Read Time:4 Second
Researchers see an uptick in crypto-doubling investment scams following the first presidential debate
Monthly Archives: October 2024
Email Phishing Attacks Surge as Attackers Bypass Security Controls
Read Time:7 Second
Egress found that attackers are becoming more adept at bypassing email security, such as using compromised accounts and the use of commodity campaigns
FIN7 Gang Hides Malware in AI “Deepnude” Sites
Read Time:4 Second
Threat group FIN7 is hiding infostealer malware on sites promising AI deepnude downloads
redis-7.2.6-1.fc40
Read Time:23 Second
FEDORA-2024-5d4eb04e76
Packages in this update:
redis-7.2.6-1.fc40
Update description:
Redis Community Edition 7.2.6 Released Wed 02 Oct 2024 20:17:04 IDT
Upgrade urgency SECURITY: See security fixes below.
Security fixes
CVE-2024-31449 Lua library commands may lead to stack overflow and potential RCE.
CVE-2024-31227 Potential Denial-of-service due to malformed ACL selectors.
CVE-2024-31228 Potential Denial-of-service due to unbounded pattern matching.
redis-7.2.6-1.fc39
Read Time:23 Second
FEDORA-2024-68f9c0741f
Packages in this update:
redis-7.2.6-1.fc39
Update description:
Redis Community Edition 7.2.6 Released Wed 02 Oct 2024 20:17:04 IDT
Upgrade urgency SECURITY: See security fixes below.
Security fixes
CVE-2024-31449 Lua library commands may lead to stack overflow and potential RCE.
CVE-2024-31227 Potential Denial-of-service due to malformed ACL selectors.
CVE-2024-31228 Potential Denial-of-service due to unbounded pattern matching.
USN-7052-1: GNOME Shell vulnerabilities
Read Time:23 Second
It was discovered that GNOME Shell mishandled extensions that fail to
reload, possibly leading to extensions staying enabled on the lock screen.
An attacker could possibly use this issue to launch applications, view
sensitive information, or execute arbitrary commands. (CVE-2017-8288)
It was discovered that the GNOME Shell incorrectly handled certain
keyboard inputs. An attacker could possibly use this issue to invoke
keyboard shortcuts, and potentially other actions while the workstation
was locked. (CVE-2019-3820)
DSA-5782-1 linux – security update
Read Time:9 Second
Several vulnerabilities have been discovered in the Linux kernel that
may lead to a privilege escalation, denial of service or information
leaks.
DSA-5781-1 chromium – security update
Read Time:9 Second
Security issues were discovered in Chromium which could result
in the execution of arbitrary code, denial of service, or information
disclosure.
Smashing Security podcast #387: Breaches in your genes, and Kaspersky switcheroo raises a red flag
Read Time:18 Second
From family tree to jail cell? A hacker is alleged to have exploited information on genealogy websites to steal millions from public companies. Meanwhile, Kaspersky’s US customers are wondering – what on earth is UltraAV?
All this and more is discussed in the latest edition of the award-winning “Smashing Security” podcast by computer security veterans Graham Cluley and Carole Theriault.
ACSC and CISA Launch Critical OT Cybersecurity Guidelines
Read Time:6 Second
The ACSC, in collaboration with CISA and international partners, has released a guide for securing operational technology in critical sectors