Security Leftovers
-
A Museum Security Expert on How to Protect Great Art - The Atlantic
A museum-security expert admits that “it’s pretty darn hard to protect a painting from somebody throwing a can of soup at it.”
On Friday, in a bizarre act that immediately went viral, two climate activists covered a 130-ish-year-old Vincent Van Gogh painting with tomato soup at the National Gallery in London. They then proceeded to superglue themselves to the wall beneath the frame. “Are you more concerned about the protection of a painting or the protection of our planet?” one asked. The protesters were later charged criminally.
They were concerned about the planet, but also, at least purportedly, about the painting. A spokesperson for the group the protesters are affiliated with, Just Stop Oil, told The New York Times that the group had checked ahead of time to ensure the work was glazed—covered by a thin layer of glass—so that the soup would not damage the art. And glazed it was. Video shows that the orange soup did not seep into the yellow painting but rather rolled and dripped down the front, a barely perceptible layer clearly separating it from the art. The work reportedly suffered no damage, except to its frame.
[...]
Banks don’t take millions of dollars and put them in plastic bags and hang them on the wall so everybody can walk right up to them.
-
Security updates for Wednesday
Security updates have been issued by Debian (bcel, kernel, node-xmldom, and squid), Mageia (chromium-browser-stable, dhcp, dokuwiki, firefox, golang, python-joblib, sos, and unzip), Oracle (nodejs and nodejs:16), Red Hat (firefox, kernel, kernel-rt, nodejs, nodejs:14, and thunderbird), Scientific Linux (firefox and thunderbird), Slackware (git and mozilla), SUSE (amazon-ssm-agent, caasp-release, cri-o, patchinfo, release-notes-caasp, skuba, enlightenment, libreoffice, netty, nodejs12, nodejs14, nodejs16, pngcheck, postgresql-jdbc, python-waitress, rubygem-activesupport-5_1, and tcl), and Ubuntu (frr, git, libksba, and linux-azure-4.15).
-
3 Ways to Help Customers Defend Against Linux-Based Cyberattacks - MSSP Alert
Linux operating systems power more than 90% of the world’s public cloud workload, from government web servers to smart manufacturing technologies. But as organizations continue to shift operations to the cloud, cybercriminals are following suit and directing their attention to Linux-based cyberattacks.
-
Oracle Releases October 2022 Critical Patch Update | CISA
A remote attacker could exploit some of these vulnerabilities to take control of an affected system.
-
CISA Updates Advisory on Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite [Ed: Way to distract from what's happening to Microsoft Exchange at the moment (Microsoft is not even patching!)]
CISA and the Multi-State Information Sharing & Analysis Center (MS-ISAC) have updated joint Cybersecurity Advisory AA22-228A: Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite, originally released August 16, 2022. The advisory has been updated to reference the addition of a new Malware Analysis Report, MAR-10398871.r1.v2.