specially crafted ASN.1.

Apple’s privacy pledges: We sent dev checks over plain HTTP, logged IP addresses. We bypass firewall apps
End the year as you mean to go on… with world-class cyber-security training
Micropayments company Coil distributes new privacy policy with email that puts users’ addresses in the ‘To:’ field
Cult videogame company Capcom pays a big round $0.00 to ransomware crooks
Dating Site Bumble Leaves Swipes Unsecured for 100M Users
Attackers Target Porn Site Goers in ‘Malsmoke’ Zloader Attack