Deepfakes are being used for good (perhaps), common usernames could pose a security threat, and someone has paid a $500,000 fee… just to send $1,865.
Oh, and our guest mentions Mr Blobby (to the horror of the show’s hosts…)
All this and much much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire’s Dave Bittner.
A vulnerability has been discovered in Mozilla products, which could allow for arbitrary code execution.
Mozilla Firefox is a web browser used to access the Internet.
Mozilla Firefox ESR is a version of the web browser intended to be deployed in large organizations.
Mozilla Thunderbird is an email client.
Successful exploitation of this vulnerability could allow for arbitrary code execution. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
It was discovered that PostgreSQL incorrectly handled certain extension
script substitutions. An attacker having database-level CREATE privileges
can use this issue to execute arbitrary code as the bootstrap superuser.
The new campaign is believed to be perpetrated by Storm-0324, which distributes the payloads of other attackers after achieving initial network compromise
It was discovered that Open VM Tools incorrectly handled SAML tokens. A
remote attacker could possibly use this issue to bypass SAML token
signature verification and perform VMware Tools Guest Operations.
dotnet6.0-6.0.122-1.fc37
This is the monthly update for .NET 6 for September 2023.
Release notes:
Runtime: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.22/6.0.22.md
SDK: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.22/6.0.122.md
dotnet6.0-6.0.122-1.fc38
This is the monthly update for .NET 6 for September 2023.
Release notes:
Runtime: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.22/6.0.22.md
SDK: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.22/6.0.122.md
dotnet6.0-6.0.122-1.fc39
This is the monthly update for .NET 6 for September 2023.
Release notes:
Runtime: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.22/6.0.22.md
SDK: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.22/6.0.122.md
dotnet7.0-7.0.111-1.fc37
This is the monthly update for .NET 7 for September 2023.
Release notes:
Runtime: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.11/7.0.11.md
SDK: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.11/7.0.111.md
dotnet7.0-7.0.111-1.fc38
This is the monthly update for .NET 7 for September 2023.
Release notes:
Runtime: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.11/7.0.11.md
SDK: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.11/7.0.111.md
