Read Time:6 Second
FEDORA-2022-ffe7dba2cb
Packages in this update:
golang-1.16.15-3.fc35
Update description:
Security fix for CVE-2022-29526
Monthly Archives: July 2022
Microsoft Spots Updated Cryptomining Malware Tool Targeting Linux Systems
New ‘SessionManager’ Backdoor is Targeting Microsoft Exchange Servers Worldwide
Read Time:4 Second
The malware targeted 24 organizations across Africa, South Asia, Europe and the Middle East
Threat Actor Claims Responsibility For IBM and Stanford University Hack
Read Time:5 Second
The module reportedly has desktop takeover capabilities that would be used to get clicks on ads
Trust Key to Space Travel, Like Cybersecurity, Says Astronaut Tim Peake
Analyzing the Swiss E-Voting System
Read Time:8 Second
Andrew Appel has a long analysis of the Swiss online voting system. It’s a really good analysis of both the system and the official analyses.
CVE-2014-3650
Read Time:10 Second
Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these flaws to compromise the application with specially crafted input.
CVE-2014-3648
Read Time:26 Second
The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But this is user controlled. If a bogus applications is registered with bad deviceTokens, one can generate endless exceptions when those endpoints can’t be reached or can slow the server down by purposefully wasting it’s time with slow endpoints. Similarly, one can provide whatever HTTP end point they want. This turns the server into a DDOS vector or an anonymizer for the posting of malware and so on.
FTC warns LGBTQ+ community of extortion scams targeting them on dating apps
Read Time:13 Second
Members of the LGBTQ+ community have been warned to be on their guard against extortionists who may attempt to prey on them via online dating apps such as Grindr and Feeld.
Read more in my article on the Hot for Security blog.
AMD held to ransom by gang that claims 450GB of data has been stolen
Read Time:13 Second
Semiconductor giant AMD says that it is investigating what claims to be a major data breach of its network, that saw a group of online criminals steal 450GB of data from its systems.
Read more in my article on the Hot for Security blog.