Read Time:7 Second
The amount of crypto stolen in the Web3 ecosystem rose by 31.6% compared to 2023, with phishing the most costly attack vector
Monthly Archives: January 2025
Apple Agrees $95M Settlement Over Siri Privacy Violations
Read Time:8 Second
Apple has agreed to a $95m settlement in a class action lawsuit alleging Siri privacy violations, with eligible users receiving up to $20 per Siri-enabled device
US Confirms Russian GenAI Disinformation Op Targeted Election
Read Time:7 Second
The US government has sanctioned Russian state-affiliated entity CGE, which used a vast GenAI infrastructure to spread disinformation during the US Presidential election
EC2 Grouper Attack
Read Time:1 Minute, 0 Second
What is the Attack?FortiGuard Labs Threat Team has observed recent attacks by a Threat Actor dubbed “EC2 Grouper” that leverages AWS tools for PowerShell to carry out cloud-based attacks. It leverages APIs to inventory EC2 types and available regions before executing further API calls iteratively. The Threat Actor is seen using techniques that enable remote access and lateral movement within cloud environments. EC2 Grouper is a highly active threat actor frequently involved in cloud identity compromises, observed across numerous customer environments over the years. To learn more, see the detailed Threat Blog: Catching “EC2 Grouper”- No Indicators Required! | FortiGuard LabsWhat is the recommended Mitigation?Detecting illicit use of valid cloud credentials is challenging, as most attacks lack unique indicators. By correlating weak signals, such as environmental anomalies and API usage patterns, composite alerting enhances detection accuracy significantly. For detailed guidance and Threat report, visit Fortinet’s Threat Blog | FortiGuard LabsWhat FortiGuard Coverage is available?Lacework FortiCNAPP: Cloud detection and response (CDR) addresses cloud identity compromises and uses composite alerting for enhanced detection.Lacework FortiCNAPP enhances detection efficacy and integrates CIEM to assess the impact of compromised identities.Read more about how Lacework FortiCNAPP can secure your cloud environment.
libxmp-4.6.1-2.fc41
Read Time:26 Second
FEDORA-2025-23e4aeeb91
Packages in this update:
libxmp-4.6.1-2.fc41
Update description:
Latest upstream release. Changelog:
Fixes:
CVE-2023-45679: Attempt to free an uninitialized memory pointer in vorbis_deinit()
CVE-2023-45680: Null pointer dereference in vorbis_deinit()
CVE-2023-45681: Out of bounds heap buffer write
CVE-2023-45676: Multi-byte write heap buffer overflow in start_decoder()
CVE-2023-45677: Heap buffer out of bounds write in start_decoder()
CVE-2023-45682: Wild address read in vorbis_decode_packet_rest()
libxmp-4.6.1-2.fc40
Read Time:26 Second
FEDORA-2025-c58133e520
Packages in this update:
libxmp-4.6.1-2.fc40
Update description:
Latest upstream release. Changelog:
Fixes:
CVE-2023-45679: Attempt to free an uninitialized memory pointer in vorbis_deinit()
CVE-2023-45680: Null pointer dereference in vorbis_deinit()
CVE-2023-45681: Out of bounds heap buffer write
CVE-2023-45676: Multi-byte write heap buffer overflow in start_decoder()
CVE-2023-45677: Heap buffer out of bounds write in start_decoder()
CVE-2023-45682: Wild address read in vorbis_decode_packet_rest()
xmlrpc-c-1.60.04-2.fc42
Read Time:36 Second
FEDORA-2025-a835dd04a0
Packages in this update:
xmlrpc-c-1.60.04-2.fc42
Update description:
Automatic update for xmlrpc-c-1.60.04-2.fc42.
Changelog
* Thu Jan 2 2025 Jonathan Wright <jonathan@almalinux.org> – 1.60.4-2
– Use global macro to override make smp_flags
* Thu Jan 2 2025 Jonathan Wright <jonathan@almalinux.org> – 1.60.4-1
– update to 1.60.4 rhbz#2334236
– re-enable builds against libxml2, no more bundled libexpat
– fixes rhbz#2310136
– fixes rhbz#2310146
– fixes rhbz#2310152
* Wed Sep 4 2024 Miroslav Suchý <msuchy@redhat.com> – 1.59.03-3
– convert license to SPDX
Automatic update for xmlrpc-c-1.60.04-1.fc42.
xmlrpc-c-1.60.04-1.fc42
Read Time:26 Second
FEDORA-2025-482675dee5
Packages in this update:
xmlrpc-c-1.60.04-1.fc42
Update description:
Automatic update for xmlrpc-c-1.60.04-1.fc42.
Changelog
* Thu Jan 2 2025 Jonathan Wright <jonathan@almalinux.org> – 1.60.4-1
– update to 1.60.4 rhbz#2334236
– re-enable builds against libxml2, no more bundled libexpat
– fixes rhbz#2310136
– fixes rhbz#2310146
– fixes rhbz#2310152
* Wed Sep 4 2024 Miroslav Suchý <msuchy@redhat.com> – 1.59.03-3
– convert license to SPDX
Google Is Allowing Device Fingerprinting
Top 5 Weakest Security Configurations and How to Fix Them
Read Time:7 Second
In H2 2024, the CIS CTI team found weak security configurations through passive scans of customers’ external networks. Here’s how to stay secure.