Menu

Latest articles

An update that fixes three vulnerabilities is now available.

**PHP version 7.3.18** (14 May 2020) **Core:** * Fixed bug php#78875 (Long filenames cause OOM and temp files are not cleaned). (**CVE-2019-11048**) (cmb) * Fixed bug php#78876 (Long variables in multipart/form-data cause OOM and temp files are not cleaned). (**CVE-2019-11048**) (cmb) * Fixed bug php#79434 (PHP 7.3 and PHP-7.4 crash with NULL-pointer dereference on !CS […]

To test its security mid-pandemic, GitLab tried phishing its own work-from-home staff. 1 in 5 fell for it

security update

Long Tail Analysis: A New Hope in the Cybercrime Battle
Amid the pandemic, using trust to fight shadow IT

Several vulnerabilities were discovered in the Dovecot email server, which could cause crashes in the submission, submission-login or lmtp services, resulting in denial of service.

Hacker leaks 2.3 million Indonesian citizenship data for download
These things may be cool, but are they safe?

In the rush to embrace IoT devices, we shouldn’t trade in our privacy and security for the added convenience The post These things may be cool, but are they safe? appeared first on WeLiveSecurity

BlockFi hacked following SIM swap attack, but says no funds lost
Dark Web hackers publish 200GB of Toll Group’s stolen corporate data
Critical Cisco Bug in Unified CCX Allows Remote Code Execution
Silent Night Banking Trojan Charges Top Dollar on the Underground
Campaign groups warn GCHQ can re-identify UK’s phones from COVID-19 contact-tracing app data
Far-right leader walks free from court after conviction for refusing to hand his phone passcode over to police
Adobe “out of band” critical patch – get your update now!
210 days prison for crypto CEO who held 13k child abuse & beastiality files
Mitsubishi hackers may have stolen details of prototype missile
Scammers target COVID-19 CARES Act relief scheme
Supreme Court Phish Targets Office 365 Credentials
Crooks Tap Google Firebase in Fresh Phishing Tactic
Chrome 83 adds DNS-over-HTTPS support and privacy tweaks
DNS this week stands for Drowning Needed Services: Design flaw in name server system can be exploited to flood machines offline
Smashing Security podcast #179: Deepfake Jay-Z, and beer apps spilling your data
Zoom continues its catch-up security sprint with new training, bug bounty tweaks and promise of crypto playbook
Remember when Securus was sued for recording 14,000 calls between prison inmates and lawyers? It just settled

Several security issues were fixed in the Linux kernel.

New upstream release with fixes for CVEs and other enhancements.

New upstream release with fixes for CVEs and other enhancements.

New upstream release with fixes for CVEs and other enhancements.

This update includes a security fix for CVE-2020-10737. Additionally, From 0.34.6: – update license on src/buffer.h – changes “/var/run” to “/run” in systemd service file (Orion Poplawski, #1834511) From 0.34.5: – apply patch from Matthias Gerstner of the SUSE security team to fix a possible race condition in the mkhomedir helper (noted above, this fixes […]

REvil hackers allegedly sold Trump’s data now targeting food distributors

security update

Why typosquatting protection from coronavirus-themed registered domains is a must
NetWalker Ransomware Gang Hunts for Top-Notch Affiliates
Fraudulent Unemployment, COVID-19 Relief Claims Earn BEC Gang Millions
Police arrests man for selling massive combolists on hacker forums
UK’s Ministry of Defence: We’ll harvest and anonymise private COVID-19 apps’ tracing data by handing it to ‘behavioural science’ arm
Beware of emails with “horrible charts” about Covid-19
Ransomware has gone nuclear: To avoid any fallout yourself, tune in online this month to hear from KnowBe4
Houseparty denied it had been hacked… while miscreants were abusing its dot-com domain name infrastructure
Verizon DBIR: Web App Attacks and Security Errors Surge
Member of global child abuse ring caught with 650,000 images, videos
Alleged Hacker Behind Massive ‘Collection 1’ Data Dump Arrested
Office 365 exposed some internal search results to other companies
FBI finally unlock shooter’s iPhones, Apple berated for not helping
blog | Why you should be using Multi-Category Security for your Linux containers
Tech’s Volkswagen moment? Trend Micro accused of cheating Microsoft driver QA by detecting test suite
Former Labour deputy leader Harriet Harman calls on UK govt to legally protect data from contact-tracing apps

The following CVE(s) were found in src:clamav package. CVE-2020-3327

You know this Land of the Free thing, yeah? Well then, why allow the FBI to trawl through America’s browsing history without a warrant?

The 5.6.13 stable kernel update contains a number of important fixes across the tree —- The 5.6.12 stable update contains a number of important fixes across the tree.

Latest upstream.

Backported patch for CVE-2018-10756.

The 5.6.13 stable kernel update contains a number of important fixes across the tree

3.8.3

Brazil’s cosmetic giant Natura leaked 192 million records with payment data

security update

The Windows 7 Postmortem: What’s at Stake
Rogue ADT tech spied on hundreds of customers in their homes via CCTV – including me, says teen girl
6 ways to be more secure in the cloud
Beer rating app reveals homes and identities of spies and military bods, warns Bellingcat
EasyJet Hackers Take Off with Travel Details for 9M Customers
Bluetooth flaw exposes countless devices to BIAS attacks

As many as 30 smartphones, laptops and other devices were tested – and all were found to be vulnerable The post Bluetooth flaw exposes countless devices to BIAS attacks appeared first on WeLiveSecurity

WolfRAT Android Malware Targets WhatsApp, Facebook Messenger
Apple “MagicPairing” for AirPods – the magic isn’t perfect yet
European supercomputers hacked to mine cryptocurrency

Several high-performance computers working on COVID-19 research have been forced offline following a string of attacks The post European supercomputers hacked to mine cryptocurrency appeared first on WeLiveSecurity

Bluetooth Bugs Allow Impersonation Attacks on Legions of Devices
Adobe Patches Critical RCE Flaw in Character Animator App
Records with data on 129 million Russian car owners sold on dark web
Cash-flashing rapper charged with money laundering for BTC-e
Firefox to tell you if sites are shortening your passwords
EasyJet hacked in a sophisticated attack; 9 million customers affected
Clever Phishing Attack Bypasses MFA to Nab Microsoft Office 365 Credentials
Easyjet hacked: 9 million people’s data accessed plus 2,200 folks’ credit card details grabbed

Reading Time: ~ 3 min. There’s a pretty common misconception among small businesses and medium-sized businesses (SMBs) that hackers only target large organizations. Unfortunately, this belief couldn’t be further from the truth. In fact, according to the most recent Verizon Data Breach Investigations Report, more than 70% of cyberattacks target small businesses. Additionally, many attacks […]

Open letter from digital rights groups to UK health secretary questions big tech’s role in NHS COVID-19 data store
EasyJet hack impacts nine million passengers
FBI warns hackers are planting card skimmers on online stores running a vulnerable Magento plugin
AT&T tracked its own sales bods using GPS, secretly charged them $135 a month to do so, lawsuit claims
GDPR what? European Parliament breach exposes data of 1000s of people
Magecart malware merrily sipped card details, evaded security scans on UK e-tailer Páramo for almost 8 months
Get your live, GIAC-certified, online cybersecurity training from SANS – available now
Verizon Data Breach Report: DoS Skyrockets, Espionage Dips
Insider threat? Pffft. Hackers on the outside are the ones mostly making off with your private biz data, says Verizon
With millions upon millions out of work in the US, here come the scammers claiming victims’ unemployment money using stolen info

This package fixes a security issue that allowed for _method query parameters to be used with GET requests. The fix is backported from Mojolicious v8.42.

This package fixes a security issue that allowed for _method query parameters to be used with GET requests. The fix is backported from Mojolicious v8.42.

Update to 8.10 release (CVE-2020-12823)

**PHP version 7.4.6** (14 May 2020) **Core:** * Fixed bug php#78434 (Generator yields no items after valid() call). (Nikita) * Fixed bug php#79477 (casting object into array creates references). (Nikita) * Fixed bug php#79514 (Memory leaks while including unexistent file). (cmb, Nikita) * Fixed bug php#79470 (PHP incompatible with 3rd party file system on demand). […]

This package fixes a security issue that allowed for _method query parameters to be used with GET requests. The fix is backported from Mojolicious v8.42.

Attorney General: We didn’t need Apple to crack terrorist’s iPhones – tho we still want iGiant to do it in future
Ransomware Gang Arrested for Spreading Locky to Hospitals
Apple’s MagicPairing for Bluetooth fails to enchant after mischief-making bugs found hiding in the stack
ProLock Ransomware Teams Up With QakBot Trojan to Infect Victims

Several security issues were fixed in the Linux kernel.

db8151dd breach- Contact management firm leaks 22 million emails
Microsoft gives Office 365 admins the heads-up: Some internal queries over weekend might have returned results from completely different orgs
The RATicate gang – implanting malware in an industry near you
Edison Mail iOS Bug Exposes Emails to Strangers