December 28, 2019
7 types of virus – a short glossary of contemporary cyberbadness
security update
December 28, 2019
security update
December 28, 2019
security update
December 28, 2019
security update
December 28, 2019
security update
December 28, 2019
Several issues were discovered in the Tomcat servlet and JSP engine, which could result in session fixation attacks, information disclosure, cross- site scripting, denial of service via resource exhaustion and insecure redirects.
December 28, 2019
It was discovered that debian-lan-config, a FAI config space for the Debian-LAN system, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other user principals.
December 28, 2019
Guido Vranken discovered an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. For the oldstable distribution (stretch), this problem has been fixed
December 28, 2019
It was found that freeimage, a graphics library, was affected by the following two security issues: CVE-2019-12211
December 28, 2019
What Brings The Essence Of Secured Web Hosting
December 28, 2019
Christmas malware uses “Support Greta Thunberg” as a lure
December 27, 2019
Google Chrome Affected By Magellan 2.0 Flaws
December 27, 2019
Prison surveillance footage posted on YouTube
It’s not a stretch to surmise that the incident was enabled by poor security settings The post Prison surveillance footage posted on YouTube appeared first on WeLiveSecurity
December 27, 2019
Facebook Security Debacles: 2019 Year in Review
December 27, 2019
Podcast: The Roadblocks and Opportunities For Women in Cybersecurity
December 27, 2019
An update that fixes one vulnerability is now available.
December 27, 2019
An update that solves 24 vulnerabilities and has 75 fixes is now available.
December 27, 2019
An update that solves one vulnerability and has two fixes is now available.
December 27, 2019
An update that solves 24 vulnerabilities and has 75 fixes is now available.
December 27, 2019
An update that fixes one vulnerability is now available.
December 27, 2019
How to get rid of your old devices safely
Disposing of old tech isn’t a one-click solution; there are multiple things you have to consider before moving on to greener pastures The post How to get rid of your old devices safely appeared first on WeLiveSecurity
December 27, 2019
Beware the three-finger-salute, or ‘How I Got The Keys To The Kingdom’
December 27, 2019
Critical Citrix Bug Puts 80,000 Corporate LANs at Risk
December 26, 2019
Updated php packages fix security vulnerabilities: DirectoryIterator class silently truncates after a null byte (CVE-2019-11045).
December 26, 2019
he updated packages fix security vulnerabilities and a packaging problem: An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote, unauthenticated attacker could potentially use this flaw to make
December 26, 2019
The updated package fixes a security vulnerability: A flaw was found in mod_auth_openidc before version 2.4.0.1. An open redirect issue exists in URLs with trailing slashes similar to CVE-2019-3877 in mod_auth_mellon. (CVE-2019-14857)
December 26, 2019
Updated libofx packages fix security vulnerability: There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofx_sgml.cpp, as demonstrated by ofxdump (CVE-2019-9656).
December 26, 2019
Apple iCloud “data dump” extortionist avoids prison
December 26, 2019
Combining AI and Playbooks to Predict Cyberattacks
December 26, 2019
Top 10 Breaches and Leaky Server Screw Ups of 2019
December 26, 2019
Top 7 PDF Tools to Edit, Merge/Split and Protect PDF
December 25, 2019
An issue was discovered in libopensc/card-setcos.c in OpenSC, which has an incorrect read operation during parsing of a SETCOS file attribute.
December 25, 2019
Type: Vulnerability. ImageMagick is prone to multiple heap-based buffer-overflow vulnerabilities; fixes are available.
December 25, 2019
Type: Vulnerability. Linux Kernel is prone to a denial-of-service vulnerability; fixes are available.
December 25, 2019
Type: Vulnerability. Linux Kernel is prone to a denial-of-service vulnerability; fixes are available.
December 25, 2019
Type: Vulnerability. IBM Cognos Analytics is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability; fixes are available.
December 25, 2019
Type: Vulnerability. FasterXML Jackson-databind is prone to a remote code-execution vulnerability; fixes are available.
December 25, 2019
This update is based on upstream 5.4.6 and fixes various potential security issues related to buffer overflows, double frees, NUll pointer dereferences, improper / missing input validations and so on. It also adds other bugfixes all over the kernel.
December 25, 2019
Happy Holidays – and big thanks to everyone who’s working today!
December 25, 2019
Man accused of hiring hitman on dark web to kill ex-girlfriend
December 25, 2019
Type: Vulnerability. Trend Micro Apex Central is prone to a cross-site scripting vulnerability; fixes are available.
December 24, 2019
Type: Vulnerability. TYPO3 is prone to a remote code-execution vulnerability; fixes are available.
December 24, 2019
Type: Vulnerability. IBM Spectrum Scale is prone to a local privilege-escalation vulnerability; fixes are available.
December 24, 2019
Type: Vulnerability. Samba is prone to a privilege-escalation vulnerability; fixes are available.
December 24, 2019
Type: Vulnerability. Linux kernel is prone to a denial-of-service vulnerability.
December 24, 2019
Type: Vulnerability. Redis is prone to a buffer overflow vulnerability; fixes are available.
December 24, 2019
Type: Vulnerability. Multiple Trend Micro Products are prone to a local security-bypass vulnerability; fixes are available.
December 24, 2019
Type: Vulnerability. Apple iOS/iPadOS/watchOS/macOS are prone to a security vulnerability; fixes are available.
December 24, 2019
Type: Vulnerability. Wecon PLC Editor is prone to multiple stack-based buffer-overflow vulnerabilities.
December 24, 2019
Type: Vulnerability. Multiple Moxa Products are prone to a remote denial-of-service vulnerability; fixes are available.
December 24, 2019
Type: Vulnerability. Broadcom CA Client Automation is prone to a local privilege-escalation vulnerability; fixes are available.
December 24, 2019
Type: Vulnerability. Sudo is prone to multiple security-bypass vulnerabilities; fixes are available.
December 24, 2019
Biggest Malware Threats of 2019
December 24, 2019
Sextortionists return for Christmas – price goes down, threats go up
December 24, 2019
The Case for Cyber-Risk Prospectuses
December 24, 2019
What a decade! Our baddest stories and biggest lessons, year by year…
December 24, 2019
Here is a list of top 25 worst passwords of 2019
December 24, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4107
December 24, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4148
December 24, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4240
December 24, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4326
December 24, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4190
December 24, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4190
December 24, 2019
Twitter Fixes Bug that Enabled Takeover of Android App Accounts
December 23, 2019
Type: Vulnerability. RedHat Ceph is prone to a remote denial-of-service vulnerability; fixes are available.
December 23, 2019
Type: Vulnerability. Redis is prone to a remote denial-of-service vulnerability; fixes are available.
December 23, 2019
Type: Vulnerability. Kubernetes API Server is prone to a denial-of-service vulnerability; fixes are available.
December 23, 2019
Type: Vulnerability. Apache Log4j is prone to remote code-execution vulnerability; fixes are available.
December 23, 2019
Type: Vulnerability. Multiple VMware products are prone to a local privilege-escalation vulnerability; fixes are available.
December 23, 2019
Type: Vulnerability. Kubernetes is prone to an information-disclosure vulnerability; fixes are available.
December 23, 2019
Type: Vulnerability. Equinox Control Expert is prone to an SQL-injection vulnerability.
December 23, 2019
Type: Vulnerability. Philips Veradius Unity, Pulsera, and Endura are prone to a denial-of-service vulnerability; fixes are available.
December 23, 2019
Type: Vulnerability. Cloud Foundry Cloud Controller API is prone to a security-bypass vulnerability; fixes are available.
December 23, 2019
Apple Bug bounty: Earn big backs for hacking iPhone & other products
December 23, 2019
A change introduced in libssh 0.6.3-4+deb8u4 (which got released as DLA 2038-1) has broken x2goclient’s way of scp’ing session setup files from client to server, resulting in an error message shown in a GUI error dialog box during session startup (and session resuming).
December 23, 2019
An update that fixes two vulnerabilities is now available.
December 23, 2019
Serious Security: The decade-ending “Y2K bug” that wasn’t
December 23, 2019
ToTok app caught spying on millions of Android & iPhone users
December 23, 2019
Top 10 IoT Disasters of 2019
December 23, 2019
Podcast: What We’ve Learned from the Year of the Breach
December 23, 2019
Smartphone location data can be used to identify and track anyone
December 23, 2019
Congress passes anti-robocall bill
December 23, 2019
Facebook will stop mining contacts with your 2FA number
December 23, 2019
How to secure your digital Christmas presents
What are some of the key things you should do with your shiny new device as soon as you unbox it? The post How to secure your digital Christmas presents appeared first on WeLiveSecurity
December 23, 2019
An update for fribidi is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
December 23, 2019
An update for libyang is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
December 22, 2019
An issue has been found in cups, the Common UNIX Printing System(tm). An incorrect bounds check could lead to a possible out-of-bounds read and
December 22, 2019
An update that fixes 7 vulnerabilities is now available.
December 22, 2019
security update
December 21, 2019
Fake streaming sites using Star Wars as bait to spread malware
December 21, 2019
Several vulnerabilities have recently been discovered in TightVNC 1.x, an X11 based VNC server/viewer application for Windows and Unix.
December 21, 2019
An update that solves 26 vulnerabilities and has 14 fixes is now available.
December 21, 2019
How to check for websites hacked to run web skimming, magecart attack
December 20, 2019