Updates tagged with security on Jonkman Microblog!
blacksam: https://www.bleepingcomputer.com/news/security/red-hat-warns-of-backdoor-in-xz-tools-used-by-most-linux-distros/ #linux #xz #backdoor #security
blacksam's status on Friday, 29-Mar-2024 14:15:44 EDT
https://www.bleepingcomputer.com/news/security/red-hat-warns-of-backdoor-in-xz-tools-used-by-most-linux-distros/ #linux #xz #backdoor #security
Red Hat warns of backdoor in XZ tools used by most Linux distros
lnxw48a1: UK election registry breached from 2021 onward. https://www.bbc.co.uk/news/uk-politics-66441010 [www bbc co uk] #security
lnxw48a1's status on Tuesday, 08-Aug-2023 13:50:18 EDT
UK election registry breached from 2021 onward. https://www.bbc.co.uk/news/uk-politics-66441010 [www bbc co uk] #security
Cyber-attack on UK's electoral registers revealed
lnxw48a1: Tenable CEO slams #Microsoft for not being transparent and fast to act on #Azure #Active_Directory #security holes https://nu.federati.net/url/291175 [www databreachtoday com]
lnxw48a1's status on Thursday, 03-Aug-2023 14:35:45 EDT
Tenable CEO slams #Microsoft for not being transparent and fast to act on #Azure #Active_Directory #security holes https://nu.federati.net/url/291175 [www databreachtoday com]
Tenable CEO Slams Microsoft for Failing to Quickly Patch Bug
lnxw48a1: #US Senator: #Microsoft negligent in #security #breach that affected Syate Dept., #USDOJ and rest of #USGovt should hold them accountable. https://nu.federati.net/url/291129 [arstechnica com]
lnxw48a1's status on Sunday, 30-Jul-2023 22:14:30 EDT
#US Senator: #Microsoft negligent in #security #breach that affected Syate Dept., #USDOJ and rest of #USGovt should hold them accountable. https://nu.federati.net/url/291129 [arstechnica com]
US senator blasts Microsoft for “negligent cybersecurity practices”
lnxw48a1: #Security #Microsoft_365 breached by #China See thread starting at https://cyberplace.social/@GossiTheDog/110700908976946435 ... https://cyberplace.social/@GossiTheDog/110702046297147809 > For anybody interested - the “acquired Microsoft account (MSA) consumer signing key” used in this must have come from inside Microsoft’s internal network. -- https://cyberplace.social/@GossiTheDog/110702228469010595 Includes the following links: * https://nu.federati.net/url/290987 [msrc microsoft com] * https://nu.federati.net/url/290988 [edition cnn com] * https://nu.federati.net/url/290989 [www cisa gov | pdf] * https://www.wsj.com/articles/chinese-hackers-spied-on-state-department-13a09f03 [www wsj com] #US_Govt #Microsoft #MSFT #Azure #Office_365 #penetration #Outlook #Exchange #cloud
lnxw48a1's status on Wednesday, 12-Jul-2023 18:42:34 EDT
#Security #Microsoft_365 breached by #China See thread starting at https://cyberplace.social/@GossiTheDog/110700908976946435 ... https://cyberplace.social/@GossiTheDog/110702046297147809 > For anybody interested - the “acquired Microsoft account (MSA) consumer signing key” used in this must have come from inside Microsoft’s internal network. -- https://cyberplace.social/@GossiTheDog/110702228469010595 Includes the following links: * https://nu.federati.net/url/290987 [msrc microsoft com] * https://nu.federati.net/url/290988 [edition cnn com] * https://nu.federati.net/url/290989 [www cisa gov | pdf] * https://www.wsj.com/articles/chinese-hackers-spied-on-state-department-13a09f03 [www wsj com] #US_Govt #Microsoft #MSFT #Azure #Office_365 #penetration #Outlook #Exchange #cloud
China-based hackers breached US government email accounts, Microsoft and White House say | CNN Politics
Chinese Hackers Spied on State Department
lnxw48a1: Seen via @clacke: https://nondeterministic.computer/@mjg59/110216984788495049 > If you installed a Linux system with disk encryption more than a couple of years ago, there's a decent chance it's using a weak key derivation function and someone who cares enough would be in a position to brute-force it. https://mjg59.dreamwidth.org/66429.html has more details and instructions on how to update to a better KDF. #Linux #LUKS #security #encryption #privacy
lnxw48a1's status on Tuesday, 18-Apr-2023 00:19:31 EDT
Seen via @clacke: https://nondeterministic.computer/@mjg59/110216984788495049 > If you installed a Linux system with disk encryption more than a couple of years ago, there's a decent chance it's using a weak key derivation function and someone who cares enough would be in a position to brute-force it. https://mjg59.dreamwidth.org/66429.html has more details and instructions on how to update to a better KDF. #Linux #LUKS #security #encryption #privacy
lnxw48a1: School district data breach involves student data, but law does not require notification https://infosec.exchange/@PogoWasRight/110005462926344518 https://nu.federati.net/url/289870 [www databreaches net] #security #ransomware #security_breach
lnxw48a1's status on Sunday, 12-Mar-2023 00:49:24 EST
School district data breach involves student data, but law does not require notification https://infosec.exchange/@PogoWasRight/110005462926344518 https://nu.federati.net/url/289870 [www databreaches net] #security #ransomware #security_breach
Highly sensitive files from Berkeley County Schools dumped by ransomware gang
lnxw48a1: #Ubuntu #security notice: #Emacs flaw allows code execution. https://ubuntu.com/security/notices/USN-5781-1 [ubuntu com]
lnxw48a1's status on Wednesday, 14-Dec-2022 17:35:42 EST
#Ubuntu #security notice: #Emacs flaw allows code execution. https://ubuntu.com/security/notices/USN-5781-1 [ubuntu com]
USN-5781-1: Emacs vulnerability | Ubuntu security notices | Ubuntu
lnxw48a1: #Mastodon issue for #activitypub-troll denial-of-service vulnerability. https://github.com/mastodon/mastodon/issues/21977 with 2 pull requests. https://github.com/mastodon/mastodon/pull/22025 and https://github.com/mastodon/mastodon/pull/22026 #security
lnxw48a1's status on Sunday, 04-Dec-2022 22:15:33 EST
#Mastodon issue for #activitypub-troll denial-of-service vulnerability. https://github.com/mastodon/mastodon/issues/21977 with 2 pull requests. https://github.com/mastodon/mastodon/pull/22025 and https://github.com/mastodon/mastodon/pull/22026 #security
Any idea to stop activitypub-troll.cf or likewise attacks? · Issue #21977 · mastodon/mastodon
Fix unbounded recursion in account discovery by ClearlyClaire · Pull Request #22025 · mastodon/mastodon
Fix unbounded recursion in account discovery (v3.5 backport) by ClearlyClaire · Pull Request #22026 · mastodon/mastodon
lnxw48a1: @administrator @aab I'm just guessing, but it could be related to an exploit someone launched against #Mastodon and #Misskey yesterday. From what I read, it brought several instances to their knees. Misskey released a #security patch yesterday.
lnxw48a1's status on Sunday, 04-Dec-2022 17:26:16 EST
@administrator @aab I'm just guessing, but it could be related to an exploit someone launched against #Mastodon and #Misskey yesterday. From what I read, it brought several instances to their knees. Misskey released a #security patch yesterday.
lnxw48a1: Tagging this thread with #Fediverse #Security ... whomever made the script obviously read some protocol docs and some source code. With just a little #JavaScript, they were able to knock some #Misskey and #Mastodon instances to their knees. This isn't the first, and it won't be the last. Remember when someone posted a humongous image and locked up any #GNUSocial instance that tried to download the image? Remember when someone's instance was replaced by some sort of cryptocurrency site and PuSH es from your site to theirs would crash your site because of their site's response? (I'll bet I still have that domain blocked at the firewall.) We have to stop being naive about the intentions of those in the current migration. The overwhelming majority will have benign, if not good, intentions. But a select few will have bad intentions. Among those intentions is to colonize the Fediverse with #Twitter's culture, to come here and impose that culture of anger and disrespect upon the inhabitants here ... which already happened once with the first wave of people joining #Mastodon instance, except it was Twitter and #Tumblr at that time.
lnxw48a1's status on Sunday, 04-Dec-2022 11:22:39 EST
Tagging this thread with #Fediverse #Security ... whomever made the script obviously read some protocol docs and some source code. With just a little #JavaScript, they were able to knock some #Misskey and #Mastodon instances to their knees. This isn't the first, and it won't be the last. Remember when someone posted a humongous image and locked up any #GNUSocial instance that tried to download the image? Remember when someone's instance was replaced by some sort of cryptocurrency site and PuSH es from your site to theirs would crash your site because of their site's response? (I'll bet I still have that domain blocked at the firewall.) We have to stop being naive about the intentions of those in the current migration. The overwhelming majority will have benign, if not good, intentions. But a select few will have bad intentions. Among those intentions is to colonize the Fediverse with #Twitter's culture, to come here and impose that culture of anger and disrespect upon the inhabitants here ... which already happened once with the first wave of people joining #Mastodon instance, except it was Twitter and #Tumblr at that time.
lnxw48a1: Oh, good grief, #Microsoft. https://thehackernews.com/2022/10/microsoft-confirms-server.html [thehackernews com] Source: https://infosec.exchange/@jerry/109213542275494102 #security #breach #Azure #cloud
lnxw48a1's status on Sunday, 23-Oct-2022 03:00:54 EDT
Oh, good grief, #Microsoft. https://thehackernews.com/2022/10/microsoft-confirms-server.html [thehackernews com] Source: https://infosec.exchange/@jerry/109213542275494102 #security #breach #Azure #cloud
lnxw48a1: If you are using #Element-iOS , #Element-Android , #Schildichat, or any other #Matrix client powered by matrix-sdk, upgrade now. #Security release is out. https://nu.federati.net/url/287969 [matrix org]
lnxw48a1's status on Wednesday, 28-Sep-2022 15:40:42 EDT
If you are using #Element-iOS , #Element-Android , #Schildichat, or any other #Matrix client powered by matrix-sdk, upgrade now. #Security release is out. https://nu.federati.net/url/287969 [matrix org]
Upgrade now to address E2EE vulnerabilities in matrix-js-sdk, matrix-ios-sdk and matrix-android-sdk2 | Matrix.org
lnxw48a1: https://nu.federati.net/url/286651 [arstechnica com] > Researchers have unearthed a discovery that doesn’t occur all that often in the realm of malware: a mature, never-before-seen Linux backdoor that uses novel evasion techniques to conceal its presence on infected servers, in some cases even with a forensic investigation. > On Thursday, researchers from Intezer and The BlackBerry Threat Research & Intelligence Team said that the previously undetected backdoor combines high levels of access with the ability to scrub any sign of infection from the file system, system processes, and network traffic. Dubbed Symbiote, it targets financial institutions in Brazil and was first detected in November. /via @geniusmusing #security #linux #backdoor #malware
lnxw48a1's status on Saturday, 11-Jun-2022 16:57:15 EDT
https://nu.federati.net/url/286651 [arstechnica com] > Researchers have unearthed a discovery that doesn’t occur all that often in the realm of malware: a mature, never-before-seen Linux backdoor that uses novel evasion techniques to conceal its presence on infected servers, in some cases even with a forensic investigation. > On Thursday, researchers from Intezer and The BlackBerry Threat Research & Intelligence Team said that the previously undetected backdoor combines high levels of access with the ability to scrub any sign of infection from the file system, system processes, and network traffic. Dubbed Symbiote, it targets financial institutions in Brazil and was first detected in November. /via @geniusmusing #security #linux #backdoor #malware
New ultra-stealthy Linux backdoor isn’t your everyday malware discovery
lnxw48a1: https://nu.federati.net/url/285943 [it slashdot org] #Lenovo issues #security patches for over 100 Lenovo products. Source: https://shitposter.club/objects/6f578473-d458-464d-92a8-086d8ce96abb
lnxw48a1's status on Wednesday, 20-Apr-2022 19:49:38 EDT
https://nu.federati.net/url/285943 [it slashdot org] #Lenovo issues #security patches for over 100 Lenovo products. Source: https://shitposter.club/objects/6f578473-d458-464d-92a8-086d8ce96abb
Hackers Can Infect Over 100 Lenovo Models With Unremovable Malware - Slashdot
lnxw48a1: Some severe flaws in #Cisco small business routers. https://www.theregister.com/2022/02/04/cisco_smb_routers_critical_vulnerabilities/. [www theregister com] At publication time, some flaws and some models had not yet been patched. #security
lnxw48a1's status on Monday, 07-Feb-2022 18:26:06 EST
Some severe flaws in #Cisco small business routers. https://www.theregister.com/2022/02/04/cisco_smb_routers_critical_vulnerabilities/. [www theregister com] At publication time, some flaws and some models had not yet been patched. #security
Cisco reveals three critical flaws in small business routers
lnxw48a1: #T-mobile #security From 2018: https://nu.federati.net/url/282487 /via @rysiek @rysiek@mastodon.technology
lnxw48a1's status on Wednesday, 18-Aug-2021 11:39:54 EDT
#T-mobile #security From 2018: https://nu.federati.net/url/282487 /via @rysiek @rysiek@mastodon.technology
bkoehn: arstechnica.com/gadgets/2021/0… #security #foss
bkoehn's status on Friday, 30-Jul-2021 11:20:19 EDT
arstechnica.com/gadgets/2021/0… #security #foss
lnxw48a1: University of #Minnesota researchers apologize to the #Linux kernel community, ask to restore trust. https://nu.federati.net/url/280818 [lore kernel org] #MN #UMN #security
lnxw48a1's status on Sunday, 25-Apr-2021 02:48:04 EDT
University of #Minnesota researchers apologize to the #Linux kernel community, ask to restore trust. https://nu.federati.net/url/280818 [lore kernel org] #MN #UMN #security
lnxw48a1: Further info: https://news-web.php.net/php.internals/113838 And with the presumed compromise of git.php.net, all future development activities will take place on #GitHub. #code-hosting #vcs #scm #security #git #php
lnxw48a1's status on Sunday, 18-Apr-2021 11:41:27 EDT
Further info: https://news-web.php.net/php.internals/113838 And with the presumed compromise of git.php.net, all future development activities will take place on #GitHub. #code-hosting #vcs #scm #security #git #php
lnxw48a1: Detecting #curl-pipe-bash from the server-side: https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/ [www idontplaydarts com] #security #curl #wget #pipe #bash
lnxw48a1's status on Wednesday, 24-Mar-2021 20:10:19 EDT
Detecting #curl-pipe-bash from the server-side: https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/ [www idontplaydarts com] #security #curl #wget #pipe #bash
lnxw48a1: https://nu.federati.net/url/278948 [thejournal com] Schools are now the most targeted segment for ransomware ... make up the majority of all ransomware attacks. #security #ransomware #k-12 #schools
lnxw48a1's status on Wednesday, 16-Dec-2020 22:32:37 EST
https://nu.federati.net/url/278948 [thejournal com] Schools are now the most targeted segment for ransomware ... make up the majority of all ransomware attacks. #security #ransomware #k-12 #schools
K–12 Has Become the Most Targeted Segment for Ransomware -- THE Journal
lnxw48a1: #Mattermost devs discover unfixable (?) flaws in #Go-Lang library https://mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities/ #security
lnxw48a1's status on Monday, 14-Dec-2020 17:42:47 EST
#Mattermost devs discover unfixable (?) flaws in #Go-Lang library https://mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities/ #security
Coordinated disclosure of XML round-trip vulnerabilities in Go XML
lnxw48a1: US #cybersecurity firm #FireEye discloses breach, theft of tools https://finance.yahoo.com/news/u-cybersecurity-firm-fireeye-discloses-210424354.html [finance yahoo com] #SEC #security #breach #filing
lnxw48a1's status on Tuesday, 08-Dec-2020 21:15:44 EST
US #cybersecurity firm #FireEye discloses breach, theft of tools https://finance.yahoo.com/news/u-cybersecurity-firm-fireeye-discloses-210424354.html [finance yahoo com] #SEC #security #breach #filing
U.S. cybersecurity firm FireEye discloses breach, theft of hacking tools
geniusmusing: OpenSSL Releases Security Update CISA https://us-cert.cisa.gov/ncas/current-activity/2020/12/08/openssl-releases-security-update >OpenSSL has released a security update to address a vulnerability affecting all versions of 1.0.2 and 1.1.1 released before version 1.1.1i. An attacker could exploit this vulnerability to cause a denial-of-service condition. openssl.org/news/secadv/20201208.txt https://www.openssl.org/news/secadv/20201208.txt >EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971) >====================================================== > >Severity: High > >The X.509 GeneralName type is a generic type for representing different types >of names. One of those name types is known as EDIPartyName. OpenSSL provides a >function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME >to see if they are equal or not. This function behaves incorrectly when both >GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash >may occur leading to a possible denial of service attack. > >OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: >1) Comparing CRL distribution point names between an available CRL and a CRL > distribution point embedded in an X509 certificate >2) When verifying that a timestamp response token signer matches the timestamp > authority name (exposed via the API functions TS_RESP_verify_response and > TS_RESP_verify_token) > >If an attacker can control both items being compared then that attacker could >trigger a crash. >... #OpenSSL #Security #Update
geniusmusing's status on Tuesday, 08-Dec-2020 20:06:10 EST
OpenSSL Releases Security Update CISA https://us-cert.cisa.gov/ncas/current-activity/2020/12/08/openssl-releases-security-update >OpenSSL has released a security update to address a vulnerability affecting all versions of 1.0.2 and 1.1.1 released before version 1.1.1i. An attacker could exploit this vulnerability to cause a denial-of-service condition. openssl.org/news/secadv/20201208.txt https://www.openssl.org/news/secadv/20201208.txt >EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971) >====================================================== > >Severity: High > >The X.509 GeneralName type is a generic type for representing different types >of names. One of those name types is known as EDIPartyName. OpenSSL provides a >function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME >to see if they are equal or not. This function behaves incorrectly when both >GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash >may occur leading to a possible denial of service attack. > >OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: >1) Comparing CRL distribution point names between an available CRL and a CRL > distribution point embedded in an X509 certificate >2) When verifying that a timestamp response token signer matches the timestamp > authority name (exposed via the API functions TS_RESP_verify_response and > TS_RESP_verify_token) > >If an attacker can control both items being compared then that attacker could >trigger a crash. >... #OpenSSL #Security #Update
geniusmusing: Multiple Embedded TCP/IP Stacks CISA https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 >1. EXECUTIVE SUMMARY > > CVSS v3 9.8 > ATTENTION: Exploitable remotely/low skill level to exploit > Vendor: Multiple (open source) > Equipment: uIP-Contiki-OS, uIP-Contiki-NG, uIP, open-iscsi, picoTCP-NG, picoTCP, FNET, Nut/Net > Vulnerabilities: Infinite Loop, Integer Wraparound, Out-of-bounds Read, Integer Overflow, Out-of-bounds Write, Improper Input Validation, Improper Null Termination > >CISA is aware of a public report, known as “AMNESIA:33” that details vulnerabilities found in multiple open-source TCP/IP stacks. CISA is issuing this advisory to provide early notice of the reported vulnerabilities and identify baseline mitigations for reducing risks to these and other cybersecurity attacks. > >The various open-source stacks may be implemented in forked repositories. >2. RISK EVALUATION > >Successful exploitation of these vulnerabilities could allow attackers to corrupt memory, put devices into infinite loops, access unauthorized data, and/or poison DNS cache. >3. TECHNICAL DETAILS >3.1 AFFECTED PRODUCTS > >The following are affected: > > uIP-Contiki-OS (end-of-life [EOL]), Version 3.0 and prior > uIP-Contiki-NG, Version 4.5 and prior > uIP (EOL), Version 1.0 and prior > open-iscsi, Version 2.1.12 and prior > picoTCP-NG, Version 1.7.0 and prior > picoTCP (EOL), Version 1.7.0 and prior > FNET, Version 4.6.3 > Nut/Net, Version 5.1 and prior >... #Security
geniusmusing's status on Tuesday, 08-Dec-2020 12:32:50 EST
Multiple Embedded TCP/IP Stacks CISA https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 >1. EXECUTIVE SUMMARY > > CVSS v3 9.8 > ATTENTION: Exploitable remotely/low skill level to exploit > Vendor: Multiple (open source) > Equipment: uIP-Contiki-OS, uIP-Contiki-NG, uIP, open-iscsi, picoTCP-NG, picoTCP, FNET, Nut/Net > Vulnerabilities: Infinite Loop, Integer Wraparound, Out-of-bounds Read, Integer Overflow, Out-of-bounds Write, Improper Input Validation, Improper Null Termination > >CISA is aware of a public report, known as “AMNESIA:33” that details vulnerabilities found in multiple open-source TCP/IP stacks. CISA is issuing this advisory to provide early notice of the reported vulnerabilities and identify baseline mitigations for reducing risks to these and other cybersecurity attacks. > >The various open-source stacks may be implemented in forked repositories. >2. RISK EVALUATION > >Successful exploitation of these vulnerabilities could allow attackers to corrupt memory, put devices into infinite loops, access unauthorized data, and/or poison DNS cache. >3. TECHNICAL DETAILS >3.1 AFFECTED PRODUCTS > >The following are affected: > > uIP-Contiki-OS (end-of-life [EOL]), Version 3.0 and prior > uIP-Contiki-NG, Version 4.5 and prior > uIP (EOL), Version 1.0 and prior > open-iscsi, Version 2.1.12 and prior > picoTCP-NG, Version 1.7.0 and prior > picoTCP (EOL), Version 1.7.0 and prior > FNET, Version 4.6.3 > Nut/Net, Version 5.1 and prior >... #Security
lnxw48a1: https://pluralistic.net/2020/12/05/trusting-trust/ > WARNING WARNING WARNING WARNING > Security researchers are alarmed: the already-notorious Trickbot malware has been spottied probing infected computers to find out which version of UEFI they're running. This is read as evidence that Trickbot has figured out how to pull off a really scary feat. Source: https://mamot.fr/@pluralistic/105329139472008620 #Security #UEFI #BIOS #TPM #Trusted-Computing CC: @mangeurdenuage @geniusmusing @musicman It's a long article, but well worth your time.
lnxw48a1's status on Saturday, 05-Dec-2020 14:42:34 EST
https://pluralistic.net/2020/12/05/trusting-trust/ > WARNING WARNING WARNING WARNING > Security researchers are alarmed: the already-notorious Trickbot malware has been spottied probing infected computers to find out which version of UEFI they're running. This is read as evidence that Trickbot has figured out how to pull off a really scary feat. Source: https://mamot.fr/@pluralistic/105329139472008620 #Security #UEFI #BIOS #TPM #Trusted-Computing CC: @mangeurdenuage @geniusmusing @musicman It's a long article, but well worth your time.
hypolite: No, <website>, I do not want to mark this device as "trusted". I enabled two-factor authentication exactly because I do not trust my devices. #security
hypolite's status on Thursday, 03-Dec-2020 14:03:51 EST
No, <website>, I do not want to mark this device as "trusted". I enabled two-factor authentication exactly because I do not trust my devices. #security
lnxw48a1: "So you want to get into Infosec?" https://hackers.town/@thegibson/105243991039588873 Some links to discounted or free training in that thread. #infosec #security #training #education
lnxw48a1's status on Friday, 20-Nov-2020 18:49:34 EST
"So you want to get into Infosec?" https://hackers.town/@thegibson/105243991039588873 Some links to discounted or free training in that thread. #infosec #security #training #education
lnxw48a1: @aab has found something to block some traffic from unwanted portscans: https://dodweil.us/security/ufw-fail2ban-portscan.html #security #NoteToSelf
lnxw48a1's status on Thursday, 05-Nov-2020 12:03:48 EST
@aab has found something to block some traffic from unwanted portscans: https://dodweil.us/security/ufw-fail2ban-portscan.html #security #NoteToSelf
lnxw48a1: #Google discloses #Microsoft #Windows 10 #zero-day vulnerability that is currently being exploited in the wild. Also patched a #Chrome zero-day. https://www.zdnet.com/article/google-discloses-windows-zero-day-exploited-in-the-wild/ [www zdnet com] #Win10 #security Patch incoming 2020-11-10, #Patch_Tuesday.
lnxw48a1's status on Saturday, 31-Oct-2020 12:32:38 EDT
#Google discloses #Microsoft #Windows 10 #zero-day vulnerability that is currently being exploited in the wild. Also patched a #Chrome zero-day. https://www.zdnet.com/article/google-discloses-windows-zero-day-exploited-in-the-wild/ [www zdnet com] #Win10 #security Patch incoming 2020-11-10, #Patch_Tuesday.
Google discloses Windows zero-day exploited in the wild | ZDNet
lnxw48a1: FastCompany: Don't share #passwords with your GF or BF until you read this https://www.fastcompany.com/90556503/dont-share-passwords-with-your-gf-or-bf-until-you-read-this [www fastcompany com] I didn't know people still did this. #security #relationships
lnxw48a1's status on Sunday, 27-Sep-2020 22:43:43 EDT
FastCompany: Don't share #passwords with your GF or BF until you read this https://www.fastcompany.com/90556503/dont-share-passwords-with-your-gf-or-bf-until-you-read-this [www fastcompany com] I didn't know people still did this. #security #relationships
Don’t share passwords with your GF or BF until you read this
lnxw48a1: Chinese antivirus firm part of malware / ransomware group https://krebsonsecurity.com/2020/09/chinese-antivirus-firm-was-part-of-apt41-supply-chain-attack/ #security
lnxw48a1's status on Tuesday, 22-Sep-2020 21:57:14 EDT
Chinese antivirus firm part of malware / ransomware group https://krebsonsecurity.com/2020/09/chinese-antivirus-firm-was-part-of-apt41-supply-chain-attack/ #security
miradlo: ♲ @golem@squeet.me: Trotz Cloud Act: Telefónica/O2 vertraut sein 5G-Kernnetz Amazon an - Golem.deDer Mobilfunkbetreiber Telefónica Deutschland setzt bei seinem 5G-Kernnetz auf Server in Deutschland. Doch der Betreiber ist Amazon aus den USA. Trotz Cloud Act: Telefónica/O2 vertraut sein 5G-Kernnetz Amazon an - Golem.de https://www.golem.de/news/trotz-cloud-act-telefonica-o2-vertraut-sein-5g-kernnetz-amazon-an-2009-150632.html #AWS #Datenschutz #Datensicherheit #MarkusHaas #Privatsphäre #WebService #Server #Microsoft #Internet #Security
miradlo's status on Wednesday, 02-Sep-2020 09:06:51 EDT
♲ @golem@squeet.me: Trotz Cloud Act: Telefónica/O2 vertraut sein 5G-Kernnetz Amazon an - Golem.de Der Mobilfunkbetreiber Telefónica Deutschland setzt bei seinem 5G-Kernnetz auf Server in Deutschland. Doch der Betreiber ist Amazon aus den USA. Trotz Cloud Act: Telefónica/O2 vertraut sein 5G-Kernnetz Amazon an - Golem.de https://www.golem.de/news/trotz-cloud-act-telefonica-o2-vertraut-sein-5g-kernnetz-amazon-an-2009-150632.html #AWS #Datenschutz #Datensicherheit #MarkusHaas #Privatsphäre #WebService #Server #Microsoft #Internet #Security
Trotz Cloud Act: Telefónica/O2 vertraut sein 5G-Kernnetz Amazon an - Golem.de
schestowitz: #clownComputing = #security is already compromised completely https://translate.google.com/translate?depth=1&hl=en&prev=search&rurl=translate.google.co.uk&sl=de&u=https://www.heise.de/news/CCC-hackt-digitale-Corona-Liste-mit-87-000-Eintraegen-4881198.html see e.g. http://techrights.org/2019/07/20/slack-is-dead/
schestowitz's status on Sunday, 30-Aug-2020 05:09:33 EDT
#clownComputing = #security is already compromised completely https://translate.google.com/translate?depth=1&hl=en&prev=search&rurl=translate.google.co.uk&sl=de&u=https://www.heise.de/news/CCC-hackt-digitale-Corona-Liste-mit-87-000-Eintraegen-4881198.html see e.g. http://techrights.org/2019/07/20/slack-is-dead/
Slack Committed a Very Major Crime That Can Cost Many Billions If Not Trillions in Damages for Years to Come
schestowitz: #BleepingComputer is an anti- #gnu #linux site. Whenever it mentions "LINUX" it's an attack (a #security FUD angle usually), now #microsoft EEE against it! "How to run Linux programs from a Windows 10 command prompt"
schestowitz's status on Saturday, 29-Aug-2020 23:16:23 EDT
#BleepingComputer is an anti- #gnu #linux site. Whenever it mentions "LINUX" it's an attack (a #security FUD angle usually), now #microsoft EEE against it! "How to run Linux programs from a Windows 10 command prompt"
schestowitz: #Security and FUD (Fear, Uncertainty, Doubt) Leftovers http://www.tuxmachines.org/node/141501 #fud #freesw #gnu #linux
schestowitz's status on Friday, 28-Aug-2020 22:54:02 EDT
#Security and FUD (Fear, Uncertainty, Doubt) Leftovers http://www.tuxmachines.org/node/141501 #fud #freesw #gnu #linux
schestowitz: That's not even counting the deliberate #backdoors , as the goal seems to be #remoteaccess for spies rather than real #security (and they've become shameless about this) https://www.darkreading.com/vulnerabilities---threats/vulnerability-volume-poised-to-overwhelm-infosec-teams/d/d-id/1338776
schestowitz's status on Friday, 28-Aug-2020 21:35:44 EDT
That's not even counting the deliberate #backdoors , as the goal seems to be #remoteaccess for spies rather than real #security (and they've become shameless about this) https://www.darkreading.com/vulnerabilities---threats/vulnerability-volume-poised-to-overwhelm-infosec-teams/d/d-id/1338776
Vulnerability Volume Poised to Overwhelm Infosec Teams
schestowitz: ● NEWS ● #TechDirt #Bridgefy ☞ Bridgefy , A Messaging App Hyped As Great For Protesters, Is A #Security Mess https://www.techdirt.com/articles/20200825/07384045173/bridgefy-messaging-app-hyped-as-great-protesters-is-security-mess.shtml
schestowitz's status on Friday, 28-Aug-2020 11:19:26 EDT
● NEWS ● #TechDirt #Bridgefy ☞ Bridgefy , A Messaging App Hyped As Great For Protesters, Is A #Security Mess https://www.techdirt.com/articles/20200825/07384045173/bridgefy-messaging-app-hyped-as-great-protesters-is-security-mess.shtml
Bridgefy, A Messaging App Hyped As Great For Protesters, Is A Security Mess
schestowitz: #Security Leftovers http://www.tuxmachines.org/node/141468
schestowitz's status on Friday, 28-Aug-2020 09:01:01 EDT
#Security Leftovers http://www.tuxmachines.org/node/141468
schestowitz: Use this command-line tool to find #security flaws in your code https://opensource.com/article/20/8/static-code-security-analysis
schestowitz's status on Friday, 28-Aug-2020 08:38:25 EDT
Use this command-line tool to find #security flaws in your code https://opensource.com/article/20/8/static-code-security-analysis
Use this command-line tool to find security flaws in your code
schestowitz: Spotting /tmp related vulnerabilities with #TmpWatcher https://ubuntu.com//blog/spotting-tmp-related-vulnerabilities-with-tmpwatcher #security
schestowitz's status on Friday, 28-Aug-2020 08:25:59 EDT
Spotting /tmp related vulnerabilities with #TmpWatcher https://ubuntu.com//blog/spotting-tmp-related-vulnerabilities-with-tmpwatcher #security
Spotting /tmp related vulnerabilities with TmpWatcher | Ubuntu
schestowitz: #Netcraft Extension adds credential leak detection https://news.netcraft.com/archives/2020/08/28/netcraft-extension-adds-credential-leak-detection.html #security
schestowitz's status on Friday, 28-Aug-2020 08:12:00 EDT
#Netcraft Extension adds credential leak detection https://news.netcraft.com/archives/2020/08/28/netcraft-extension-adds-credential-leak-detection.html #security
schestowitz: ● NEWS ● #TheHill #Surveillance ☞ #DNC warns campaign staffers of dating app #security concerns: report https://thehill.com/policy/cybersecurity/514050-democratic-party-warns-campaign-staffers-of-dating-app-security-concerns
schestowitz's status on Friday, 28-Aug-2020 02:32:48 EDT
● NEWS ● #TheHill #Surveillance ☞ #DNC warns campaign staffers of dating app #security concerns: report https://thehill.com/policy/cybersecurity/514050-democratic-party-warns-campaign-staffers-of-dating-app-security-concerns
DNC warns campaign staffers of dating app security concerns: report
schestowitz: #Security Leftovers http://www.tuxmachines.org/node/141436
schestowitz's status on Thursday, 27-Aug-2020 11:17:36 EDT
#Security Leftovers http://www.tuxmachines.org/node/141436
schestowitz: #Ubuntu To Try Again In Switching #IPTables To Use #Nftables Backend http://www.tuxmachines.org/node/141422 #security
schestowitz's status on Thursday, 27-Aug-2020 00:24:04 EDT
#Ubuntu To Try Again In Switching #IPTables To Use #Nftables Backend http://www.tuxmachines.org/node/141422 #security
schestowitz: #DigitalOcean & Others Still Working On Core Scheduling To Make Hyper Threading Safer https://www.phoronix.com/scan.php?page=news_item&px=Core-Scheduling-2020 #kernel #linux #security
schestowitz's status on Wednesday, 26-Aug-2020 22:55:08 EDT
#DigitalOcean & Others Still Working On Core Scheduling To Make Hyper Threading Safer https://www.phoronix.com/scan.php?page=news_item&px=Core-Scheduling-2020 #kernel #linux #security
schestowitz: #Security Leftovers http://www.tuxmachines.org/node/141409
schestowitz's status on Wednesday, 26-Aug-2020 22:17:25 EDT
#Security Leftovers http://www.tuxmachines.org/node/141409