December 19, 2019
Smashing Security #159: Rap, robbery, and IoT holiday hell
December 19, 2019
Reading Time: ~ 3 min. As the year draws to a close, the cybersecurity analysts at Webroot and Carbonite pull out their crystal balls to make their predictions for the year ahead. Our experts predict many of the trends they’ve been tracking throughout the year—well-researched attacks, RDP compromise, and the importance of user education—will continue […]
December 18, 2019
security update
December 18, 2019
Why Cloud, Collaboration Breed Insider Threats
December 18, 2019
Type: Vulnerability. TYPO3 is prone to multiple remote code-execution vulnerabilities; fixes are available.
December 18, 2019
Type: Vulnerability. TYPO3 is prone to an SQL-injection vulnerability; fixes are available.
December 18, 2019
Type: Vulnerability. Microsoft SharePoint Server is prone to an information-disclosure vulnerability; fixes are available.
December 18, 2019
Type: Vulnerability. Google Chrome is prone to a use-after-free vulnerability; fixes are available.
December 18, 2019
Type: Vulnerability. Linux Kernel is prone to a denial-of-service vulnerability; fixes are available.
December 18, 2019
Type: Vulnerability. The permissions by term for Drupal is prone to an access-bypass vulnerability; fixes are available.
December 18, 2019
Type: Vulnerability. Linux kernel is prone to a denial-of-service vulnerability.
December 18, 2019
Type: Vulnerability. IBM MQ is prone to a denial-of-service vulnerability; fixes are available.
December 18, 2019
Type: Vulnerability. Linux kernel is prone to a denial-of-service vulnerability.
December 18, 2019
Type: Vulnerability. Lenovo Power Management Driver is prone to a local buffer-overflow vulnerability; fixes are available.
December 18, 2019
Ring Plagued by Security Issues, Flood of Hacks
December 18, 2019
Microsoft Issues Out-of-Band Update for SharePoint Bug
December 18, 2019
TP-Link Routers Give Cyberattackers an Open Door to Business Networks
December 18, 2019
Risk Level: Very Low. Type: Trojan.
December 18, 2019
Risk Level: Very Low. Type: Trojan.
December 18, 2019
System hijacking flaws found in pre-installed Acer & ASUS software
December 18, 2019
LifeLabs Pays Hackers Who Accessed 15M Customers’ Lab Test Results
December 18, 2019
Doxed credit card data has two hours max before it’s nabbed
December 18, 2019
Mozilla adds NextDNS to list of DNS-over-HTTPS providers
December 18, 2019
Log us out: Private equity snaffles Lastpass owner LogMeIn
December 18, 2019
It was discovered that there was a potential account hijack vulnerabilility in Django, the Python-based web development framework.
December 18, 2019
Alleged bank vault robber posed with cash on Instagram, Facebook
December 18, 2019
Kernel: KVM: OOB memory access via mmio ring buffer (CVE-2019-14821) Bug Fix(es): * KEYS: prevent creating a different user’s keyrings SL-6.10 * BUG: unable to handle kernel NULL pointer dereference at (null) * long I/O stalls with bnx2fc from not masking off scope bits of retry delay value SL6 x86_64 kernel-2.6.32-754.25.1.el6.x86_64.rpm kernel-debug-2.6.32-754.25.1.el6.x86_64. [More…]
December 18, 2019
freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure (CVE-2015-9381) * freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read (CVE-2015-9382) SL6 x86_64 freetype-2.3.11-19.el6_10.i686.rpm freetype-2.3.11-19.el6_10.x86_64.rpm freet [More…]
December 18, 2019
Google to choke off ‘less secure applications’
December 18, 2019
An update for rh-maven35-apache-commons-beanutils is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 18, 2019
Security fix for CVE-2019-5544
December 18, 2019
An update that fixes 37 vulnerabilities is now available.
December 18, 2019
Don’t fall for this porn scam – even if your password’s in the subject!
December 17, 2019
Rooster Teeth Attack Showcases New Magecart Approach
December 17, 2019
Type: Vulnerability. Avaya IP Office Application Server is prone to a cross-site scripting vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Linux Kernel is prone to a local denial-of-service vulnerability.
December 17, 2019
Type: Vulnerability. Atlassian Application Links is prone to an information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Apache Superset is prone to an information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. IBM API Connect is prone to a local information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. IBM Case Manager is prone to a cross-site scripting vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Apache Superset is prone to an information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Omron PLC CJ and CS Series are prone to multiple security vulnerabilities; fixes are available.
December 17, 2019
Type: Vulnerability. ZOHO ManageEngine EventLog Analyzer is prone to a security-bypass vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. SQLite is prone to multiple security vulnerabilities; fixes are available.
December 17, 2019
Type: Vulnerability. Mozilla Firefox is prone to a denial-of-service vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Ansible Tower is prone to an information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Broadcom CA Automic Sysload is prone to an arbitrary command-execution vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Linux Kernel is prone to a privilege-escalation vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Omron PLC CJ, CS and NJ Series are prone to an authentication-bypass vulnerability; fixes are available.
December 17, 2019
Epilepsy Foundation Bombarded with Seizure-Triggering Twitter Posts
December 17, 2019
Massive leak exposes browsing history of millions of users
December 17, 2019
Alexa, Google Home Eavesdropping Hack Not Yet Fixed
December 17, 2019
An update that fixes two vulnerabilities is now available.
December 17, 2019
An update that fixes two vulnerabilities is now available.
December 17, 2019
Ransomware-seized New Orleans declares state of emergency
December 17, 2019
Researchers discover weakness in IoT digital certificates
December 17, 2019
It was discovered that python-ecdsa, a cryptographic signature library for Python, incorrectly handled certain signatures. A remote attacker could use this issue to cause python-ecdsa to either not warn about incorrect signatures, or generate exceptions resulting in a
December 17, 2019
Mozilla mandates 2FA security for Firefox developers
December 17, 2019
It’s time to disconnect RDP from the internet
Brute-force attacks and BlueKeep exploits usurp convenience of direct RDP connections; ESET releases a tool to test your Windows machines for vulnerable versions The post It’s time to disconnect RDP from the internet appeared first on WeLiveSecurity
December 17, 2019
Facebook employees’ payroll data nabbed in car smash-and-grab
December 17, 2019
It was found that libssh, a tiny C SSH library, does not sufficiently sanitize path parameters provided to the server, allowing an attacker with only SCP file access to execute arbitrary commands on the server.
December 17, 2019
An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
December 17, 2019
An update for freetype is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 17, 2019
security update
December 17, 2019
security update
December 17, 2019
security update
December 16, 2019
Type: Vulnerability. WordPress is prone to multiple security vulnerabilities; fixes are available.
December 16, 2019
Type: Vulnerability. Linux Kernel is prone to a local denial-of-service vulnerability.
December 16, 2019
Type: Vulnerability. Dovecot is prone to a remote denial-of-service vulnerability; fixes are available.
December 16, 2019
Type: Vulnerability. Linux Kernel is prone to a local denial-of-service vulnerability.
December 16, 2019
Type: Vulnerability. Siemens SiNVR 3 is prone to multiple security vulnerabilities.
December 16, 2019
Type: Vulnerability. Apache SpamAssassin is prone to an arbitrary command-injection vulnerability and denial-of-service vulnerability; fixes are available.
December 16, 2019
Type: Vulnerability. Advantech DiagAnywhere is prone to multiple stack-based buffer-overflow vulnerabilities; fixes are available.
December 16, 2019
Type: Vulnerability. CESNET libyang is prone to multiple stack-based buffer-overflow vulnerabilities; fixes are available.
December 16, 2019
Type: Vulnerability. Multiple Cloud Foundry Products are prone to an information-disclosure vulnerability; fixes are available.
December 16, 2019
Echobot IoT Botnet Casts a Wide Net with Raft of Exploit Additions
December 16, 2019
The worst passwords of 2019: Did yours make the list?
These passwords may win the popularity contest but lose flat out in security The post The worst passwords of 2019: Did yours make the list? appeared first on WeLiveSecurity
December 16, 2019
N.J.’s Largest Hospital System Pays Up in Ransomware Attack
December 16, 2019
“Dig up his body,” say creditors of deceased cryptocurrency player
December 16, 2019
Stolen: Unencrypted hard drives with data of 29,000 Facebook employees
December 16, 2019
Your workmates might still be reading that ‘unshared’ Slack document
December 16, 2019
An update that solves 9 vulnerabilities and has one errata is now available.
December 16, 2019
Plundervolt – stealing secrets by starving your computer of voltage
December 16, 2019
Police get “unprecedented” data haul from Google with geofence warrants
December 16, 2019
Npm patches two serious bugs
December 16, 2019
Google adds Verified SMS and anti-spam feature to Messages app
December 16, 2019
Emotion-detection in AI should be regulated, AI Now says
December 16, 2019
Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. CVE-2018-11805
December 16, 2019