The Hacker News

A Comprehensive Guide On How to Protect Your Websites From Hackers

Humankind had come a long way from the time when the Internet became mainstream. What started as a research project ARPANET (Advanced Research Projects Agency Network) funded by DARPA has grown exponentially and has single-handedly revolutionized hum...

LinuxSecurity - Security Advisories

Debian LTS: DLA-1714-2: libsdl2 regression update

The update of libsdl2 released as DLA 1714-1 led to several regressions, as reported by Avital Ostromich. These regressions are caused by libsdl1.2 patches for CVE-2019-7637, CVE-2019-7635, CVE-2019-7638 and CVE-2019-7636 being applied to libsdl2 wit...

LinuxSecurity - Security Advisories

Debian LTS: DLA-1713-2: libsdl1.2 regression update

The update of libsdl1.2 released as DLA 1713-1 led to a regression, caused by an incomplete fix for CVE-2019-7637. This issue was known upstream and resulted, among others, in windows versions from libsdl1.2 failing to set video mode....

Latest Hacking News

Pitney Bowes Face Service Disruption Following Ransomware Attack

The latest ransomware attack victim turns out to be global mailing and shipping service, Pitney Bowes. As confirmed by thePitney Bowes Face Service Disruption Following Ransomware Attack on Latest Hacking News...

LinuxSecurity - Security Advisories

Ubuntu 4157-1: Linux kernel vulnerabilities

Several security issues were fixed in the Linux kernel....

LinuxSecurity - Security Advisories

Mageia 2019-0298: sudo security update

The updated packages fix a security vulnerability: Potential bypass of Runas user restrictions. (CVE-2019-14287) References:...

LinuxSecurity - Security Advisories

Mageia 2019-0297: libpcap and tcpdump security update

Updated libpcap and tcpdump packages fix security vulnerabilities: The libpcap packages have been updated to versions 1.9.1 and tcpdump to 4.9.3, respectively, fixing several buffer overread and overflow issues....

LinuxSecurity - Security Advisories

Mageia 2019-0296: e2fsprogs security update

Updated e2fsprogs packages fix security vulnerability: Lilith of Cisco Talos discovered a buffer overflow flaw in the quota code used by e2fsck from the ext2/ext3/ext4 file system utilities. Running e2fsck on a malformed file system can result in th...

LinuxSecurity - Security Advisories

Mageia 2019-0295: kernel security update

This kernel update is based on the upstream 5.3.6 and fixes several issues. * a potential kernel crash by using suppress-prefix rule in ipv6 * 3rdparty rtl8723/rtl8821ce drivers have been fixed to work with kernel 5.3 series...

LinuxSecurity - Security Advisories

Mageia 2019-0294: nmap security update

Updated nmap packages fix security vulnerability: Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted TCP-based service (CVE-2018-15173)....

LinuxSecurity - Security Advisories

SUSE: 2019:2702-1 moderate: gcc7

An update that solves two vulnerabilities and has three fixes is now available....

Latest Hacking News

Facebook Bug Bounty Program Now Includes Third-Party Websites & Apps Integrating With Facebook

Facebook is now seemingly taking additional steps to ensuring a secure online environment. But, this time, it has expressed plansFacebook Bug Bounty Program Now Includes Third-Party Websites & Apps Integrating With Facebook on Latest Hacking News...

Latest Hacking News

Google Just Launched Latest USB-C Titan Security Keys

Security keysÂare designed to save users from the burden of remembering passwords, with the added benefit of mitigating the spoilsGoogle Just Launched Latest USB-C Titan Security Keys on Latest Hacking News...

LinuxSecurity - Security Advisories

SUSE: 2019:2687-1 moderate: mariadb-100

An update that fixes 6 vulnerabilities is now available....

LinuxSecurity - Security Advisories

openSUSE: 2019:2321-1: moderate: GraphicsMagick

An update that fixes one vulnerability is now available....

LinuxSecurity - Security Advisories

ArchLinux: 201910-9: sudo: privilege escalation

The package sudo before version 1.8.28-1 is vulnerable to privilege escalation....

Latest Hacking News

Lazarus Group Target Users Via Fake Company Serving Cryptocurrency Malware

The infamous Lazarus Group, allegedly from North Korean origin are back in action. Researchers have found the attackers to beLazarus Group Target Users Via Fake Company Serving Cryptocurrency Malware on Latest Hacking News...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3007:01 Moderate: OpenShift Container Platform 4.1.20

An update for openshift-enterprise-builder-container is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) b...

LinuxSecurity - Security Advisories

SciLinux: SLSA-2019-3067-1 Important: jss on SL7.x x86_64

JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate (CVE-2019-14823) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) liste...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3131:01 Important: OpenShift Container Platform 4.1.20

An update is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3132:01 Important: OpenShift Container Platform 4.1.20

An update for openshift is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

Ubuntu 4156-2: SDL vulnerabilities

Several security issues were fixed in SDL....

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3127:01 Important: java-11-openjdk security update

An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

The Hacker News

Facebook Now Pays Hackers for Reporting Security Bugs in 3rd-Party Apps

Following a series of security mishaps and data abuse through its social media platform, Facebook today expanding its bug bounty program in a very unique way to beef up the security of third-party apps and websites that integrate with its platform.La...

Latest Hacking News

Microsoft Launches 'Tamper Protection' For Windows Defender

One of the major attack strategies of most malware is their ability to tamper or turn off antivirus. Microsoft hasMicrosoft Launches 'Tamper Protection' For Windows Defender on Latest Hacking News...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3128:01 Important: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Articles

5 ways to contribute to open source during Hacktoberfest

Here are a few strategies to make the most of participating in the month-long celebration of open source software. Learn how you can get involved: ...

LinuxSecurity - Security Articles

Linux Sudo Bug Lets Non-Privileged Users To Run Commands As Root

A Linux Sudo bug which allows users to run some restricted commands as root without permission has been discovered. Learn more about this security vulnerability in an informative Techworm article:...

LinuxSecurity - Security Advisories

openSUSE: 2019:2317-1: moderate: GraphicsMagick

An update that fixes one vulnerability is now available....

LinuxSecurity - Security Advisories

openSUSE: 2019:2319-1: important: libopenmpt

An update that fixes one vulnerability is now available....

LinuxSecurity - Security Advisories

openSUSE: 2019:2318-1: moderate: epiphany

An update that fixes one vulnerability is now available....

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3089:01 Important: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity...

LinuxSecurity - Security Advisories

Debian: DSA-4544-1: unbound security update

X41 D-Sec discovered that unbound, a validating, recursive, and caching DNS resolver, did not correctly process some NOTIFY queries. This could lead to remote denial-of-service by application crash....

LinuxSecurity - Security Advisories

Fedora 29: runc FEDORA-2019-3fc86a518b

Resolves: #1757214, #1757290 - CVE-2019-16884 ---- add patch for cgroupsv2...

LinuxSecurity - Security Advisories

Fedora 30: sudo FEDORA-2019-9cb221f2be

* Rebase to 1.8.28 * Fixed CVE-2019-14287...

LinuxSecurity - Security Advisories

Fedora 30: runc FEDORA-2019-96946c39dd

Resolves: #1757214, #1757290 - CVE-2019-16884 ---- add patch for cgroupsv2...

LinuxSecurity - Security Advisories

Fedora 30: opendmarc FEDORA-2019-24b3f84f6e

This update provides the final 1.3.2 release (previously the package was 1.3.2 beta). It also includes the previously-omitted database schema directory (resolving [#1415753](https://bugzilla.redhat.com/show_bug.cgi?id=1415753)) and rddmarc tools, and...

Latest Hacking News

Linux SUDO Vulnerability Found That Allows Low Privileged Users To Run Commands As Root

Researchers have discovered a security vulnerability in the Linux SUDO command that threatens numerous Linux servers. The flaw could allowLinux SUDO Vulnerability Found That Allows Low Privileged Users To Run Commands As Root on Latest Hacking News...

LinuxSecurity - Security Advisories

SUSE: 2019:2673-1 important: libpcap

An update that fixes two vulnerabilities is now available....

LinuxSecurity - Security Advisories

Debian: DSA-4509-3: apache2 security update

It was reported that the apache2 update released as DSA 4509-1 incorrectly fixed CVE-2019-10092. Updated apache2 packages are now available to correct this issue. For reference, the relevant part of the original advisory text follows....

LinuxSecurity - Security Advisories

SUSE: 2019:2674-1 important: tcpdump

An update that fixes 28 vulnerabilities is now available....

The Hacker News

Adobe Releases Out-of-Band Security Patches for 82 Flaws in Various Products

No, it's not a patch Tuesday.It's the third Tuesday of the month, and as The Hacker News shared an early heads-up late last week on Twitter, Adobe today finally released pre-announced out-of-band security updates to patch a total of 82 security vulne...

Latest Hacking News

Mozilla Hardens Their Firefox Browser To Fend Off Code Injection Attacks

Mozilla has announced another bold step towards ensuring better security for users. This time, they will be fending off codeMozilla Hardens Their Firefox Browser To Fend Off Code Injection Attacks on Latest Hacking News...

LinuxSecurity - Security Advisories

Ubuntu 4156-1: SDL vulnerabilities

Several security issues were fixed in SDL....

LinuxSecurity - Security Advisories

SUSE: 2019:2667-1 important: sudo

An update that fixes one vulnerability is now available....

LinuxSecurity - Security Advisories

SUSE: 2019:2668-1 important: sudo

An update that solves one vulnerability and has three fixes is now available....

LinuxSecurity - Security Advisories

SUSE: 2019:2669-1 important: libpcap

An update that fixes two vulnerabilities is now available....

LinuxSecurity - Security Advisories

SUSE: 2019:2666-1 important: sudo

An update that fixes one vulnerability is now available....

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3055:01 Important: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity ra...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3067:01 Important: jss security update

An update for jss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity ratin...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3076:01 Important: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed sever...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3082:01 Moderate: Red Hat JBoss Enterprise Application

A security update is now available for Red Hat JBoss Enterprise Application Platform from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base s...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3083:01 Moderate: Red Hat JBoss Enterprise Application

A security update is now available for Red Hat JBoss Enterprise Application Platform from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base s...

The Hacker News

Apple Under Fire Over Sending Some Users Browsing Data to China's Tencent

Do you know Apple is sending iOS web browsing related data of some of its users to Chinese Internet company Tencent?I am sure many of you are not aware of this, neither was I, and believe me, none of us could expect this from a tech company that prom...

LinuxSecurity - Security Advisories

Ubuntu 4155-1: Aspell vulnerability

Aspell could be made to expose sensitive information if it received a specially crafted input....

The Hacker News

Sudo Flaw Lets Linux Users Run Commands As Root Even When They're Restricted

Attention Linux Users!A new vulnerability has been discovered in Sudo'one of the most important, powerful, and commonly used utilities that comes as a core command installed on almost every UNIX and Linux-based operating system.The vulnerability in q...

LinuxSecurity - Security Advisories

SUSE: 2019:14191-1 important: tcpdump

An update that fixes 83 vulnerabilities is now available....

The Hacker News

Firefox Blocks Inline and Eval JavaScript on Internal Pages to Prevent Injection Attacks

In an effort to mitigate a large class of potential cross-site scripting issues in Firefox, Mozilla has blocked execution of all inline scripts and potentially dangerous eval-like functions for built-in "about: pages" that are the gateway to sensitiv...

Latest Hacking News

Samsung Customer Finds Simple Security Glitch That Allows Authentication Bypass in Galaxy S10 Fingerprint Reader

Samsung Galaxy S10 boasts an in-display fingerprint reader' that has now suffered a breach. As discovered by a customer, withSamsung Customer Finds Simple Security Glitch That Allows Authentication Bypass in Galaxy S10 Fingerprint Reader on Latest Ha...

LinuxSecurity - Security Articles

350+ hackers hunt down missing people in first such hackathon

More than 350 ethical hackers got together in cities across Australia on Friday for a hackathon in which they worked to cyber trace a missing face', in the first-ever capture the flag event devoted to finding missing persons. Learn more about this ha...

LinuxSecurity - Security Articles

This is how CIOs should approach ethics and privacy

Ethics checks and balances within an organization lower risks for everyone involved. Learn more in an interesting The Next Web article:...

LinuxSecurity - Security Articles

What is the Tor Browser? How it works and how it can help you protect your identity online

Tor Browser offers the best anonymous web browsing available today, and researchers are hard at work improving Tor's anonymity properties. Learn how Tor can help protect your privacy online in a great CSO article:...

The Hacker News

Report to Your Management with the Definitive 'Incident Response for Management' Presentation Template

Security incidents occur. It's not a matter of 'if' but of 'when.' There are security products and procedures that were implemented to optimize the IR process, so from the 'security-professional' angle, things are taken care of.However, many security...

LinuxSecurity - Security Advisories

openSUSE: 2019:2316-1: important: sudo

An update that fixes one vulnerability is now available....

Latest Hacking News

Apple Admit to Sharing iOS 13 Safari Browsing History With Chinese Firm Tencent Holdings

Apple generally holds a boastful stance with regard to user privacy. However, some recent reports have made some dangerous revelationsApple Admit to Sharing iOS 13 Safari Browsing History With Chinese Firm Tencent Holdings on Latest Hacking News...

LinuxSecurity - Security Advisories

Slackware: 2019-287-01: sudo Security Update

New sudo packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue....

LinuxSecurity - Security Advisories

SUSE: 2019:2655-1 important: kubernetes-salt

An update that contains security fixes can now be installed....

LinuxSecurity - Security Advisories

SUSE: 2019:2656-1 important: sudo

An update that fixes one vulnerability is now available....

LinuxSecurity - Security Advisories

SUSE: 2019:2657-1 moderate: dhcp

An update that solves one vulnerability and has two fixes is now available....

LinuxSecurity - Security Advisories

SUSE: 2019:1299-2 ffmpeg

An update that fixes two vulnerabilities is now available....

LinuxSecurity - Security Advisories

Debian LTS: DLA-1959-1: xtrlock security update

It was discovered that multitouch devices were not being disabled by the "xtrlock" screen locking utility. xtrlock did not block multitouch events so an attacker could still...

LinuxSecurity - Security Advisories

Debian: DSA-4543-1: sudo security update

Joe Vennix discovered that sudo, a program designed to provide limited super user privileges to specific users, when configured to allow a user to run commands as an arbitrary user via the ALL keyword in a Runas specification, allows to run commands ...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3050:01 Important: Red Hat Single Sign-On 7.3.4 security

A security update is now available for Red Hat Single Sign-On 7.3 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3049:01 Low: RH-SSO 7.3.4 adapters for Enterprise

Red Hat Single Sign-On 7.3.4 adapters are now available for Red Hat JBoss Enterprise Application Platform 7.2 Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, ...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3048:01 Low: RH-SSO 7.3.4 adapters for Enterprise

Red Hat Single Sign-On 7.3.4 adapters are now available for Red Hat JBoss Enterprise Application Platform 6. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, w...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3046:01 Important: Red Hat Single Sign-On 7.3.4 security

New Red Hat Single Sign-On 7.3.4 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3045:01 Important: Red Hat Single Sign-On 7.3.4 security

New Red Hat Single Sign-On 7.3.4 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3044:01 Important: Red Hat Single Sign-On 7.3.4 security

New Red Hat Single Sign-On 7.3.4 packages are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3041:01 Important: Red Hat OpenShift Service Mesh 1.0.1

Red Hat OpenShift Service Mesh 1.0.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vuln...

Latest Hacking News

Huawei Claims To Endure Over 1 Million Cyber Attacks Each Day

Whilst pretty much anyone on the Internet is likely to be subject to attempted cyber attacks every day, it seemsHuawei Claims To Endure Over 1 Million Cyber Attacks Each Day on Latest Hacking News...

LinuxSecurity - Security Advisories

Ubuntu 4154-1: Sudo vulnerability

Sudo could be made to run commands as root if it called with a specially crafted user ID....

LinuxSecurity - Security Articles

Computing enthusiast cracks ancient Unix code

Old passwords never die " they just become easier to decode. That's the message from a tight-knit community of tech history enthusiasts who have been diligently cracking the passwords used by some of the original Unix engineers four decades ago. Lear...

LinuxSecurity - Security Articles

Soldering spy chips inside firewalls is now a cheap hack, shows researcher

The tiny ATtiny85 chip doesnt look like the next big cyberthreat facing the world, but sneaking one on to a firewall motherboard would be bad news for security were it to happen. Learn more in an interesting Naked Security article: ...

LinuxSecurity - Security Advisories

Debian LTS: DLA-1953-2: clamav regression update

The update of clamav released as DLA 1953-1 led to permission issues on /var/run/clamav. This caused several users to experience issues restarting the clamav daemon. This regression is caused by a mistakenly backported patch from the stretch package,...

LinuxSecurity - Security Advisories

Debian LTS: DLA-1958-1: libdatetime-timezone-perl new upstream

This update includes the changes in tzdata 2019c for the Perl bindings. For the list of changes, see DLA-1957-1. For Debian 8 "Jessie", this problem has been fixed in version...

LinuxSecurity - Security Advisories

Debian LTS: DLA-1957-1: tzdata new upstream version

This update includes the changes in tzdata 2018c. Notable changes are: - Brazil has canceled DST and will stay on standard time indefinitely....

Latest Hacking News

iOS 13 Now Warns Users Of Background Apps Secretly Tracking Location

Applications tracking users' locations have been a pain in the neck for some time. While location data seems necessary informationiOS 13 Now Warns Users Of Background Apps Secretly Tracking Location on Latest Hacking News...

LinuxSecurity - Security Advisories

openSUSE: 2019:2314-1: important: chromium

An update that fixes 5 vulnerabilities is now available....

LinuxSecurity - Security Advisories

openSUSE: 2019:2313-1: important: chromium

An update that fixes 5 vulnerabilities is now available....

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-2989:01 Moderate: OpenShift Container Platform 3.10

An update for atomic-openshift kube-apiserver is now available for Red Hat OpenShift Container Platform 3.10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base sc...

Latest Hacking News

Imperva Breach Update: Stolen AWS API Key Triggered The Breach

It has been over a month since the cybersecurity firm Imperva suffered a breach, we now have an update. AsImperva Breach Update: Stolen AWS API Key Triggered The Breach on Latest Hacking News...

Latest Hacking News

Microsoft October Patch Tuesday Addressed 9 Critical Vulnerabilities

This Tuesday, Microsoft has released its monthly scheduled updates addressing various security bugs. The October Patch Tuesday, however, relatively differsMicrosoft October Patch Tuesday Addressed 9 Critical Vulnerabilities on Latest Hacking News...

Latest Hacking News

Multiple Gaming And Photo Apps On Play Store Found to be Infected With Android Malware

Despite back-to-back reports of malicious apps, Google's Play Store still harbors lots of such applications. Once again, researchers have discoveredMultiple Gaming And Photo Apps On Play Store Found to be Infected With Android Malware on Latest Hacki...

LinuxSecurity - Security Advisories

Debian: DSA-4539-3: openssl regression update

The update for openssl released as DSA 4539-1 introduced a regression where AES-CBC-HMAC-SHA ciphers were not enabled. Updated openssl packages are now available to correct this issue....

LinuxSecurity - Security Advisories

Fedora 30: thunderbird FEDORA-2019-14af6fde2e

Update to latest upstream version....

LinuxSecurity - Security Advisories

openSUSE: 2019:2311-1: important: chromium

An update that fixes 5 vulnerabilities is now available....

LinuxSecurity - Security Advisories

openSUSE: 2019:2312-1: important: chromium

An update that fixes 5 vulnerabilities is now available....

Latest Hacking News

Zero-Day Vulnerability in iTunes Being Exploited in the Wild via BitPaymer Ransomware

Researchers have discovered a zero-day vulnerability in iTunes that is under active exploit. They found the hackers behind the BitPaymerZero-Day Vulnerability in iTunes Being Exploited in the Wild via BitPaymer Ransomware on Latest Hacking News...

The Hacker News

SIM Cards in 29 Countries Vulnerable to Remote Simjacker Attacks

Until now, I'm sure you all might have heard of the SimJacker vulnerability disclosed exactly a month ago that affects a wide range of SIM cards and can remotely be exploited to hack into any mobile phone just by sending a specially crafted binary SM...

LinuxSecurity - Security Advisories

Fedora 29: opendmarc FEDORA-2019-e1f0417a24

This update provides the final 1.3.2 release (previously the package was 1.3.2 beta). It also includes the previously-omitted database schema directory (resolving [#1415753](https://bugzilla.redhat.com/show_bug.cgi?id=1415753)) and rddmarc tools, and...

LinuxSecurity - Security Advisories

Fedora 29: ming FEDORA-2019-03aa4f746c

Backport security fixes from [PR#145](https://github.com/libming/libming/pull/145) Fixes: CVE-2018-7866, CVE-2018-7873, CVE-2018-7876, CVE-2018-9009, CVE-2018-9132...

LinuxSecurity - Security Advisories

Fedora 30: libapreq2 FEDORA-2019-7fbe8a9a06

Patch CVE-2019-12412....

LinuxSecurity - Security Advisories

Fedora 30: cutter-re FEDORA-2019-b3de19c346

- Rebase radare2 to 3.9.0 - Rebase cutter-re to 1.9.0 - fix CVE-2019-14745 in radare2 on F30...

LinuxSecurity - Security Advisories

Fedora 30: jackson-parent FEDORA-2019-b171554877

- Update jackson-parent to version 2.10. - Update jackson-bom to version 2.10.0. - Update jackson-annotations to version 2.10.0. - Update jackson-core to version 2.10.0. - Update jackson-databind to version 2.10.0. Resolves CVE-2019-14540, CVE-2019-1...

LinuxSecurity - Security Advisories

Fedora 30: jackson-core FEDORA-2019-b171554877

- Update jackson-parent to version 2.10. - Update jackson-bom to version 2.10.0. - Update jackson-annotations to version 2.10.0. - Update jackson-core to version 2.10.0. - Update jackson-databind to version 2.10.0. Resolves CVE-2019-14540, CVE-2019-1...

LinuxSecurity - Security Advisories

Fedora 30: ming FEDORA-2019-5139453028

Backport security fixes from [PR#145](https://github.com/libming/libming/pull/145) Fixes: CVE-2018-7866, CVE-2018-7873, CVE-2018-7876, CVE-2018-9009, CVE-2018-9132...

The Hacker News

UNIX Co-Founder Ken Thompson's BSD Password Has Finally Been Cracked

A 39-year-old password of Ken Thompson, the co-creator of the UNIX operating system among, has finally been cracked that belongs to a BSD-based system, one of the original versions of UNIX, which was back then used by various computer science pioneer...

LinuxSecurity - Security Advisories

Debian LTS: DLA-1955-1: tcpdump security update

Several vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These security vulnerabilities might result in denial of service or, potentially, execution of arbitrary code....

LinuxSecurity - Security Advisories

SUSE: 2019:1212-2 important: jakarta-commons-fileupload

An update that solves one vulnerability and has one errata is now available....

LinuxSecurity - Security Advisories

SUSE: 2019:1368-2 important: Recommended sles12sp3-docker-image, sles12sp4-image, system-user-root

An update that fixes one vulnerability is now available....

LinuxSecurity - Security Advisories

SUSE: 2019:1373-2 moderate: axis

An update that fixes two vulnerabilities is now available....

LinuxSecurity - Security Advisories

SUSE: 2019:2345-2 important: webkit2gtk3

An update that fixes 24 vulnerabilities is now available....

LinuxSecurity - Security Advisories

ArchLinux: 201910-8: sdl: arbitrary code execution

The package sdl before version 1.2.15-13 is vulnerable to arbitrary code execution....

LinuxSecurity - Security Advisories

ArchLinux: 201910-7: chromium: multiple issues

The package chromium before version 77.0.3865.120-1 is vulnerable to multiple issues including arbitrary code execution and information disclosure....

LinuxSecurity - Security Advisories

ArchLinux: 201910-6: unbound: denial of service

The package unbound before version 1.9.4-1 is vulnerable to denial of service....

Latest Hacking News

New Phishing Attack Sends Fake AWS Account Suspension Emails

Continuing with the ongoing wave of phishing campaigns, another attack surfaced online. This one abuses Amazon AWS services to trickNew Phishing Attack Sends Fake AWS Account Suspension Emails on Latest Hacking News...

LinuxSecurity - Security Advisories

Debian LTS: DLA-1956-1: ruby-openid security update

ruby-openid performed discovery first, and then verification. This allowed an attacker to change the URL used for discovery and trick the server into connecting to the URL. This server in turn could be a private server not publicly accessible....

Latest Hacking News

LPE Flaw In HP Touchpoint Analytics Threatened Numerous HP Devices

Heads up HP users! Your HP PC may have been exposed to a cybersecurity threat. Researchers have found a seriousLPE Flaw In HP Touchpoint Analytics Threatened Numerous HP Devices on Latest Hacking News...

LinuxSecurity - Security Articles

#SecTorCa: Millions of Phones Leaking Information Via Tor

There is a privacy threat lurking on perhaps hundreds of millions of devices, that could enable potential attackers to track and profile users, by using information leaked via the Tor network, even if the users never intentionally installed Tor in th...

LinuxSecurity - Security Articles

Hackers bypassing some types of 2FA security FBI warns

Are you aware that hackers are bypassing some types of 2FA security? Get the details: ...

LinuxSecurity - Security Advisories

Debian LTS: DLA-1954-1: lucene-solr security update

A security vulnerability was discovered in lucene-solr, an enterprise search server. The DataImportHandler, an optional but popular module to pull in data...

The Hacker News

Apple iTunes and iCloud for Windows 0-Day Exploited in Ransomware Attacks

Watch out Windows users!The cybercriminal group behind BitPaymer and iEncrypt ransomware attacks has been found exploiting a zero-day vulnerability affecting a little-known component that comes bundled with Apple's iTunes and iCloud software for Wind...

LinuxSecurity - Security Advisories

openSUSE: 2019:2306-1: important: libopenmpt

An update that fixes one vulnerability is now available....

LinuxSecurity - Security Advisories

Fedora 29: krb5 FEDORA-2019-dc4e1d0fb6

Fix KDC crash when logging PKINIT enctypes (CVE-2019-14844) This is a purely denial-of-service issue, though it is unauthenticated, and is unlikely to trigger by accident....

LinuxSecurity - Security Advisories

Fedora 29: SDL2 FEDORA-2019-8ef33a69ca

Update to 2.0.10 to fix security issues....

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3024:01 Moderate: ovirt-web-ui security and bug fix update

An update for ovirt-web-ui is now available for Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3023:01 Moderate: ovirt-engine-ui-extensions security and

An update for ovirt-engine-ui-extensions is now available for Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

RedHat: RHSA-2019-3011:01 Moderate: Red Hat Virtualization security, bug fix,

An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS...

The Hacker News

New Comic Videos Take CISO/Security Vendor Relationship to the Extreme

Today's CISOs operate in an overly intensive environment.As the ones who are tasked with the unenviable accountability for failed protection and successful breaches, they must relentlessly strive to improve their defense lines with workforce educatio...