Menu

Latest articles

More than a million people have their biometric data exposed in massive security breach
This iPhone charging cable can compromise your device & steal data
Bomb-hoaxing DoSer who targeted police in revenge was caught after Twitter taunts

Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code. [More…]

A vulnerability in ZeroMQ might allow an attacker to execute arbitrary code.

A vulnerability in ProFTPD could result in the arbitrary execution of code.

A vulnerability in ZNC allows users to escalate privileges.

Multiple vulnerabilities have been found in polkit, the worst of which could result in privilege escalation.

Multiple vulnerabilities have been found in LibreOffice, the worst of which could result in the arbitrary execution of code.

Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.

Multiple vulnerabilities have been found in libarchive, the worst of which could result in the arbitrary execution of code.

Multiple vulnerabilities have been found in Oracles JDK and JRE software suites.

Multiple vulnerabilities have been found in SQLite, the worst of which could result in the arbitrary execution of code.

‘NULL’ license plate gets security researcher $12K in tickets
Hacking forum spills rival’s 321,000 member database
Smashing Security #141: Black Hat and Bridezillas
How dodgy browser plugins, web scripts can silently rewrite that URL you were about to hit – and throw you into an internet wormhole
World recoils in horror as smartphone maker accused of helping government snoops read encrypted texts, track device whereabouts
Intel: Listen up, you NUC-leheads! Mini PCs and compute sticks just got a major security fix
Chin up, CapitalOne: You may not have been the suspected hacker’s only victim. Feds fear 30-plus organizations hit

security update

security update

Fingerprints of 1M Exposed in Public Biometrics Database
Lenovo Warns of ThinkPad Bugs, One Unpatched
20-Year-Old Bug in Legacy Microsoft Code Plagues All Windows Users
Windows Users at Risk From High-Severity Intel Software Flaw
DEF CON and Feds Partner on Anonymous Bug Submission Program

An update that fixes two vulnerabilities is now available.

An update that fixes 12 vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

Facebook Records User Audio, Sparking Privacy Questions
Microsoft warns of wormable vulnerabilities in Windows
Patch time! Microsoft warns of new worm-ready RDP bugs

Several security issues have been fixed in otrs2, a well known trouble ticket system.

Norman Cryptominer Employs Sophisticated Obfuscation Tactics
TikTok Scammers Cash In On Adult Dating, Impersonation Tricks
Not very Suprema: Biometric access biz bares 27 million records and plaintext admin creds

An update that fixes 7 vulnerabilities is now available.

Epic Games slapped with lawsuit over hacked Fortnite accounts
Fortnite World Cup champion and family swatted while live streaming

An update that solves two vulnerabilities and has one errata is now available.

An update that fixes one vulnerability is now available.

Coinbase explains background to June zero-day Firefox attack
4 ‘despicables’ jailed for running hidden worldwide child abuse forums

wpa_supplicant and hostapd could be made to expose sensitive information over the network.

In the Balkans, businesses are under fire from a double‑barreled weapon

ESET researchers discovered a campaign that uses two malicious tools with similar capabilities to ensure both resilience and broader potential for the attackers The post In the Balkans, businesses are under fire from a double‑barreled weapon appeared first on WeLiveSecurity

HTTP/2, Brute! Then fall, server. Admin! Ops! The server is dead

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

An update that fixes two vulnerabilities is now available.

An update that contains security fixes can now be installed.

An update that fixes four vulnerabilities is now available.

This summer’s hottest sequels: BlueKeep II, III, IV and V – the latest wormable RDP holes in Microsoft Windows

security update

We checked and yup, it’s no longer 2001. And yet you can pwn a Windows box via Notepad.exe
Shades of BlueKeep: Wormable Remote Desktop Bugs Top August Patch Tuesday List
Patch your internet-connected printer! Serious vulnerabilities discovered
22 Critical Flaws Patched in Adobe Photoshop
Cerberus Enters the Android Malware Rental Scene
An Army Watchkeeper drone tried to land. Then meatbags took over from the computers

An update that solves four vulnerabilities and has one errata is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that solves four vulnerabilities and has three fixes is now available.

British Airways E-Ticketing Flaw Exposes Passenger Flight, Personal Data
Fake news doesn’t (always) fool mice
Hacked devices can be turned into acoustic weapons

An update for kernel is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Chrome Incognito mode detection fix busted by researchers

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

US insurers face SEC probe over web-access bungle that exposed ‘up to 885 million’ files

An update that fixes one vulnerability is now available.

An update that fixes 16 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes four vulnerabilities is now available.

Header aches in Firefox, Tor, Brave and Chrome as HTTP opens new security holes
Hacking my airplane – BlackHat edition

After welcoming hacking research, automobile technology started to get better at defending against hacks. So why has the airline industry not been as welcoming? The post Hacking my airplane – BlackHat edition appeared first on WeLiveSecurity

Android users menaced by pre-installed malware
Web body mulls halving HTTPS cert lifetimes. That screaming in the distance is HTTPS cert sellers fearing orgs will bail for Let’s Encrypt
Tor pedos torpedoed again, this time Feds torpedo four Tor pedos – and keep how they unmasked dark-web scumbags under wraps
What do Windows 10 and Uber or Lyft have in common? One bad driver can really ruin your day. And 40 can totally ruin your month

security update

security update

AT&T, T-Mobile, Sprint, Verizon Blasted For Data Privacy Policies
White hat hackers infect Canon DSLR camera with ransomware
4 Dating Apps Pinpoint Users’ Precise Locations – and Leak the Data
Printer pwnage, phone poppage, and apparently US Homeland Security needs security help
US still ‘not prepared’ in event of a serious cyber attack and Congress can’t help if it happens
Tips for Successful Zero-Trust Implementation
US military swoops into DEF CON seeking a few good hackers for debut aviation pwning village
Black Hat 2019 News Wrap: The Best and Worst of the Show
Plot twist: Google’s not spying on King’s Cross with facial recognition tech, but its landlord is
Gamers Beware: Zero-Day in Steam Client Affects All Windows Users
Hacking 4G hotspots – when did you last update?

The package postgresql before version 11.5-1 is vulnerable to multiple issues including access restriction bypass and information disclosure.

The package postgresql-libs before version 11.5-1 is vulnerable to multiple issues including access restriction bypass and information disclosure.

The package chromium before version 76.0.3809.100-1 is vulnerable to arbitrary code execution.

Apple will hand out unlocked iPhones to vetted researchers
Facebook facial recognition: class action suit gets court’s go ahead