This update fixes CVE-2019-17545.
November 22, 2019
Update to latest stable (78.0.3904.97). This build contains a number of bug fixes and security updates. Changes can be viewed here: https://chromium.googles ource.com/chromium/src/+log/78.0.3904.86..78.0.3904.92?n=10000
November 22, 2019
Critical Flaws in VNC Threaten Industrial Environments
November 22, 2019
Type: Vulnerability. Multiple Asterisk Products are prone to an authorization-bypass vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. Asterisk Manager Interface is prone to an arbitrary command-execution vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. Asterisk Open Source is prone to a remote denial-of-service vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. Apache Shiro is prone to an information-disclosure vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. Linux Kernel is prone to an information-disclosure vulnerability and a denial-of-service vulnerability; fixes are availabl
November 22, 2019
Type: Vulnerability. Lexmark Services Monitor is prone to a directory-traversal vulnerability.
November 22, 2019
Type: Vulnerability. Apache Impala is prone to an authorization-bypass vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. ISC BIND is prone to a remote denial-of-service vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. Apache NiFi is prone to multiple information-disclosure vulnerabilities; fixes are available.
November 22, 2019
Type: Vulnerability. Cisco Email Security Appliance is prone to a remote security-bypass vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. IBM WebSphere Application Server is prone to a directory-traversal vulnerability; fixes are available.
November 22, 2019
Type: Vulnerability. IBM Cloud Pak System is prone to an information-disclosure vulnerability; fixes are available.
November 22, 2019
Reading Time: ~ 1 min. Webroot has evolved its secure login offering from a secondary security code to a full two-factor authentication (2FA) solution for both business and home users. Webroot’s 2FA has expanded in two areas. We have: Implemented a time-based, one-time password (TOTP) solution that generates a passcode which is active for only […]
November 22, 2019
Data-Enriched Profiles on 1.2B People Exposed in Gigantic Leak
November 22, 2019
VIDEO: “Not All Cybercriminals Are Evil Geniuses”
November 22, 2019
Download: 2019 Security Team Assessment Template
November 22, 2019
Google plans to take Android back to ‘mainline’ Linux kernel
November 22, 2019
Iran’s APT33 sharpens focus on industrial control systems
November 22, 2019
Raccoon Stealer Malware Scurries Past Microsoft Messaging Gateways
November 22, 2019
News Wrap: Amazon Ring Risks, Stalkerware, and D-Link Router Flaws
November 22, 2019
Reading Time: ~ 2 min. Shade Ransomware Takes Crown as Most Distributed Variant Over the course of 2019, one ransomware variant, known as Shade, has taken over 50 percent of market share for ransomware delivered via email. Otherwise known as Troldesh, this variant receives regular updates to further improve it’s encrypting and methods of generating […]
November 22, 2019
Google Will Award $1M-Plus to People Who Can Hack Titan M Security Chip
November 22, 2019
Why cryptocoin scams work, and how to avoid them
November 22, 2019
Convicted Nigerian fraudster keeps a-fraudin’ from behind bars
November 22, 2019
An update that fixes two vulnerabilities is now available.
November 22, 2019
An update that fixes two vulnerabilities is now available.
November 22, 2019
An update that fixes one vulnerability is now available.
November 21, 2019
An update that solves one vulnerability and has one errata is now available.
November 21, 2019
An update that fixes one vulnerability is now available.
November 21, 2019
An update that fixes two vulnerabilities is now available.
November 21, 2019
Senators Demand Amazon Disclose Ring Privacy Policies
November 21, 2019
Type: Vulnerability. Cisco IOS XR Software is prone to a security-bypass vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Unity Express is prone to a local command-injection vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Webex Centers are prone to an information-disclosure vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Email Security Appliance is prone to a remote security-bypass vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco SD-WAN Solution is prone to a cross-site request-forgery vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Stealthwatch Enterprise is prone to a cross-site scripting vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco DNA Spaces Connector is prone to a local command-injection vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Small Business RV Series Routers are prone to an information-disclosure vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Unified Communications Manager is prone to an SQL-injection vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Webex Teams for Windows is prone to a local arbitrary code-execution vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco DNA Spaces Connector is prone to a local privilege-escalation vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Multiple F5 BIG-IP Products are prone to multiple information-disclosure vulnerabilities; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco Unified Communications Domain Manager is prone to an HTML-injection vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Cisco DNA Spaces: Connector is prone to an SQL-injection vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Lenovo LenovoPaper software is prone to an unspecified local privilege-escalation vulnerability.
November 21, 2019
Type: Vulnerability. Lenovo System Interface Foundation is prone to multiple security vulnerabilities; fixes are available.
November 21, 2019
Type: Vulnerability. Multiple F5 BIG-IP Products are prone to a remote security vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Unbound IPSEC Module is prone to a command-injection vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Lenovo CCSDK is prone to an unspecified local privilege-escalation vulnerability.
November 21, 2019
Type: Vulnerability. Fortinet FortiOS is prone to a denial-of-service vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Multiple Fortinet products are prone to hard-coded cryptographic key vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Fortinet FortiOS is prone to a hardcoded cryptographic key vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Multiple Cloud Foundry Products are prone to a denial-of-service vulnerability; fixes are available.
November 21, 2019
Type: Vulnerability. Lenovo ThinkPad USB-C Dock is prone to a unspecified denial-of-service vulnerability; fixes are available.
November 21, 2019
Microsoft Outlook for Android Bug Opens Door to XSS
November 21, 2019
Risk Level: Very Low. Type: Trojan.
November 21, 2019
Linux Webmin Servers Under Attack by Roboto P2P Botnet
November 21, 2019
Gnip Banking Trojan Shows Ongoing, Aggressive Development
November 21, 2019
DNS-over-HTTPS is coming to Windows 10
November 21, 2019
Android camera bug could have turned phones against their users
November 21, 2019
Official Monero site delivers malicious cash-grabbing wallet
November 21, 2019
Popular Apps on Google Play Store Remain Unpatched
November 21, 2019
Registers as “Default Print Monitor”, but is a malicious downloader. Meet DePriMon
ESET researchers have discovered a new downloader with a novel, not previously seen in the wild installation technique The post Registers as “Default Print Monitor”, but is a malicious downloader. Meet DePriMon appeared first on WeLiveSecurity
November 21, 2019
Smashing Security #155: Juicejacking, YouTube hacking, password slacking
November 21, 2019
Tories change Twitter name to ‘factcheckUK’ during live TV debate
November 20, 2019
Security Firms, Nonprofits Team to Fight Stalkerware
November 20, 2019
Mozilla Bug Bounty Program Doubles Payouts, Adds Firefox Monitor
November 20, 2019
security update
November 20, 2019
Apache Solr Bug Gets Bumped Up to High Severity
November 20, 2019
Type: Vulnerability. Multiple IBM Products are prone to a security bypass vulnerability; fixes are available.
November 20, 2019
Type: Vulnerability. Broadcom Brocade SANnav is prone to a security weakness; fixes are available.
November 20, 2019
Type: Vulnerability. Google Android is prone to multiple security-bypass vulnerabilities; fixes are available.
November 20, 2019
Type: Vulnerability. Schneider Electric Floating License Manager is prone to multiple security vulnerabilities; fixes are available.
November 20, 2019
Type: Vulnerability. Dell EMC iDRAC is prone to an unauthorized-access vulnerability; fixes are available.
November 20, 2019
Type: Vulnerability. Broadcom Brocade SANnav is prone to a security-bypass vulnerability; fixes are available.
November 20, 2019
Type: Vulnerability. Microsoft Outlook for Android is prone to a security vulnerability that may allow attackers to conduct spoofing attacks; fixes are available.
November 20, 2019
Type: Vulnerability. Atlassian Jira Service Desk Server and Jira Service Desk Data Center are prone to multiple security vulnerabilities; fixes are available.
November 20, 2019
Type: Vulnerability. Broadcom Brocade SANnav is prone to an information disclosure vulnerability; fixes are available.
November 20, 2019
Type: Vulnerability. Broadcom Brocade SANnav is prone to a hard-coded credentials vulnerability; fixes are available.
November 20, 2019
Type: Vulnerability. Apache Solr for Linux is prone to a remote code-execution vulnerability; fixes are available.
November 20, 2019
Type: Vulnerability. Oracle MySQL Connectors is prone to a remote vulnerability; fixes are available.
November 20, 2019
High-Severity Windows UAC Flaw Enables Privilege Escalation
November 20, 2019
Reading Time: ~ 4 min. With major advancements in communication technology, many employees and entrepreneurs are opting to work from home at least some of the time. In fact, according to CNBC, 70 percent of people globally worked remotely at least once a week in 2018. And why shouldn’t they? They save gas and time by not […]
November 20, 2019
ThreatList: Admin Rights for Third Parties is the Norm
November 20, 2019
What does it take to attract top cybersecurity talent?
From professional backgrounds to competitive salaries – a study delves into what it takes to build strong cybersecurity teams The post What does it take to attract top cybersecurity talent? appeared first on WeLiveSecurity
November 20, 2019
Hackers Dump 2.2M Gaming, Cryptocurrency Passwords Online
November 20, 2019
An update that fixes one vulnerability is now available.
November 20, 2019
An update that fixes one vulnerability is now available.
November 20, 2019