Security Leftovers
-
Security updates for Wednesday [LWN.net]
Security updates have been issued by Debian (barbican, mediawiki, and php-twig), Fedora (bash, chromium, lighttpd, postgresql-jdbc, and scala), Mageia (bash, chromium-browser-stable, and golang), Oracle (bind, bind9.16, and squid:4), Red Hat (bind, bind9.16, RHSSO, and squid:4), Scientific Linux (bind), SUSE (cifs-utils, libjpeg-turbo, nodejs14, and nodejs16), and Ubuntu (jackd2, linux-gke, and linux-intel-iotg).
-
FBI and CISA Publish a PSA on Malicious Cyber Activity Against Election Infrastructure
Confirms “the FBI and CISA have no reporting to suggest cyber activity has ever prevented a registered voter from casting a ballot, compromised the integrity of any ballots cast, or affected the accuracy of voter registration information.”
-
Dissect: Open-source framework for collecting, analyzing forensic data - Help Net Security
Fox-IT developed and has used Dissect over the past 10 years as a critical framework in incident response investigations for customers. Now it is available on GitHub to the security community as open source software to help advance and accelerate forensic data collection and analysis.
“We developed Dissect because we dealt with increasingly complex IT environments and it has greatly enhanced our incident response capabilities. We are now sharing Dissect as open source software with the security community, particularly incident responders from fellow security companies and security teams from larger companies,” said Erik Schamper, Senior Security Analyst at Fox-IT.
-
October Is Cybersecurity Awareness Month
For the past nineteen years, October has been Cybersecurity Awareness Month here in the US, and that event that has always been part advice and part ridicule. I tend to fall on the apathy end of the spectrum; I don’t think I’ve ever mentioned it before. But the memes can be funny.
-
The dread, sincerity and comedy of Cybersecurity Awareness Month
Ever since 2004, October has been Cybersecurity Awareness Month, created by the Department of Homeland Security and the nonprofit, industry-sponsored National Cybersecurity Alliance to … well … promote awareness of cybersecurity.
-
libpcap and tcpdump Sources Trojaned