September 9, 2019
Telnet Backdoor Opens More Than 1M IoT Radios to Hijack
Wikipedia, World of Warcraft Downed By Weekend DDoS Attacks
September 9, 2019
Wikipedia and World of Warcraft Classic targeted by DDoS attacks
September 9, 2019
An update that fixes 8 vulnerabilities is now available.
September 9, 2019
Critical Exim Flaw Opens Millions of Servers to Takeover
September 9, 2019
Cloud security: Inside the shared responsibility model
September 9, 2019
Memcached could be made to expose sensitive information if it received a specially crafted UNIX socket.
September 9, 2019
Apple Claims Google is Spreading FUD Over Patched iPhone Bugs
September 9, 2019
Symantec shares up as private equity suitors sniff consumer tentacle
September 9, 2019
An update that fixes two vulnerabilities is now available.
September 9, 2019
An update that fixes three vulnerabilities is now available.
September 9, 2019
An update that fixes four vulnerabilities is now available.
September 9, 2019
WordPress 5.2.3 fixes new clutch of security vulnerabilities
September 9, 2019
Brave accuses Google of sidestepping GDPR
September 9, 2019
Facebook launches $10m deepfake detection project
September 9, 2019
US city balks at paying $5.3 million ransomware demand
September 9, 2019
ESET discovered an undocumented backdoor used by the infamous Stealth Falcon group
ESET researchers discovered a backdoor linked to malware used by the Stealth Falcon group, an operator of targeted spyware attacks against journalists, activists and dissidents in the Middle East The post ESET discovered an undocumented backdoor used by the infamous Stealth Falcon group appeared first on WeLiveSecurity
September 9, 2019
An update for go-toolset-1.11 and go-toolset-1.11-golang is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 9, 2019
Update to 2.0.16
September 9, 2019
Update to 2.0.16
September 9, 2019
Chromium update to 76.0.3809.132.
September 9, 2019
Wikipedia suffers DDoS attack causing worldwide service disruption
September 8, 2019
An update that fixes one vulnerability is now available.
September 8, 2019
An update that fixes one vulnerability is now available.
September 8, 2019
An update that fixes one vulnerability is now available.
September 8, 2019
An authentication bypass was discovered in D-Bus.
September 8, 2019
Multiple vulnerabilities have been found in Simple DirectMedia Layer, the worst of which could result in the arbitrary execution of code.
September 8, 2019
Updated dovecot packages fix security vulnerability: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes.
September 8, 2019
Updated tomcat packages fix security vulnerabilities: The HTTP/2 implementation accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open without reading/writing request/response data. By keeping streams open for
September 8, 2019
This release fixes a heap buffer over-read in BlitNtoN() function when processing an invalid BMP image. It also updates a URL in the RPM metadata.
September 7, 2019
**Version 1.3.10** – Managesieve: Fix so “Create filter” option does not show up when Filters menu is disabled (#6723) – Enigma: Fix bug where revoked users/keys were not greyed out in key info – Enigma: Fix error message when trying to encrypt with a revoked key (#6607) – Enigma: Fix “decryption oracle” bug [CVE-2019-10740] (#6638) […]
September 7, 2019
Security fix for CVE-2019-15043
September 7, 2019
Resolves: rhbz#1609774 nsd-4.2.2 is available
September 7, 2019
Fixes for CVE-2019-6472, CVE-2019-6473 and CVE-2019-6474
September 7, 2019
This release fixes a heap buffer over-read in BlitNtoN() function when processing an invalid BMP image. It also updates a URL in the RPM metadata.
September 7, 2019
Security fix for CVE-2019-15043
September 7, 2019
An update that fixes one vulnerability is now available.
September 7, 2019
It was discovered that various procedures in Ghostscript, the GPL PostScript/PDF interpreter, do not properly restrict privileged calls, which could result in bypass of file system restrictions of the dSAFER sandbox.
September 7, 2019
An update that solves one vulnerability and has one errata is now available.
September 7, 2019
An update that solves one vulnerability and has one errata is now available.
September 7, 2019
It was discovered that there was a stack-based buffer over-read in memcached, the in-memory object caching system. For Debian 8 “Jessie”, this issue has been fixed in memcached version
September 7, 2019
Multiple vulnerabilities have been found in Exim, the worst of which allows remote attackers to execute arbitrary code.
September 6, 2019
Week in security
This week, we present an introduction to the MITRE ATT&CK framework, the review of the mobile threats and vulnerabilities detected for mobile during the first half of 2019, and Firefox 69 new features. The post Week in security appeared first on WeLiveSecurity
September 6, 2019
security update
September 6, 2019
An update that fixes one vulnerability is now available.
September 6, 2019
China’s APT3 Pilfers Cyberweapons from the NSA
September 6, 2019
Back-to-School Scams Target Students with Library-Themed Emails
September 6, 2019
News Wrap: Deepfake CEO Voice Scam, Facebook Phone Data Exposed
September 6, 2019
Exim could be made to run programs as an administrator if it received specially crafted network traffic.
September 6, 2019
Hackers can break into Android devices by sending a text
September 6, 2019
Semi‑annual balance of mobile security 2019
Malware detections for iOS increased, as did the number of vulnerabilities detected in this operating system, while in the case of Android, the number of reported vulnerabilities decreased, although the number of highly critical bugs reported increased. The post Semi‑annual balance of mobile security 2019 appeared first on WeLiveSecurity
September 6, 2019
Multiple vulnerabilities have been found in WebkitGTK+, the worst of which could result in the arbitrary execution of code.
September 6, 2019
Multiple vulnerabilities have been found in Apache, the worst of which could result in a Denial of Service condition.
September 6, 2019
A buffer overflow in Pango might allow an attacker to execute arbitrary code.
September 6, 2019
Multiple vulnerabilities have been found in VLC, the worst of which could result in the arbitrary execution of code.
September 6, 2019
Multiple vulnerabilities have been found in Perl, the worst of which could result in the arbitrary execution of code.
September 6, 2019
Database exposed 133 million US Facebook users’ phone numbers
September 6, 2019
YouTube fined $170m for covertly tracking kids online
September 6, 2019
Facebook expands use of face recognition
September 6, 2019
Reading Time: ~ 2 min. Deepfake BEC Scam A new variant of the well-known BEC scam has implemented a feature that has yet to be used in an email scam: voice fraud. Using an extremely accurate deepfake voice of a company’s CEO, scammers were able to successfully convince another company to wire $250,000 with the promise of a quick return. Unfortunately, that transfer was […]
September 6, 2019
Facebook, Microsoft Challenge Industry to Detect, Prevent ‘Deepfakes’
September 6, 2019
An update that fixes one vulnerability is now available.
September 6, 2019
An update that fixes two vulnerabilities is now available.
September 6, 2019
It was discovered that there was a heap-based buffer overread vulnerability in expat, an XML parsing library. A specially-crafted XML input could fool the parser into changing
September 6, 2019
7 Tips to Increase Your WordPress Security
September 6, 2019
Twitter turns off SMS texting after @Jack hijacking
September 6, 2019
Firefox 69: Third‑Party Tracking Cookies and Cryptomining Now Blocked by Default
Firefox new Enhanced Tracking Protection (ETP) feature launched to all users of the browser to offer better privacy and protection from cryptojacjing. The post Firefox 69: Third‑Party Tracking Cookies and Cryptomining Now Blocked by Default appeared first on WeLiveSecurity
September 6, 2019
* Security fix for CVE-2019-14267 * Security fix for CVE-2019-14934
September 6, 2019
Update to 1.8.6 release which fixes a bug in 1.8.5. 1.8.5 is a security release to address various buffer overflow and overrun issues in the rdesktop protocol handling.
September 6, 2019
Update LXC to version 3.0.4. The release announcement can be found [here](https://discuss.linuxcontainers.org/t/lxc-3-0-4-has-been-released/5080).
September 6, 2019
security update
September 6, 2019
Insights and Tips on Video Compression using VLC
September 5, 2019
Zerodium to pay up to $2.5 million for reporting 0-day Android exploits
September 5, 2019
Joker Spyware Found in 24 Google Play Apps
September 5, 2019
FunkyBot Malware Intercepts Android Texts, 2FA Codes
September 5, 2019
security update
September 5, 2019
Type: Vulnerability. Microsoft ASP.NET Core and .NET Framework are prone to an information disclosure vulnerability; fixes are available.
September 5, 2019
Type: Vulnerability. Microsoft ASP.NET Core and .NET Framework are prone to a remote denial-of-service vulnerability; fixes are available.
September 5, 2019
Type: Vulnerability. Microsoft ASP.NET Core and .NET Framework are prone to a remote denial-of-service vulnerability; fixes are available.
September 5, 2019
Risk Level: Very Low. Type: Trojan.
September 5, 2019
Risk Level: Very Low. Type: Trojan.
September 5, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 5, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 5, 2019
An update that fixes 6 vulnerabilities is now available.
September 5, 2019
An update that solves one vulnerability and has 19 fixes is now available.
September 5, 2019
Unsecured database leaks phone numbers of 419 million Facebook users
September 5, 2019
$5.3M Ransomware Demand: Massachusetts City Says No Thanks
September 5, 2019
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, cross-site scripting, bypass of the same-origin policy, sandbox escape, information disclosure or denial of service.
September 5, 2019
Raspberry Pi blasted into space, sends back video of Earth
September 5, 2019
Scammers deepfake CEO’s voice to talk underling into $243,000 transfer
September 5, 2019
Firefox won’t follow Chrome’s anti-ad-blocker changes, says Mozilla
September 5, 2019
An update that contains security fixes can now be installed.
September 5, 2019
An update that fixes one vulnerability is now available.
September 5, 2019