Security Leftovers
-
How businesses can bolster their cybersecurity defenses with open source [Ed: Canonical is relaying Microsoft FUD and FOSS-hostile propaganda]
-
BeyondTrust adds privilege management capabilities to Linux [Ed: BeyondTrust is proprietary and Microsoft booster]
-
Security updates for Thursday [LWN.net]
Security updates have been issued by Debian (git), Fedora (libXpm and redis), Oracle (bind, firefox, grub2, java-1.8.0-openjdk, java-11-openjdk, kernel, libtasn1, libXpm, and sssd), Red Hat (thunderbird), SUSE (freeradius-server, kernel, libzypp-plugin-appdata, python-certifi, and xen), and Ubuntu (bind9, krb5, linux-raspi, linux-raspi-5.4, and privoxy).
-
CISA Releases Eight Industrial Control Systems Advisories | CISA
CISA released eight Industrial Control Systems (ICS) advisories on January 26, 2023.These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
-
CISA Has Added One Known Exploited Vulnerability to Catalog [Ed: This is 100% about Microsoft .NET]
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.
-
The Unrelenting Menace of the LockBit Ransomware Gang | WIRED UK [Ed: Windows TCO]
High-profile ransomware attacks have become a fact of life in recent years, and it’s not unusual to hear about major monthly attacks perpetrated by Russia-based gangs and their affiliates. But since late 2019, one group has been steadily making a name for itself on a multi-year rampage that has impacted hundreds of organizations around the world. The LockBit ransomware gang may not be the most wildly unhinged of these criminal groups, but its callous persistence, effectiveness, and professionalism make it sinister in its own way.