August 27, 2020
New Chrome, Firefox versions fix security bugs, bring productivity features
Chrome gets a new way of managing tabs while Firefox now features a new add-ons blocklist The post New Chrome, Firefox versions fix security bugs, bring productivity features appeared first on WeLiveSecurity
August 27, 2020
Facebook Hits Back At Apple’s iOS 14 Privacy Update
August 27, 2020
The handler for the XkbSetNames request does not validate the request length before accessing its contents (CVE-2020-14345). An integer underflow exists in the handler for the XIChangeHierarchy request (CVE-2020-14346).
August 27, 2020
There is an integer overflow and a double free vulnerability in the way LibX11 handles locales. The integer overflow is a necessary precursor to the double free (CVE-2020-14363). References:
August 27, 2020
By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed (CVE-2020-15664).
August 27, 2020
The read_xbm_body function in gui/image/qxbmhandler.cpp has a buffer over-read (CVE-2020-17507). References: – https://bugs.mageia.org/show_bug.cgi?id=27173
August 27, 2020
NSS could be made to expose sensitive information if it received a specially crafted input.
August 27, 2020
Russian cybercrime suspect arrested in $1m ransomware conspiracy
August 27, 2020
An update is now available for CloudForms Management Engine 5.10. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
August 27, 2020
Revamped Qbot Trojan Packs New Punch: Hijacks Email Threads
August 27, 2020
DDoS downs New Zealand stock exchange for third consecutive day
August 27, 2020
security update
August 27, 2020
security update
August 26, 2020
“Chrome considered harmful” – the Law of Unintended Consequences
August 26, 2020
Hackers Exploit Autodesk Flaw in Recent Cyberespionage Attack
August 26, 2020
Disinformation Spurs a Thriving Industry as U.S. Election Looms
August 26, 2020
An update that fixes one vulnerability is now available.
August 26, 2020
Medical Data Leaked on GitHub Due to Developer Errors
August 26, 2020
It was reported that the Lua module for Nginx, a high-performance web and reverse proxy server, is prone to a HTTP request smuggling vulnerability.
August 26, 2020
Mozilla: Attacker-induced prompt for extension installation (CVE-2020-15664) * Mozilla: Use-After-Free when aborting an operation (CVE-2020-15669) SL6 x86_64 firefox-68.12.0-1.el6_10.x86_64.rpm firefox-debuginfo-68.12.0-1.el6_10.x86_64.rpm firefox-68.12.0-1.el6_10.i686.rpm firefox-debuginfo-68.12.0-1.el6_10.i686.rpm i386 firefox-68.12.0-1.el6_10.i686.rpm firefox-d [More…]
August 26, 2020
How to Write a Cybersecurity Playbook During a Pandemic
August 26, 2020
Several security issues were fixed in libmysofa.
August 26, 2020
An update that fixes three vulnerabilities is now available.
August 26, 2020
– New upstream version (80.0)
August 26, 2020
security update
August 26, 2020
Four More Bugs Patched in Microsoft’s Azure Sphere IoT Platform
August 25, 2020
FBI, CISA warn of spike in vishing attacks
Cybercriminals increasingly take aim at teleworkers, setting up malicious duplicates of companies’ internal VPN login pages The post FBI, CISA warn of spike in vishing attacks appeared first on WeLiveSecurity
August 25, 2020
Cyber attacks: Several Canadian government services disrupted
Several services from the Canadian government, including the national revenue agency, had to be shut down following a series of credential stuffing cyberattacks. The post Cyber attacks: Several Canadian government services disrupted appeared first on WeLiveSecurity
August 25, 2020
How to secure your TikTok account
From keeping your account safe to curating who can view your liked content, we look at how you can increase your security and privacy on TikTok The post How to secure your TikTok account appeared first on WeLiveSecurity
August 25, 2020
Safari Bug Revealed After Apple Takes Nearly a Year to Patch
August 25, 2020
Lazarus Group Targets Cryptocurrency Firms Via LinkedIn Messages
August 25, 2020
An update that solves one vulnerability and has one errata is now available.
August 25, 2020
An update that fixes one vulnerability is now available.
August 25, 2020
An update that solves one vulnerability and has one errata is now available.
August 25, 2020
An update that solves one vulnerability and has one errata is now available.
August 25, 2020
An update that solves one vulnerability and has one errata is now available.
August 25, 2020
An update that solves one vulnerability and has one errata is now available.
August 25, 2020
Google Fixes High-Severity Chrome Browser Code Execution Bug
August 24, 2020
security update
August 24, 2020
An update that fixes 21 vulnerabilities is now available.
August 24, 2020
Several security issues were fixed in Net-SNMP.
August 24, 2020
APIs Are the Next Frontier in Cybercrime
August 24, 2020
An update that fixes one vulnerability is now available.
August 24, 2020
An update that solves one vulnerability and has two fixes is now available.
August 24, 2020
An update for openshift-enterprise-hyperkube-container is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
August 24, 2020
An update for jenkins and openshift is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 24, 2020
Chrony’s method of opening its PID file could allow a compromised chrony user account to overwrite files in certain parts of the filesystem with chrony’s PID, using a symlink attack (CVE-2020-14367). References:
August 23, 2020
Reading Time: ~ 2 min. Ransomware Attack Targets Major Cruise Line Officials for Carnival Cruises have confirmed that a portion of their IT systems were encrypted following a cyberattack identified over the weekend. The company also revealed that sensitive information for both employees and customers was illicitly accessed, though they did not admit to what […]
August 23, 2020
Security fix for CVE-2020-14367
August 22, 2020
Several vulnerabilities have been discovered in sqlite3, a C library that implements an SQL database engine. CVE-2018-8740
August 22, 2020
Several memory leaks were discovered in proftpd-dfsg, a versatile, virtual-hosting FTP daemon, when mod_facl or mod_sftp is used which could lead to memory exhaustion and a denial-of-service.
August 22, 2020
Jason A. Donenfeld found an ansi escape sequence injection into software-properties, a manager for apt repository sources. An attacker could manipulate the screen of a user prompted to install an additional repository (PPA).
August 22, 2020
News Wrap: AWS Cryptojacking Worm, IBM Privacy Lawsuit and More
August 22, 2020
Multiple vulnerabilities were discovered in Python2.7, an interactive high-level object-oriented language.
August 22, 2020
Tim Starling discovered two vulnerabilities in firejail, a sandbox program to restrict the running environment of untrusted applications.
August 22, 2020
An update that fixes two vulnerabilities is now available.
August 22, 2020
An update that fixes two vulnerabilities is now available.
August 22, 2020
Appearing on the Easy Prey podcast
August 21, 2020
Outlook “mail issues” phishing – don’t fall for this scam!
August 21, 2020
University of Utah Pays $457K After Ransomware Attack
August 21, 2020
An update that solves one vulnerability and has 22 fixes is now available.
August 21, 2020
An update that solves one vulnerability and has 19 fixes is now available.
August 21, 2020
Researchers Sound Alarm Over Malicious AWS Community AMIs
August 21, 2020
Using AI to fight hand-crafted Business Email Compromise
August 21, 2020
Several security issues were fixed in Bind.
August 21, 2020
An update that solves 7 vulnerabilities and has 109 fixes is now available.
August 21, 2020
The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function. (CVE-2020-14148) References:
August 20, 2020
– fix expired pointer dereference via multi API with `CURLOPT_CONNECT_ONLY` option set (CVE-2020-8231)
August 20, 2020
IBM Settles Lawsuit Over Weather Channel App Data Privacy
August 20, 2020
How to prepare and protect your digital legacy
It’s never too soon to plan for what will happen to your digital presence after you pass away The post How to prepare and protect your digital legacy appeared first on WeLiveSecurity
August 20, 2020
Multiple vulnerabilities were found in ghostscript, an interpreter for the PostScript language and for PDF, allowing an attacker to escalate privileges and cause denial of service via crafted PS/EPS/PDF files.
August 20, 2020
An update that solves two vulnerabilities and has 6 fixes is now available.
August 20, 2020