Krebs on Security

APRIL 14, 2020

Nineteen of the weaknesses fixed on this Patch Tuesday were assigned Microsoft’s most-dire “critical” rating, meaning malware or miscreants could exploit them to gain complete, remote control over vulnerable computers without any help from users. “This is great news for Microsoft and the security community at large.”

Backups 254

Backups Software Internet Internet 254

eSecurity Planet

FEBRUARY 12, 2024

JetBrains also announced that it had already patched TeamCity Cloud Servers and verified that they hadn’t been attacked. February 6, 2024 Linux Vulnerability Comes on Heels of Last Week’s Announcement Type of vulnerability: Remote code execution. JetBrains fixed it in version 2023.11.3 Connect Secure 9.1R17.3

VPN 104

VPN Authentication Software Firewall 104

SecureWorld News

APRIL 21, 2023

ESET researchers have discovered a new Lazarus Group campaign targeting Linux users. According to a recent blog post : "Operation DreamJob is the name for a series of campaigns where the group uses social engineering techniques to compromise its targets, with fake job offers as the lure.

Malware 72

Malware Social Engineering Password Management IoT 72

eSecurity Planet

MARCH 11, 2024

Apple’s also had plenty to patch, and Cisco, OpenEdge, and VMware appeared in the news, too. JetBrains released a detailed blog post explaining the specific timeline of discovering the vulnerabilities, the conflict with Rapid7, and JetBrains’ stance on releasing vulnerability information. to all servers that can support it.

Authentication 102

Authentication Software VPN Security Defenses 102

Kali Linux

DECEMBER 4, 2023

If you want to see what is new for yourself download a new image or upgrade if you already have a Kali Linux installation. we will now be offering both Kali Linux AMD64 and ARM64 on Amazon AWS and Microsoft Azure marketplaces. we will now be offering both Kali Linux AMD64 and ARM64 on Amazon AWS and Microsoft Azure marketplaces.

Architecture 145

Architecture Passwords Firmware Software 145

Security Affairs

MAY 16, 2023

Fortinet researchers also reported that a Proof-of-Concept (PoC) code for this vulnerability is publicly available and urges owners to install the patch as soon as possible. This CVE exists because this listener wasn’t updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.

Wireless 84

Wireless DDOS Cybersecurity Hacking 84

eSecurity Planet

DECEMBER 13, 2021

Cybercriminals are quickly ramping up efforts to exploit the critical flaw found in the widely used Log4j open-source logging tool, targeting everything from cryptomining to data theft to botnets that target Linux systems. Also read: Top Vulnerability Management Tools for 2021. How the Log4j exploit works. Log4j attack traffic.

Cybersecurity 135

Cybersecurity Software Government Threat Detection 135

eSecurity Planet

JANUARY 20, 2022

Incidents of malware targeting Linux-based Internet of Things (IoT) devices jumped by more than a third in 2021, with three malware families the primary drivers behind the increase. There was a 10-fold increase in the number of samples of Mozi found in the wild, Mihai Maganu, a threat researcher at CrowdStrike, wrote in a blog post.

IoT 138

IoT DDOS Malware Internet 138

Security Affairs

APRIL 30, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter ) The post Security Affairs newsletter Round 417 by Pierluigi Paganini – International edition appeared first on Security Affairs.

Cybercrime 88

Cybercrime Malware Hacking Accountability 88

eSecurity Planet

DECEMBER 15, 2021

In addition, Hafnium “has been observed utilizing the vulnerability to attack virtualization infrastructure to extend their typical targeting,” the researchers wrote in the blog post. “In Bitdefender researchers wrote in a blog post that early exploit attempts have involved cryptojacking and botnets, such as the Muhstik botnet.

Ransomware 123

Ransomware Software DNS Internet 123

Security Affairs

JANUARY 22, 2019

Expert discovered a remote code execution vulnerability in the APT package manager used by several Linux distributions, including Debian and Ubuntu. The flaw, tracked as CVE-2019-3462, affects package manager version 0.8.15 ” reads a blog post published by Justicz. ” reads a blog post published by Justicz.

Hacking 91

Hacking Advertising 91

Security Affairs

JULY 25, 2019

Experts at Intezer researchers have spotted a strain of the Linux mining that also scans the Internet for Windows RDP servers vulnerable to the Bluekeep. ” reads a blog post published by Intezer. ” reads a blog post published by Intezer. has already infected more than 4,500 Linux machines. gooobb ” file.

Cryptocurrency 70

Cryptocurrency Internet Internet Malware 70

SC Magazine

JUNE 30, 2021

The actual database exposure was caused by a persistent problem with Docker, an issue that’s been fairly well-known in the Linux community for several years. Evidently, when sys admins use Docker to containerize a database on a Linux server, Docker inserts an “allow rule” into iptables, opening up the database to the public internet.

Ransomware 90

Ransomware Architecture Firewall Media 90

Kali Linux

MARCH 12, 2023

Stay tuned for a blog post coming out for more information! Remember what we did a decade ago with Kali Linux? No expensive licenses required, no need for commercial grade infrastructure, no writing code or compiling tools to make it all work… Just download Kali Linux and do your thing. Edit: Its out ! When Kali 2023.4

Firmware 52

Firmware Architecture Engineering Technology 52

Duo's Security Blog

OCTOBER 25, 2023

New OS version and patch releases typically have security fixes to address identified flaws in the software that could lead to threats such as malware, phishing and denial-of-service attacks. Stand-alone solutions can automate the update process but can also be expensive and time-consuming to implement and manage.

Software 109

Software Mobile Malware Risk 109

NopSec

JUNE 19, 2019

CVE-2019-11477 – SACK Panic Remote Command Execution Flaw in Exim is still trending on social media and we extensively covered CVE-2019-10149 in June 10th blog post. This vulnerability has discovered by Jonathan Looney who is engineer manager at Netflix. Affected Platforms Linux 6, 6.5, You can find the full list here.

Media 40

Media Engineering Risk 40

Security Affairs

APRIL 9, 2020

Mozilla has released Firefox version 75 that includes six security patches for the desktop, and two patches targeting to address vulnerabilities in the Android app. “The Chrome team is delighted to announce the promotion of Chrome 81 to the stable channel for Windows, Mac and Linux. ” reads the announcement. .

Advertising 91

Advertising Risk Mobile Information Security 91

Thales Cloud Protection & Licensing

NOVEMBER 13, 2017

In June of this year, Thales eSecurity joined the Core Infrastructure Initiative (CII), a project both founded and managed by The Linux Foundation, with the aim of collaboratively enhancing and strengthening the security and resilience of critical Open Source projects. In essence, every time OpenSSL sneezes, everyone catches a cold.

Cybersecurity 91

Cybersecurity Digital transformation Software IoT 91

eSecurity Planet

JUNE 30, 2021

Security analysts at Sophos’ Managed Threat Response unit last year detailed some campaigns that used VMs to hide their malicious payloads. Enterprises continue to adopt VMs to make device management, resource use and data backup easier and more efficient. “The motivation behind the tactic is stealth.

Ransomware 116

Ransomware Backups Digital transformation Encryption 116

Security Boulevard

DECEMBER 9, 2022

What Is Container Management? Container management controls and allows access to, and the promotion of, all the container images within a container. Other reasons for container management include securing the following: Container host. Registries, or container management stacks (shared containers). Network traffic.

Architecture 69

Architecture Risk Accountability Software 69

Security Boulevard

MAY 5, 2022

OpenSSL Patches New Bug Targeting Encryption [Lessons from Heartbleed]. OpenSSL underpins Unix and Linux systems, is used by a host of other software, and is bundled in a plethora of applications, including Windows, where they have cryptographic libraries of their own. Automate certificate lifecycle management. brooke.crothers.

Encryption 52

Encryption Software Media Authentication 52

Cisco Security

MARCH 1, 2021

This blog is co-authored by Nur Hayat and is part two of a four-part series about DevSecOps. In this blog, let’s take a closer look at software composition analysis, with a focus on security scanning of third-party software components in Cisco software. FIPS) if deprecated libraries are present. Publishing Integration.

Software 121

Software Risk Telecommunications Surveillance 121

McAfee

AUGUST 25, 2020

The McAfee team is very proud to announce that once again McAfee was named a Gartner Peer Insights Customers’ Choice for SIEM for its McAfee Enterprise Security Manager (ESM) Solution , a recognition of high satisfaction from a number of reviews by verified end-user professionals. Cybersecurity Architect, Government. Read full review here.

Government 52

Government Software Cybersecurity 52

Kali Linux

DECEMBER 5, 2022

Today we are publishing Kali Linux 2022.4. Should you want the default toolset ( kali-linux-default ) or any other combination of metapackages , it should be like any other Kali platform. We hope this makes it easier for the people who use self-hosted Proxmox Virtual Environments (VE), virt-manager , or libvirt !

Firmware 52

Firmware Wireless Mobile Media 52

Security Boulevard

FEBRUARY 21, 2024

In that blog, I discussed high availability (HA) for the SMS Provider which is designed to support multiple configuration manager console sessions or to support managing SCCM if the SMS provider goes offline. I couldn’t find any documentation that mentioned this would happen or was required but this behavior makes sense.

Authentication 64

Authentication Accountability System Administration Software 64

Kali Linux

JANUARY 5, 2014

Kali Linux Full Disk Encryption As penetration testers , we often need to travel with sensitive data stored on our laptops. Of course, we use full disk encryption wherever possible, including our Kali Linux machines, which tend to contain the most sensitive materials. patch -p1 < /cryptsetup-nuke-keys/cryptsetup_1.6.1+nuke_keys.diff

Passwords 52

Passwords Encryption 52

Krebs on Security

FEBRUARY 11, 2020

A dozen of the vulnerabilities Microsoft patched today are rated “critical,” meaning malware or miscreants could exploit them remotely to gain complete control over an affected system with little to no help from the user. That vulnerability, assigned as CVE-2020-0674 , has been patched with this month’s release.

Backups 55

Backups Malware Internet Internet 55

The Last Watchdog

APRIL 24, 2023

Patch management has always been time-consuming and arduous. But it gets done, at least to some degree, simply because patching is so crucial to a robust cybersecurity posture. To patch or not to patch? Thorough patching means secure client systems. But patching that thoroughly isn’t economical.

Cybersecurity 210

Cybersecurity Technology Software Risk 210

eSecurity Planet

AUGUST 5, 2021

Two of the largest government security agencies are laying out the key cyberthreats to Kubernetes, the popular platform for orchestrating and managing containers, and ways to harden the open-source tool against attacks. ” Containers, Kubernetes Take Over. ” Containers, Kubernetes Take Over.

Risk 109

Risk Encryption Cybersecurity Engineering 109

eSecurity Planet

JANUARY 21, 2022

Government and private entities in Ukraine have been targeted this month by a barrage of malware that has defaced websites and wiped or corrupted data from Windows- and Linux-based systems. Microsoft’s Threat Intelligence Center, in a blog post Jan. Also read: Top Vulnerability Management Tools for 2022. Good Security Advice.

Malware 136

Malware Government Backups Ransomware 136

Kali Linux

SEPTEMBER 1, 2019

We are pleased to announce that our third release of 2019, Kali Linux 2019.3, As promised in our roadmap blog post , there are both user facing and backend updates. Cloudflare Kali Linux is Open-source , and Cloudflare hearts Open-source - so it’s a perfect match! A more technical breakdown can be found on their blog.

Architecture 52

Architecture Firmware Passwords Internet 52

Kali Linux

MAY 31, 2021

Say hello to Kali Linux 2021.2 ! This release welcomes a mixture of new items as well as enhancements of existing features, and is ready to be downloaded (from our updated page) or upgraded if you have an existing Kali Linux installation. A quick summary of the changelog since the 2021.1 A quick summary of the changelog since the 2021.1

Engineering 52

Engineering Firmware Architecture Backups 52

NopSec

JUNE 5, 2019

This blog series is dedicated to IT Vulnerability Ownership. Why partnering with IT is necessary The ultimate goal is to increase the health of your vulnerability management program. Most organizations will separate their IT team from their infosec team, and will go as far as having separate management. System logs (e.g.,

InfoSec 40

InfoSec Accountability Risk Technology 40

SiteLock

AUGUST 27, 2021

It is frequently used to gain access to open source content management system (CMS) applications, such as Joomla!, One of the most dangerous and widespread command injection vulnerabilities was the Shellshock vulnerability that impacted most Linux distributions. Bypassing authentication to gain full control of the website.

Firewall 98

Firewall eCommerce Malware DNS 98

NopSec

OCTOBER 3, 2014

1 before the issue is made public as part of an upcoming Xen Security Announcement (XSA),” according to the AWS blog. The flaw was first reported two weeks ago to the open-source Xen Project by SUSE Linux employee Jan Beulich. The Xen Project has been run as a Linux Foundation Collaboration Project since 2013. .

Software 52

Software 52

Security Boulevard

OCTOBER 24, 2021

The infiltrator got access to the committer’s keys/identity and managed to publish malicious versions. Run-book for Linux based environments. One or more of your applications are dependent or upgraded (auto patched) malicious versions to ua-parser-js (0.7.29, 0.8.0, Act 3: Hijack the committer’s NPM account. Evidence Markers.

Accountability 59

Accountability Malware Marketing Engineering 59

Security Boulevard

DECEMBER 27, 2021

Linux and Unix operating systems require regular patching like any IT system, but as security professionals, ethical hackers, and criminal hackers will tell you, regular Linux and Unix patching is often neglected. See CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit) | Qualys Security Blog.

IoT 88

IoT Internet Internet Hacking 88