DLA-2538-1 mariadb-10.1 - security update

Bulletin has no description...

This malware hides behind free VPN, pirated security software keys

By Waqas The New Version of DanaBot is now found in pirated software keys including ones offering free VPN, anti-virus software and pirated games, etc. This is a post from HackRead.com Read the original post: This malware hides behind free VPN, pirated security software keys...

Local Bypass Vulnerability in FireWool Security Software

Firedown Security is a computer security software. A local bypass vulnerability exists in FireFlush Security, which can be exploited by an attacker to gain server privileges with a local boost...

DLA-2534-1 sudo - security update

Bulletin has no description...

CVE-2020-28482

This affects the package fastify-csrf before 3.0.0. 1. The generated cookie used insecure defaults, and did not have the httpOnly flag on: cookieOpts: path: '/', sameSite: true 2. The CSRF token was available in the GET query parameter...

MSPs, have you picked the right PSA for you yet?

Not long ago, we helped MSPs pick the right remote monitoring and management RMM platform for them, and make it an essential part of their service toolkit. As you may recall, an RMM is a tool that helps MSPs do the work. And what better way to track the work—and other elements associated with...

K7 Computing K7AntiVirus Premium Memory Leak Vulnerability (CNVD-2021-02818)

K7AntiVirus Premium is a security suite from K7 Computing that provides reliable protection against online threats and fraudulent activities, thus protecting you from viruses and cyber attacks. A memory leak vulnerability exists in K7 Computing K7AntiVirus Premium 15.01.00.53. No detailed...

ALBA-2020:5502 icedtea-web bug fix update

Migrate icedtea-web to use alt-java special binary in our JDK8 packages instead of plain java...

Mount Locker Ransomware Offering Double Extortion Scheme to Other Hackers

A relatively new ransomware strain behind a series of breaches on corporate networks has developed new capabilities that allow it to broaden the scope of its targeting and evade security software—as well as with ability for its affiliates to launch double extortion attacks. The MountLocker...

Command Execution Vulnerability in Kingsoft V8+ Terminal Security System

Kingsoft V8+ Terminal Security is a security software for enterprise-level users. A command execution vulnerability exists in Kingsoft V8+ Terminal Security System, which can be exploited by attackers to gain control of a server...

DLA-2475-1 pdfresurrect - security update

Bulletin has no description...

CVE-2020-4624

IBM Cloud Pak for Security 1.3.0.1 CP4S uses weaker than expected cryptographic algorithms during negotiation could allow an attacker to decrypt sensitive information...

DLA-2465-1 php-pear - security update

Bulletin has no description...

DLA-2454-1 rclone - security update

Bulletin has no description...

DSA-4793-1 firefox-esr - security update

Bulletin has no description...

Hacked Security Software Used in Novel South Korean Supply-Chain Attack

The Lazarus cybercriminal group is using a novel supply-chain attack against visitors to websites operated by the South Korean government and financial firms, in order to deliver dropper malware that eventually plants a remote access trojan on victim’s PCs. The attacks use stolen digital...

Trojanized Security Software Hits South Korea Users in Supply-Chain Attack

Cybersecurity researchers took the wraps off a novel supply chain attack in South Korea that abuses legitimate security software and stolen digital certificates to distribute remote administration tools RATs on target systems. Attributing the operation to the Lazarus Group, also known as Hidden...

DSA-4788-1 firefox-esr - security update

Bulletin has no description...

ALEA-2020:4724 perl-IO-Socket-SSL:2.066 and perl-libwww-perl:6.34 update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

wolfssl:fuzzer-wolfssh-server: Heap-buffer-overflow in wolfSSH_accept

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5752343091740672 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-server Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address...