March 24, 2020
Facebook Messenger may ban mass-forwarding of messages
March 24, 2020
Russia’s FSB wanted its own IoT botnet
March 24, 2020
An update for openshift-enterprise-template-service-broker-operator-container is now available for Red Hat OpenShift Container Platform 4.3. Red Hat Product Security has rated this update as having a security impact
March 24, 2020
An update for openshift-enterprise-builder-container, openshift-enterprise-cli-container, and ose-cli-artifacts-container is now available for Red Hat OpenShift Container Platform 4.3. Red Hat Product Security has rated this update as having a security impact
March 24, 2020
Feds shut down bogus COVID-19 vaccine site
March 24, 2020
An update for openshift-clients is now available for Red Hat OpenShift Container Platform 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
March 24, 2020
An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6, 7, and 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 24, 2020
Apache Tomcat Exploit Poised to Pounce, Stealing Files
March 23, 2020
Hackers Actively Exploit 0-Day in CCTV Camera Hardware
March 23, 2020
security update
March 23, 2020
Microsoft Warns of Critical Windows Zero-Day Flaws
March 23, 2020
Fake Coronavirus ‘Vaccine’ Website Busted in DoJ Takedown
March 23, 2020
The good, the bad and the plain ugly
A prolific ransomware gang vows to dial back its campaigns and spare healthcare organizations altogether during the COVID-19 crisis. It’s no cause for celebration. The post The good, the bad and the plain ugly appeared first on WeLiveSecurity
March 23, 2020
Cisco issues urgent fixes for SD-WAN router flaws
March 23, 2020
Firefox is dropping FTP support
March 23, 2020
Several security issues were fixed in Vim.
March 23, 2020
An update for samba is now available for Red Hat Gluster Storage 3.5 on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
March 23, 2020
An update for runc is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
March 23, 2020
Red Hat AMQ Streams 1.4.0 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 23, 2020
An update for devtoolset-8-gcc is now available for Red Hat Developer Toolset 8 for Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
March 23, 2020
An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 23, 2020
The following packages CVE(s) were reported against phpmyadmin. CVE-2020-10802
March 22, 2020
The Dance of the Pope virus hoax
March 22, 2020
An update that fixes 7 vulnerabilities is now available.
March 22, 2020
The following CVE(s) were reported against jackson-databind. CVE-2020-10672
March 22, 2020
5 Best Internet Service Locators
March 22, 2020
An update that fixes 9 vulnerabilities is now available.
March 22, 2020
An update that fixes 9 vulnerabilities is now available.
March 22, 2020
security update
March 21, 2020
security update
March 21, 2020
A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that allows allows an attacker to read arbitrary files via a crafted image because of TranslateTextEx for SVG.
March 21, 2020
It was discovered that systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local
March 21, 2020
A denial of service vulnerability (by triggering high CPU consumption) was found in Tor, a connection-based low-latency anonymous communication system.
March 21, 2020
Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files.
March 21, 2020
It was reported that python-bleach, a whitelist-based HTML-sanitizing library, is prone to a mutation XSS vulnerability in bleach.clean when strip=False and ‘math’ or ‘svg’ tags and one or more of the RCDATA tags were whitelisted.
March 21, 2020
A vulnerability in Exim could allow a remote attacker to execute arbitrary code.
March 21, 2020
security update
March 20, 2020
Revamped HawkEye Keylogger Swoops in on Coronavirus Fears
March 20, 2020
Defying Covid-19’s Pall: Pwn2Own Goes Virtual
March 20, 2020
News Wrap, Coronavirus Edition: WFH Security Woes, Pwn2Own
March 20, 2020
Trolls ZoomBomb work-from-home videocall with filth
March 20, 2020
Cyber Security firm exposes 5 billion+ login credentials
March 20, 2020
Keep calm and carry on working (remotely)
How can employees stay motivated and productive while teleworking during the COVID-19 crisis? The post Keep calm and carry on working (remotely) appeared first on WeLiveSecurity
March 20, 2020
Exchange rate service’s customer details hacked via AWS
March 20, 2020
An update that fixes 7 vulnerabilities is now available.
March 20, 2020
5 Best Android Emulators for PC
March 20, 2020
Covid-19 Spurs Facial Recognition Tracking, Privacy Fears
March 20, 2020
New Mirai Variant ‘Mukashi’ Targets Zyxel NAS Devices
March 20, 2020
Reading Time: ~ 2 min. DDoS Attack Strikes U.S. Health Department Amidst the panic caused by the novel coronavirus, millions of people began navigating to the U.S. Department of Health’s website to find more information on the illness, but instead found the site to be offline after a DDoS attack overwhelmed its servers. This comes […]
March 20, 2020
COVID-19 disruption delays release of Chrome version 81
March 20, 2020
What to do if your Twitter account has been hacked
Losing access to your account can be stressful, but there are steps you can take to get it back – and to avoid getting hacked again The post What to do if your Twitter account has been hacked appeared first on WeLiveSecurity
March 20, 2020
The package bluez before version 5.54-1 is vulnerable to access restriction bypass.
March 20, 2020
The package chromium before version 80.0.3987.149-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution and information disclosure.
March 20, 2020
In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView’s JavaScript literal escape helpers.
March 20, 2020
Update to 80.0.3987.132. Lots of security fixes here. VAAPI re-enabled by default except on NVIDIA. List of CVEs fixed (since last update): * CVE-2019-20446 * CVE-2020-6381 * CVE-2020-6382 * CVE-2020-6383 * CVE-2020-6384 * CVE-2020-6385 * CVE-2020-6386 * CVE-2020-6387 * CVE-2020-6388 * CVE-2020-6389 * CVE-2020-6390 * CVE-2020-6391 * CVE-2020-6392 *
March 19, 2020
Update to WebKitGTK 2.28.0. * Add API to enable Process Swap on (Cross-site) Navigation. * Add user messages API for the communication with the web extension. * Add support for same-site cookies. * Service workers are enabled by default. * Add support for Pointer Lock API. * Add flatpak sandbox support. * Make ondemand hardware […]
March 19, 2020
Security flaws found in popular password managers
Not all they’re cracked up to be? Several password vaults contain vulnerabilities, both new and previously disclosed but never patched, a study says The post Security flaws found in popular password managers appeared first on WeLiveSecurity
March 19, 2020
Whatever happened to cryptojacking?
March 19, 2020
Cisco Warns of High-Severity SD-WAN Flaws
March 19, 2020
Work from home: Improve your security with MFA
Remote work can be much safer with the right cyber‑hygiene practices in place – multi‑factor authentication is one of them The post Work from home: Improve your security with MFA appeared first on WeLiveSecurity
March 19, 2020
An update that fixes one vulnerability is now available.
March 19, 2020
Multiple vulnerabilities have been found in Apache Tomcat, the worst of which could lead to arbitrary code execution.
March 19, 2020
Cloud Misconfig Mistakes Show Need For DevSecOps
March 19, 2020
What is the Best Defense Against Phishing Attacks?
March 19, 2020
Multiple vulnerabilities have been found in libgit2, the worst of which could result in the arbitrary execution of code.
March 19, 2020
A heap-based buffer overflow in GNU FriBidi might allow remote attackers to execute arbitrary code.
March 19, 2020
Multiple vulnerabilities have been found in Cacti, the worst of which could lead to the remote execution of arbitrary code.
March 19, 2020
An SQL injection vulnerability in phpMyAdmin may allow attackers to execute arbitrary SQL statements.
March 19, 2020
Reading Time: ~ 3 min. We’re all thinking about it, so let’s call it out by name right away. The novel coronavirus, COVID-19, is a big deal. For many of us, the structure of our lives is changing daily; and those of us who are capable of doing our work remotely are likely doing so […]
March 19, 2020
Delayed Adobe patches fix long list of critical flaws
March 19, 2020
More business websites hit by credit-card skimming malware
March 19, 2020
Facebook accidentally blocks genuine COVID-19 news
March 19, 2020