Read Time:3 Second
Cops launched public awareness campaign in June to warn potential victims
Daily Archives: September 6, 2022
Meta Fined $400m in Ireland For Exposing Children’s Privacy Data
Read Time:4 Second
Instagram allowed children to run business accounts, which showed phone numbers and email addresses
In-app browser security risks, and what to do about them
Read Time:28 Second
In-app browsers can pose significant security risks to businesses, with their tendency to track data a primary concern. This was highlighted in recent research which examined how browsers within apps like Facebook, Instagram and TikTok can be a data privacy risk for iOS users. Researcher Felix Krause detailed how popular in-app browsers inject JavaScript code into third-party websites, granting host apps the ability to track certain interactions, including form inputs like passwords and addresses along with image/link clicks.
London’s Biggest Bus Operator Hit by Cyber “Incident”
BlackCat Ransomware Linked to Italy’s Energy Services Firm Hack
The Heartbleed bug: How a flaw in OpenSSL caused a security crisis
Read Time:39 Second
What is Heartbleed?
Heartbleed is a vulnerability in OpenSSL that came to light in April of 2014; it was present on thousands of web servers, including those running major sites like Yahoo.
OpenSSL is an open source code library that implements the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. The vulnerability meant that a malicious user could easily trick a vulnerable web server into sending sensitive information, including usernames and passwords.
The TLS/SSL standards are crucial for modern web encryption, and while the flaw was in the OpenSSL implementation rather than the standards themselves, OpenSSL is so widely used—when the bug was made public, it affected 17% of all SSL servers—that it precipitated a security crisis.
qt5-qtwebengine-5.15.10-1.fc35
Read Time:6 Second
FEDORA-2022-ae75c0ca4f
Packages in this update:
qt5-qtwebengine-5.15.10-1.fc35
Update description:
Update to latest LTS release
Game-Related Cyber-Threats: Almost 100k Malicious Files Last Year
Read Time:4 Second
Kaspersky also observed an increase in the number of programs that can steal secrets
123ADV-001: Stack Buffer Overflow in Lotus 1-2-3 R3 for UNIX/Linux
Read Time:23 Second
Posted by Tavis Ormandy on Sep 05
# About
The 123 command is a spreadsheet application for UNIX-based systems that
can be used in interactive mode to create and modify financial and
scientific models.
For more information, see https://123r3.net
# Advisory
A stack buffer overflow was reported in the cell format processing
routines. If a victim opens an untrusted malicious worksheet, code
execution could occur.
There have been no reports of this vulnerability being exploited…
DSA-5224 poppler – security update
Read Time:10 Second
Two vulnerabilities were discovered in poppler, a PDF rendering library,
which could result in denial of service or the execution of arbitrary
code if a malformed PDF file or JBIG2 image is processed.