An update that fixes one vulnerability is now available.
September 15, 2019
An update that fixes one vulnerability is now available.
September 15, 2019
Updated wireshark packages fix security vulnerability: The Gryphon dissector could go into an infinite loop. For other fixes in this update, see the referenced releasenotes.
September 15, 2019
Updated webkit2 packages fix security vulnerabilities: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling (CVE-2019-8644).
September 15, 2019
Updated openldap packages fix security vulnerabilities: It was discovered that OpenLDAP incorrectly handled rootDN delegation. A database administrator could use this issue to request authorization as an identity from another database, contrary to expectations (CVE-2019-13057).
September 15, 2019
Updated mediawiki packages fix security vulnerabilities: Potential XSS in jQuery (CVE-2019-11358). An account can be logged out without using a token (CSRF) (CVE-2019-12466).
September 15, 2019
Updated kconfig packages fix security vulnerability: Dominik Penner discovered that KConfig supported a feature to define shell command execution in .desktop files. If a user is provided with a malformed .desktop file (e.g. if it’s embedded into a downloaded archive and it gets
September 15, 2019
Multiple vulnerabilities have been discovered in faad2, the Freeware Advanced Audio Coder. These vulnerabilities might allow remote attackers to cause denial-of-service, or potentially execute arbitrary code if crafted MPEG AAC files are processed.
September 15, 2019
This update provides nodejs v6.17.1 fixing atleast the following security issues: The c-ares function ares_parse_naptr_reply(), which is used for parsing NAPTR responses, could be triggered to read memory outside of the given
September 15, 2019
The updated packages fix security vulnerabilities: The JPXStream::init function in Poppler 0.78.0 and earlier doesn’t check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap,
September 15, 2019
Updated thunderbird packages fix security vulnerabilities: Covert Content Attack on S/MIME encryption using a crafted multipart/ alternative message (CVE-2019-11739).
September 15, 2019
New Amazon phishing scam stealing credit card data
September 14, 2019
WordPress XSS Bug Allows Drive-By Code Execution
September 13, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
September 13, 2019
iPhone iOS 13 Lockscreen Bypass Flaw Exposes Contacts
September 13, 2019
The Joker is haunting Google Play Store with malware
September 13, 2019
Mozilla: Sandbox escape through Firefox Sync (CVE-2019-9812) * Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox ESR 60.9 (CVE-2019-11740) * Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images (CVE-2019-11742) * Mozilla: XSS by breaking out of title and textarea elements using innerHTML (CVE-2019-11744) * Mozilla: […]
September 13, 2019
An update that fixes two vulnerabilities is now available.
September 13, 2019
An update that fixes 12 vulnerabilities is now available.
September 13, 2019
Updated flash-player-plugin package fixes security vulnerabilities: Same origin method execution that leads to arbitrary code execution?in the context of the current user. (CVE-2019-8069)
September 13, 2019
Astaroth Spy Trojan Uses Facebook, YouTube Profiles to Cover Tracks
September 13, 2019
Just how private are your browsing habits?
September 13, 2019
North Korean Spear-Phishing Attack Targets U.S. Firms
September 13, 2019
Intel: SSH-stealing NetCAT bug not really a problem
September 13, 2019
News Wrap: IoT Radio Telnet Backdoor And ‘SimJacker’ Active Exploit
September 13, 2019
Leaky database full of fake Groupon emails turns out to belong to crooks
September 13, 2019
This package ignored the value of the Hash header, which allows an attacker to spoof it. An attacker can not only embed arbitrary Armor Headers, but also prepend arbitrary text to cleartext messages without invalidating the signatures.
September 13, 2019
Reading Time: ~ 3 min. AI and machine learning offer tremendous promise for humanity in terms of helping us make sense of Big Data. But, while the processing power of these tools is integral for understanding trends and predicting threats, it’s not sufficient on its own. Thoughtful design of threat intelligence—design that accounts for the […]
September 13, 2019
Reading Time: ~ 2 min. Ransomware Closes Arizona School District As many students began returning for the fall semester, classes were cancelled in the Flagstaff Unified School District in Arizona after a ransomware attack disabled some of the district’s computer systems. Officials haven’t yet released any additional information on the ransom demanded or if any […]
September 13, 2019
Cybercriminals Adding Sophistication to BEC Threats
September 13, 2019
Mozilla Private Network VPN gives Firefox another privacy boost
September 13, 2019
Samuel R Lovejoy discovered a security vulnerability in dnsmasq. Carefully crafted packets by DNS servers might result in out of bounds read operations, potentially leading to a crash and denial
September 13, 2019
Fin7 sysadmin pleads guilty to running IT for billion-dollar crime syndicate
September 13, 2019
An update that fixes one vulnerability is now available.
September 12, 2019
An update that fixes four vulnerabilities is now available.
September 12, 2019
An update that fixes one vulnerability is now available.
September 12, 2019
An update that fixes two vulnerabilities is now available.
September 12, 2019
An update that fixes one vulnerability is now available.
September 12, 2019
An update that fixes one vulnerability is now available.
September 12, 2019
Simjacker vulnerability lets attackers track your location with an SMS
September 12, 2019
Library-Themed University Phishing Attack Expands to Massive Scale
September 12, 2019
California Passes Bill to Ban Police Use of Facial Recognition
September 12, 2019
1B Mobile Users Vulnerable to Ongoing ‘SimJacker’ Surveillance Attack
September 12, 2019
UNICEF Leaks Personal Data of 8,000 Users via Email Blunder
September 12, 2019
Reading Time: ~ 3 min. According to a report from hired.com, the demand for security engineers is up 132%. Additionally, the need for engineers who specialize in data analytics and machine learning has increased by 38% and 27%, respectively. Given recent trends in cybersecurity, it’s no wonder, and demand at Webroot is no exception. To […]
September 12, 2019
September 2019’s Patch Tuesday: 2 zero-days, 17 critical bugs
September 12, 2019
Massive email fraud bust snares 281 suspects
September 12, 2019
Google experiments with DNS-over-HTTPS in Chrome
September 12, 2019
Error-laden phone location data suspended from use in Danish courts
September 12, 2019
How to download online video & audio files with new tool from SaveFrom.net
September 12, 2019
Risk Level: Very Low. Type: Trojan.
September 12, 2019
ThreatList: Apple Adware, Phishing, APT Attacks Threaten macOS Users
September 11, 2019
Major Groupon, Ticketmaster Fraud Scheme Exposed By Insecure Database
September 11, 2019
100s of Flashlight apps on Play Store ask for dangerous permissions
September 11, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 11, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
September 11, 2019
Risk Level: Very Low. Type: Trojan.
September 11, 2019
Several security issues were fixed in curl.
September 11, 2019
198 Million Car-Buyer Records Exposed Online for All to See
September 11, 2019
Intel CPUs Vulnerable to Sensitive Data Leakage in NetCAT Attack
September 11, 2019
Toyota parts supplier loses $37 million in email scam
September 11, 2019
Lemonade is changing the way we insure our homes
September 11, 2019
Operation reWired: 281 suspected email scammers arrested around the world
September 11, 2019
Strangest Phishing Lures of 2019: From Divorce Papers to Real Estate Decoys
September 11, 2019
Feds Indict 281 People for Involvement in Massive E-Mail Fraud Scheme
September 11, 2019
Wikipedia fights off huge DDoS attack
September 11, 2019
LinkedIn can’t block public profile data scraping, court rules
September 11, 2019
Telegram fixes ‘unsend message’ bug that held on to your pictures
September 11, 2019
Facebook says location data in iOS 13, Android 10 may be confusing
September 11, 2019
How Can SEO Help Increase Website Security?
September 11, 2019
Selfies for kids – A guide for parents
Are you – and especially your children – aware of the risks that may come with sharing selfies? The post Selfies for kids – A guide for parents appeared first on WeLiveSecurity
September 11, 2019
An update for rh-dotnet21-dotnet and rh-dotnet22-dotnet is now available for .NET Core on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
September 11, 2019
An update for dotnet is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
September 11, 2019
An update that solves three vulnerabilities and has 9 fixes is now available.
September 11, 2019
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
September 11, 2019
An update for the pki-deps:10.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 11, 2019
An update for poppler is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
September 11, 2019
An update for libwmf is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
September 11, 2019
An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
September 11, 2019
USN 4115-1 introduced a regression in the Linux kernel.
September 11, 2019
An update for the openshift and atomic-enterprise-service-catalog packages is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 11, 2019
An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
September 11, 2019
security update
September 10, 2019