November 4, 2019
Undercover reporter tells all after working for a Polish troll farm
BlueKeep Attacks Have Arrived, Are Initially Underwhelming
November 4, 2019
Emerging Technology and Privacy: What You Need to Know
November 4, 2019
US grounds Chinese-made drones as part of security review
November 4, 2019
Risk Level: Very Low.
November 4, 2019
The package qt5-webengine before version 5.13.2-2 is vulnerable to arbitrary code execution.
November 3, 2019
Antimalware Day 2019: Building a culture of cybersecurity awareness
The introduction to a series of articles marking this year’s Antimalware Day and highlighting the importance of cyber-readiness The post Antimalware Day 2019: Building a culture of cybersecurity awareness appeared first on WeLiveSecurity
November 3, 2019
An update that fixes 21 vulnerabilities is now available.
November 3, 2019
An update that fixes 21 vulnerabilities is now available.
November 2, 2019
An update that fixes two vulnerabilities is now available.
November 2, 2019
Rebasing to 2.26.x For release info please see https://www.webkitgtk.org/2019/09/09/webkitgtk2.26.0-released.html and https://www.webkitgtk.org/2019/09/23/webkitgtk2.26.1-released.html CVE fixes: CVE-2019-8625, CVE-2019-8720, CVE-2019-8769, CVE-2019-8771
November 2, 2019
– fix heap-based buffer overflow in cdf_read_property_info() (CVE-2019-18218)
November 2, 2019
Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes – https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
November 2, 2019
Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes – https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
November 2, 2019
**PHP version 7.3.11** (24 Oct 2019) **Core:** * Fixed bug php#78535 (auto_detect_line_endings value not parsed as bool). (bugreportuser) * Fixed bug php#78620 (Out of memory error). (cmb, Nikita) **Exif :** * Fixed bug php#78442 (‘Illegal component’ on exif_read_data since PHP7) (Kalle) **FPM:** * Fixed bug php#78599 (env_path_info underflow in fpm_main.c can lead to RCE).
November 2, 2019
Updated libxslt package fixes security vulnerabilities: * In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains
November 2, 2019
Updated libsoup package fixes security vulnerability: It was discovered that libsoup incorrectly handled parsing certain NTLM messages. If a user or automated system were tricked into connecting to a malicious server, a remote attacker could possibly use this issue to
November 2, 2019
Updated aspell packages fix security vulnerability: libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated character (CVE-2019-17544).
November 2, 2019
Updated golang packages fix security vulnerability: Daniel Mandragona discovered that invalid DSA public keys can cause a panic in dsa.Verify(), resulting in denial of service (CVE-2019-17596).
November 2, 2019
Updated ansible package fixes security vulnerabilities: ansible-playbook -k and ansible cli tools prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them
November 2, 2019
An update that fixes 21 vulnerabilities is now available.
November 1, 2019
Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes – https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
November 1, 2019
Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes – https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
November 1, 2019
Office for Mac Users Warned of Malicious SYLK Files
November 1, 2019
**PHP version 7.2.24** (24 Oct 2019) **Core:** * Fixed bug php#78535 (auto_detect_line_endings value not parsed as bool). (bugreportuser) * Fixed bug php#78620 (Out of memory error). (cmb, Nikita) **Exif:** * Fixed bug php#78442 (‘Illegal component’ on exif_read_data since PHP7) (Kalle) **FPM:** * Fixed bug php#78599 (env_path_info underflow in fpm_main.c can lead to RCE).
November 1, 2019
Solar, Wind Power Utility Disrupted in Rare Cyberattack
November 1, 2019
security update
November 1, 2019
security update
November 1, 2019
Type: Vulnerability. Xen is prone to a privilege-escalation vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Honeywell equIP Series IP Cameras is prone to a denial-of-service vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Foxit PhantomPDF is prone to multiple security vulnerabilities; fixes are available.
November 1, 2019
Type: Vulnerability. Elasticsearch Logstash is prone to a denial-of-service vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Magento CMS is prone to multiple security vulnerabilities; fixes are available.
November 1, 2019
Type: Vulnerability. Google Chrome is prone to multiple security vulnerabilities; fixes are available.
November 1, 2019
Type: Vulnerability. Multiple IBM Products are prone to an HTTP response-splitting vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Cisco Video Communications Server is prone to a remote command-execution vulnerability; fixes are available.
November 1, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3287
November 1, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3281
November 1, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3286
November 1, 2019
Global Crime Ring Bilks U.S. Military Members, Vets Out of Millions
November 1, 2019
Stubborn Malware Targets QNAP NAS Hardware Specifically
November 1, 2019
S2 Ep15: City under attack! VPN hacked, floppies nixed
November 1, 2019
Google Discloses Chrome Flaw Exploited in the Wild
November 1, 2019
A guest appearance on the IT Pro podcast…
November 1, 2019
Apple props up macOS Catalina with 10.15.1 update
November 1, 2019
Happy Birthday, CVE!
November 1, 2019
Android Keyboard App Could Swindle 40M Users Out of Millions
November 1, 2019
Reading Time: ~ 2 min. Bed, Bath, & Beyond Data Breach An official announcement made earlier this week acknowledged illicit access to customer data used in online accounts for Bed, Bath, & Beyond. While the breach didn’t affect payment card information, the retailer quickly began contacting affected customers and took steps to safeguard against future […]
November 1, 2019
Twitter bans political ads
November 1, 2019
Hackers plead guilty to breach that Uber covered up
November 1, 2019
Type: Vulnerability. Symantec Endpoint Protection is prone to a security-bypass vulnerability; fixes are available.
November 1, 2019
Type: Vulnerability. Apple iOS and macOS are prone to multiple security vulnerabilities; fixes are available.
October 31, 2019
Type: Vulnerability. Apple iTunes and macOS are prone to an arbitrary code-execution vulnerability; fixes are available.
October 31, 2019
Type: Vulnerability. Apple tvOS and macOS are prone to a memory-corruption vulnerability; fixes are available.
October 31, 2019
Type: Vulnerability. Apple iOS, iPadOS, tvOS, watchOS and macOS are prone to multiple security vulnerabilities; fixes are available.
October 31, 2019
Type: Vulnerability. Apple macOS, TV OS, and iOS are prone to multiple memory-corruption vulnerabilities; fixes are available.
October 31, 2019
Type: Vulnerability. Philips IntelliSpace Perinatal is prone to a local security-bypass vulnerability.
October 31, 2019
Type: Vulnerability. Foxit PhantomPDF is prone to a remote code-execution vulnerability; fixes are available.
October 31, 2019
Type: Vulnerability. Foxit Studio Photo is prone to a information disclosure vulnerability; fixes are available.
October 31, 2019
Type: Vulnerability. Apple iOS is prone to an address bar spoofing vulnerability; fixes are available.
October 31, 2019
Type: Vulnerability. Apple macOS, watchOS and iCloud for Windows are prone to a memory corruption vulnerability; fixes are available.
October 31, 2019
Calypso APT Emerges from the Shadows to Target Governments
October 31, 2019
China-Linked Hackers Spy on Texts With MessageTap Malware
October 31, 2019
ICS Attackers Set To Inflict More Damage With Evolving Tactics
October 31, 2019
Linux maintainer: Patching side-channel flaws is killing performance
October 31, 2019
Fake Voicemail/Office 365 Attack Targets Enterprise Execs
October 31, 2019
Valve Source Engine, Fortnite Servers Crippled By Gafgyt Variant
October 31, 2019
Judge lambasts porn company for spewing copyright lawsuits
October 31, 2019
Researchers find hole in EU-wide identity system
October 31, 2019
WhatsApp sues spyware maker for allegedly hacking phones worldwide
October 31, 2019
Reading Time: ~ 5 min. “Phishing” may have been a relatively obscure term, but pretty much everyone has heard of it by now. In fact, recent statistics indicate a high likelihood that you—or someone you know—have been the victim of a phishing attack at least once. Now, if you remember the classic Nigerian Prince scams from back in […]
October 31, 2019
Belgian city slurps mobile data to track visitors – report
October 31, 2019
Deepfakes: When seeing isn’t believing
Is the world as we know it ready for the real impact of deepfakes? The post Deepfakes: When seeing isn’t believing appeared first on WeLiveSecurity
October 31, 2019
Smashing Security #152: Cats, hoodies, and rent
October 31, 2019
Type: Vulnerability. Apple iOS, iPad and macOS are prone to multiple information-disclosure vulnerabilities; fixes are available.
October 31, 2019
security update
October 30, 2019
Insurance Pays Out a Sliver of Norsk Hydro’s Cyberattack Damages
October 30, 2019
Type: Vulnerability. WebKit is prone to cross-site scripting and multiple memory-corruption vulnerabilities; fixes are available.
October 30, 2019
Type: Vulnerability. WebKit is prone to a cross-site scripting vulnerability and multiple memory-corruption vulnerabilities; fixes are available.
October 30, 2019
Type: Vulnerability. Samba is prone to an arbitrary file write vulnerability; fixes are available.
October 30, 2019
Type: Vulnerability. Samba is prone to a security-bypass vulnerability; fixes are available.
October 30, 2019
Type: Vulnerability. Samba is prone to a remote denial-of-service vulnerability; fixes are available.
October 30, 2019