vulnerability – Page 35 – PossibleThreat Articles

OpenBSD devs patch authentication bypass bug

December 6, 2019 0 Comments -schallenge, CVEs, openbsd, Operating Systems, security threats, vulnerability

Credit to Author: Danny Bradbury| Date: Fri, 06 Dec 2019 11:31:27 +0000

One of the internet’s most popular free operating systems allowed attackers to bypass its authentication controls.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/bK2Mj1OlenI” height=”1″ width=”1″ alt=””/>

Security Sophos

Critical DoS messaging flaw fixed in December Android update

December 5, 2019 0 Comments Android, android patching, CVEs, Google, Linux, Mobile, Operating Systems, patch level 2019-12-01, patch level 2019-12-05, Patching, Project Mainline, qualcomm, Samsung, security threats, vulnerability

Credit to Author: John E Dunn| Date: Thu, 05 Dec 2019 16:25:24 +0000

Android’s December 2019 updates arrived this week, patching a small list of system and Qualcomm flaws across the operating system’s two patch levels.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/Z6rqHUlLVrM” height=”1″ width=”1″ alt=””/>

Security Sophos

Adobe’s Magento Marketplace suffers data breach

November 29, 2019 0 Comments Adobe, data breach, data loss, magento, magento marketplace, security threats, vulnerability

Credit to Author: John E Dunn| Date: Fri, 29 Nov 2019 11:05:15 +0000

Adobe’s Magento Marketplace has suffered a data breach, the company has said in an email sent to customers.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/dhp-DUcd-b0″ height=”1″ width=”1″ alt=””/>

Security Sophos

Kids’ smartwatch security tracker can be hacked by anyone

November 28, 2019 0 Comments av-test.org, children, gps, Internet of Things, IoT, kids, Law & order, location data, Privacy, security threats, sma m2 smartwatch, smart watch, vulnerability

Credit to Author: John E Dunn| Date: Thu, 28 Nov 2019 11:32:46 +0000

For researchers at testing outfit AV-Test, the SMA M2 kids’ smartwatch is just the tip of an iceberg of terrible security.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/OslMbiNGOKg” height=”1″ width=”1″ alt=””/>

Security Sophos

Splunk customers should update now to dodge Y2K-style bug

November 27, 2019 0 Comments Bug, configuration files, data loss, security threats, splunk, timestamp, vulnerability, y2k

Credit to Author: John E Dunn| Date: Wed, 27 Nov 2019 12:37:29 +0000

Splunk has issued a critical warning regarding a showstopping Y2K-style date bug in one of the platform’s configuration files.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/wscOPxOjeto” height=”1″ width=”1″ alt=””/>

Security Sophos

Update WhatsApp now: MP4 video bug exposes your messages

November 20, 2019 0 Comments buffer overflow, Cryptography, cve-2019-11931, data loss, Denial of Service, DOS, facebook, malware, mp4, Privacy, rce, security threats, vulnerability, whatsapp, whatsapp business, whatsapp for enterprises

Credit to Author: Lisa Vaas| Date: Wed, 20 Nov 2019 12:33:18 +0000

A now-patched-hole could have allowed remote code execution that could have exposed files and messages. Update your WhatsApp now.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/jIBF0sl6Kuo” height=”1″ width=”1″ alt=””/>

Security Sophos

XSS security hole in Gmail’s dynamic email

November 20, 2019 0 Comments amp4email, dom clobbering, dynamic mail, gmail, Google, securitum, vulnerability, XSS

Credit to Author: John E Dunn| Date: Wed, 20 Nov 2019 12:08:45 +0000

The bug was fixed at least a month ago so users receiving dynamic email content have one less thing to worry about.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/XM0wx0yUQ-A” height=”1″ width=”1″ alt=””/>

Security Sophos

Brand new Android smartphones shipped with 146 security flaws

November 19, 2019 0 Comments Android, asus, Chamois botnet, CVEs, Google, Google Project Zero, Mobile, Operating Systems, Samsung, security threats, sony, supply chain, vulnerability, xiaomi

Credit to Author: John E Dunn| Date: Tue, 19 Nov 2019 13:16:58 +0000

If you think brand new, just-out-of-the-box Android smartphones are immune from security vulnerabilities – think again.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/9O4sLIwsqWk” height=”1″ width=”1″ alt=””/>

Security Sophos

How the Linux kernel balances the risks of public bug disclosure

November 15, 2019 0 Comments Bug, bug disclosure, cve-2019-17666, CVEs, Flaw, Linux, linux community, linux kernal, remote exploit, security threats, vulnerability, Wi-fi, wi-fi interface

Credit to Author: Danny Bradbury| Date: Fri, 15 Nov 2019 13:27:40 +0000

A serious Wi-Fi flaw shows how Linux handles security in plain sight.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/k8HeNuageMA” height=”1″ width=”1″ alt=””/>

Security Sophos

November 2019 Patch Tuesday fixes 13 critical flaws and one zero day

November 13, 2019 0 Comments edge browser, Hyper-V, Internet Explorer, Microsoft, office for mac, Patch Tuesday, tpm, vulnerability, Windows 10, zero-day vulnerability

Credit to Author: John E Dunn| Date: Wed, 13 Nov 2019 17:12:34 +0000

November’s Patch Tuesday arrived to plug 73 CVE-level vulnerabilities across Microsoft’s software products, including 13 ‘criticals’.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/mcprAY-1N-s” height=”1″ width=”1″ alt=””/>