The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The updated packages fix security vulnerabilities: There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2…
Cybersecurity researchers today uncovered an ongoing new Magecart skimmer campaign that so far has successfully compromised at least 19 different e-commerce we…
Zoom has once again made it to the news owing to another privacy issue. As discovered, Zoom client on WindowsZoom Client On Windows Exposes Windows Credentials…
A serious vulnerability existed in the messenger app LINE that allowed admin access to Official Accounts. Line not only patchedCritical Vulnerability In LINE C…
Miguel Onoro reported that qbittorrent, a bittorrent client with a Qt5 GUI user interface, allows command injection via shell metacharacters in the torrent nam…
COVID-19 is forcing browser makers including Google and Mozilla to continue supporting the TLS 1.0 and TLS 1.1 protocols.
The krb5 PAM module (pam_krb5.so) had a buffer overflow that might have caused remote code execution in situations involving supplemental prompting by a Kerber…
Zoom has been there for nine years, but the immediate requirement of an easy-to-use video conferencing app during the coronavirus pandemic made it overnight a …
Researchers found a critical vulnerability in CODESYS web server that could allow an attacker to conduct remote attacks. Fortunately, theHighly Critical And Ea…
Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code.
Multiple vulnerabilities have been found in GNU IDN Library 2, the worst of which could result in the remote execution of arbitrary code.
A buffer overflow in GNU Screen might allow remote attackers to corrupt memory.
New version, fixes a lot of bugs (some of them security). In the same update, fixed up epel7 build to latest version as well.
While Apple has built a credible stance regarding users' privacy, a bug has recently made shown otherwise. As discovered, anUnpatched iOS Vulnerability Stops V…
A newly discovered watering-hole campaign is targeting Apple iPhone users in Hong Kong by using malicious website links as a lure to install spyware on the dev…
**PHP version 7.3.16** (19 Mar 2020) **Core:** * Fixed bug php#63206 (restore_error_handler does not restore previous errors mask). (Mark Plomer) **DOM:** * Fi…
**PHP version 7.3.16** (19 Mar 2020) **Core:** * Fixed bug php#63206 (restore_error_handler does not restore previous errors mask). (Mark Plomer) **DOM:** * Fi…
Multiple vulnerabilities have been found in Pure-FTPd, the worst of which could allow remote attackers to cause a Denial of Service condition. [More...]
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code. [More...]
Multiple vulnerabilities have been found in Samba, the worst of which could lead to remote code execution.
Multiple vulnerabilities have been found in WeeChat, the worst of which could allow remote attackers to cause a Denial of Service condition.
Multiple vulnerabilities were found in Tor, the worst of which could allow remote attackers to cause a Denial of Service condition.
A vulnerability in BlueZ might allow remote attackers to bypass security restrictions.
Andre Bargull discovered an integer overflow in the International Components for Unicode (ICU) library which could result in denial of service and potentially …