Security Leftovers
-
New Alpha Release: Tor Browser 12.0a4 (Android, Windows, macOS, Linux)
Tor Browser 12.0a4 updates Firefox on Android, Windows, macOS, and Linux to 102.4.0esr.
-
Accused 'Raccoon' Malware Developer Fled Ukraine After Russian Invasion - Krebs on Security
-
FTC Orders Homework Help App Chegg to “Shore Up Security” [Ed: Fake security for stuff that ought to be banned (far more harms then benefits)]
Chegg has offered various educational tools for high school and college students over the years. This includes a homework help app and a scholarship search service. While this sounds great initially, if it’s not protecting students’ personal information, then the help really isn’t … helpful.
-
Critical RCE Vulnerability Reported in ConnectWise Server Backup Solution
IT service management software platform ConnectWise has released Software patches for a critical security vulnerability in Recover and R1Soft Server Backup Manager (SBM).
The issue, characterized as a "neutralization of Special Elements in Output Used by a Downstream Component," could be abused to result in the execution of remote code or disclosure of sensitive information.
ConnectWise's advisory notes that the flaw affects Recover v2.9.7 and earlier, as well as R1Soft SBM v6.16.3 and earlier, are impacted by the critical flaw.