March 2, 2019
LinuxSecurity.com: gdm 3.30.3 release. – Screen lock bypass fix (when timed login is enabled) (CVE-2019-3825) – Translation updates
March 2, 2019
LinuxSecurity.com: FreeRDP fix for CVE-2018-1000852, Remmina bugfix update and rebuilds for updated FreeRDP.
March 2, 2019
LinuxSecurity.com: FreeRDP fix for CVE-2018-1000852, Remmina bugfix update and rebuilds for updated FreeRDP.
March 2, 2019
LinuxSecurity.com: FreeRDP fix for CVE-2018-1000852, Remmina bugfix update and rebuilds for updated FreeRDP.
March 2, 2019
LinuxSecurity.com: FreeRDP fix for CVE-2018-1000852, Remmina bugfix update and rebuilds for updated FreeRDP.
March 2, 2019
LinuxSecurity.com: fix for CVE-2018-5704 (RHBZ 1534844)
March 2, 2019
LinuxSecurity.com: Restrict default configuration to localhost.
March 2, 2019
LinuxSecurity.com: fix for CVE-2018-5704 (RHBZ 1534844)
March 2, 2019
LinuxSecurity.com: This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files.
March 2, 2019
LinuxSecurity.com: Restrict default configuration to localhost.
March 2, 2019
LinuxSecurity.com: An update that solves one vulnerability and has three fixes is now available.
March 2, 2019
security update
March 1, 2019
security update
March 1, 2019
security update
March 1, 2019
security update
March 1, 2019
Type: Vulnerability. WinRAR is prone to multiple security vulnerabilities; fixes are available.
March 1, 2019
Podcast: RSA Conference 2019 Preview
March 1, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
March 1, 2019
LinuxSecurity.com: An update that solves one vulnerability and has 5 fixes is now available.
March 1, 2019
LinuxSecurity.com: An update that solves 5 vulnerabilities and has 33 fixes is now available.
March 1, 2019
LinuxSecurity.com: A vulnerability was discovered in uw-imap, the University of Washington IMAP Toolkit, that might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a
March 1, 2019
Data-tracking Chrome flaw triggered by viewing PDFs
March 1, 2019
A year in review: 2018 Product Security Risk Report
March 1, 2019
Reading Time: ~2 min. Fake Apex Legends App Spreads Malware As the popularity of the latest free-to-play battle royale pushes ever higher, malicious Apex Legends apps have been spotted in the Google Play store with upwards of 100,000 downloads. The fake apps typically offer free in-game currency, or free downloads for an already free game, while […]
March 1, 2019
LinuxSecurity.com: Garming Sam reported an out-of-bounds read in the ldb_wildcard_compare() function of ldb, a LDAP-like embedded database, resulting in denial of service.
March 1, 2019
LinuxSecurity.com: Several vulnerabilities were discovered in WordPress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) and PHP injections attacks, delete files, leak potentially sensitive data, create posts of unauthorized types, or
March 1, 2019
security update
March 1, 2019
Reading Time: ~6 min. This is the third of a three-part report on the state of three malware categories: miners, ransomware and information stealers. Ransomware is any malware that holds your data ransom. These days it usually involves encrypting a victim’s data before asking for cash (typically cryptocurrency) to decrypt it. Ransomware ruled the malware world since […]
February 28, 2019
LinuxSecurity.com: An update that contains security fixes can now be installed.
February 28, 2019
LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available.
February 28, 2019
Reading Time: ~5 min. The landscape of digital security is rapidly shifting, and even the largest tech giants are scrambling to keep up with new data regulations and cybersecurity threats. Small to medium-sized businesses (SMBs) are often left out of these important conversations, leaving themselves — and their users — vulnerable. In an effort to […]
February 28, 2019
Coinhive to Mine Its Last Monero in March
February 28, 2019
A video about cybersecurity threats that doesn’t feature any computers
February 28, 2019
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.
February 28, 2019
Coinhive cryptocurrency miner to call it a day next week
The service became notorious for its use by ne’er-do-wells looking to make a quick buck by hijacking the processing power of victim machines to generate virtual money The post Coinhive cryptocurrency miner to call it a day next week appeared first on WeLiveSecurity
February 28, 2019
LinuxSecurity.com: Several security issues were fixed in GD.
February 28, 2019
Cisco Fixes Critical Flaw in Wireless VPN, Firewall Routers
February 28, 2019
Thunderclap: Apple Macs at risk from malicious Thunderbolt peripherals
February 28, 2019
US House and Senate debate new data privacy law
February 28, 2019
LinuxSecurity.com: ultiple vulnerabilities have been discovered in SoX (Sound eXchange), a sound processing program: CVE-2017-15370
February 28, 2019
US pushed Russian troll factory offline during US midterm elections
February 28, 2019
Businesses warned of malware spread via LinkedIn job offers
February 28, 2019
LinuxSecurity.com: An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 28, 2019
LinuxSecurity.com: Several vulnerabilities were found in QEMU, a fast processor emulator: CVE-2018-12617
February 28, 2019
LinuxSecurity.com: An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
February 28, 2019
Smashing Security #117: SWATs on a plane
February 28, 2019
LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 28, 2019
LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 28, 2019
LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 28, 2019
LinuxSecurity.com: An update for ansible is now available for Ansible Engine 2.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
February 28, 2019
Risk Level: Very Low. Type: Trojan.
February 28, 2019
LinuxSecurity.com: An update that solves two vulnerabilities and has four fixes is now available.
February 27, 2019
Card-Skimming Scripts Hide Behind Google Analytics, Angular
February 27, 2019
Ring Doorbell Flaw Opens Door to Spying
February 27, 2019
Cisco Patches High-Severity Webex Vulnerability For Third Time
February 27, 2019
Thunderclap Flaws Shatter Peripheral Security
February 27, 2019
LinuxSecurity.com: An information leak issue was discovered in phpMyAdmin. An attacker can read any file on the server that the web server’s user can access. This is related to the mysql.allow_local_infile PHP
February 27, 2019
LinuxSecurity.com: A regression was introduced in the previous chromium security update. The browser would always crash when launched in headless mode. This update fixes this problem.
February 27, 2019
‘Highly critical’ bug exposes unpatched Drupal sites to attacks
Worse, attackers have already been spotted targeting the flaw to deliver cryptocurrency miners and other payloads The post ‘Highly critical’ bug exposes unpatched Drupal sites to attacks appeared first on WeLiveSecurity
February 27, 2019
Bronze Union APT Updates Remote Access Trojans in Fresh Wave of Attacks
February 27, 2019
LinuxSecurity.com: An update that solves 5 vulnerabilities and has 7 fixes is now available.
February 27, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 27, 2019
LinuxSecurity.com: An update that fixes one vulnerability is now available.
February 27, 2019
LinuxSecurity.com: An update that solves one vulnerability and has 7 fixes is now available.
February 27, 2019
LinuxSecurity.com: An update that solves two vulnerabilities and has one errata is now available.
February 27, 2019
LinuxSecurity.com: An update that solves one vulnerability and has one errata is now available.
February 27, 2019
Nvidia patches eight security flaws in graphics products
February 27, 2019
Researchers break e-signatures in 22 common PDF viewers
February 27, 2019
Police bust their own radio shop manager for dodgy software updates
February 27, 2019
Millions of utilities customers’ passwords stored in plain text
February 27, 2019
How to spot if your password was stolen in a security breach
Following the revelation that a list containing millions of stolen usernames and passwords had appeared online, we tell you a few different ways to find out if your credentials were stolen in that—or any other—security breach The post How to spot if your password was stolen in a security breach appeared first on WeLiveSecurity
February 27, 2019
LinuxSecurity.com: New openssl packages are available for Slackware 14.2 to fix a security issue.
February 27, 2019
LinuxSecurity.com: Security fix for CVE-2018-16741,CVE-2018-16744,CVE-2018-16745
February 27, 2019