An update for haproxy is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 4, 2020
An update that fixes two vulnerabilities is now available.
May 3, 2020
An update that fixes four vulnerabilities is now available.
May 3, 2020
Ghost blogging platform suffers security breach
May 3, 2020
A vulnerability was discovered in mailman. GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against
May 3, 2020
New seamonkey packages are available for Slackware 14.2 and -current to fix security issues.
May 3, 2020
An update that fixes 5 vulnerabilities is now available.
May 3, 2020
A security flaw was found on rubygem-json prior to 2.3.0 which was now assigned as CVE-2020-10663. This new rpm contains backport fixes for this issue.
May 3, 2020
Update to latest upstream OpenVPN 2.4.9 release. It contains a security fix for CVE-2020-11810. This security issue is quite hard to abuse, requiring a fairly precise timing attack combined with guessing a just assigned peer-id reference. If successful, only a single client just initiating a new connection will experience a denial of service situation. This […]
May 3, 2020
security update
May 2, 2020
An update that fixes two vulnerabilities is now available.
May 2, 2020
An update that solves one vulnerability and has two fixes is now available.
May 2, 2020
A vulnerability was discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. LDAP search filters with nested boolean expressions can result in denial of service (slapd daemon
May 2, 2020
The 5.6.8 stable kernel update contains a number of important fixes across the tree.
May 2, 2020
The 5.6.8 stable kernel update contains a number of important fixes across the tree.
May 1, 2020
The 5.6.8 stable kernel update contains a number of important fixes across the tree.
May 1, 2020
security update
May 1, 2020
Sextortion scammers still shilling with stolen passwords
The email includes the potential victim’s password as evidence of a hack, but there is more than meets the eye The post Sextortion scammers still shilling with stolen passwords appeared first on WeLiveSecurity
May 1, 2020
Reading Time: ~ 3 min. Anyone who has spent late nights scrolling through their social media feed or grinding on video games knows one thing is true: Technology can be a good thing, but only in moderation. Like too much of anything, spending a lot of time on the internet or social media can lead […]
May 1, 2020
Reading Time: ~ 2 min. As Oil Prices Drop, Hackers Take Aim at Producers With the recent crash in oil prices, and supply rapidly piling up, a new spear phishing campaign has begun targeting executives at several major oil producers. A massive number of emails started being distributed in late March, without the telltale signs […]
May 1, 2020
An update that solves two vulnerabilities and has one errata is now available.
May 1, 2020
Several vulnerabilities have been discovered in otrs2 (Open source Ticket Request System)
May 1, 2020
An update that fixes one vulnerability is now available.
May 1, 2020
OpenJDK 14 April CPU update
May 1, 2020
Security fix for CVE-2020-5260 and CVE-2020-11008 CVE-2020-5260 – From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.4.txt): > With a crafted URL that contains a newline in it, the credential > helper machinery can be fooled to give credential information for > a wrong host. The
May 1, 2020
Update to 2.9.10 * Fix CVE-2019-19956, CVE-2019-20388 and CVE-2020-7595
May 1, 2020
Microsoft Sway Abused in Office 365 Phishing Attack
April 30, 2020
Salt Bugs Allow Full RCE as Root on Cloud Servers
April 30, 2020
security update
April 30, 2020
security update
April 30, 2020
security update
April 30, 2020
security update
April 30, 2020
security update
April 30, 2020
ESET Threat Report
A view of the Q1 2020 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts The post ESET Threat Report appeared first on WeLiveSecurity
April 30, 2020
“Zero-click” mobile phone attacks – and how to avoid them
April 30, 2020
New Android Malware Targets PayPal, CapitalOne App Users
April 30, 2020
It was discovered that there was a integer signedness error in the miniupnpc UPnP client that could allow remote attackers to cause a denial of service attack.
April 30, 2020
An issue has been found in pound, A request smuggling vulnerability was discovered in pound, a everse proxy, load balancer and HTTPS front-end for Web servers, that may allow
April 30, 2020
Two issues have been found in w3m, WWW browsable pager with excellent tables/frames support.
April 30, 2020
An issue has been found in yodl, a pre-document language. Hanno Bock discovered that there was a buffer over-read vulnerability.
April 30, 2020
An update that fixes 6 vulnerabilities is now available.
April 30, 2020
An update that fixes one vulnerability is now available.
April 30, 2020
Smashing Security #176: Hacking hacks and university attacks
April 29, 2020
High-Severity Cisco IOS XE Flaw Threatens SD-WAN Routers
April 29, 2020
Millions of Brute-Force Attacks Hit Remote Desktop Accounts
April 29, 2020
Grandoreiro: How engorged can an EXE get?
Another in our occasional series demystifying Latin American banking trojans The post Grandoreiro: How engorged can an EXE get? appeared first on WeLiveSecurity
April 29, 2020
Critical GitLab Flaw Earns Bounty Hunter $20K
April 29, 2020
An update that solves 7 vulnerabilities and has 77 fixes is now available.
April 29, 2020
An update that solves 7 vulnerabilities and has 77 fixes is now available.
April 29, 2020
An update that solves 13 vulnerabilities and has 157 fixes is now available.
April 29, 2020
An update that solves one vulnerability and has one errata is now available.
April 29, 2020
An update that solves 6 vulnerabilities and has 8 fixes is now available.
April 29, 2020
An update that solves 13 vulnerabilities and has 157 fixes is now available.
April 29, 2020
Twitter turns off SMS-based tweeting in most countries
April 29, 2020
‘Black Rose Lucy’ is Back, Now Pushing Ransomware
April 28, 2020
security update
April 28, 2020
Critical Adobe Illustrator, Bridge and Magento Flaws Patched
April 28, 2020
Reading Time: ~ 3 min. A popular military maxim speaks to the need for redundancy and it goes like this: “Two is one and one is none.” Redundancy is also a key principle when it comes to cyber-resilience. A popular rule in data protection and disaster recovery is called the 3-2-1 backup rule. IT pros […]
April 28, 2020
WordPress Plugin Bug Opens 100K Websites to Compromise
April 28, 2020
Sophisticated Android Spyware Attack Spreads via Google Play
April 28, 2020