Security Leftovers
-
OpenSnitch App-Level Firewall May Find a Home in Debian 12
A discussion that began in 2018 about adopting OpenSnitch in Debian repositories will probably find a resolution in Debian 12.
-
TrenchBoot Anti Evil Maid for Qubes OS
Editor’s note: The following is a guest post by Michal Zygowski from 3mdeb on the work they’ve been doing to upgrade Anti Evil Maid (AEM). The original post can be found on the 3mdeb blog. This work was made possible through generous donations from the Qubes community via OpenCollective. We are immensely grateful to the Qubes community for your continued support and to 3mdeb for contributing this valuable work.
-
Bug The latest bug bounty programs for February 2023
New web targets for the discerning hacker
-
CISA Releases One Industrial Control Systems Advisory
Original release date: January 31, 2023
CISA released one Industrial Control Systems (ICS) advisory on January 31, 2023. This advisory provides timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
-
Russia’s cyberwar against Ukraine offers vital lessons for the West [Ed: Microsoft Windows TCO]
Ukraine’s experience in countering Russian cyber warfare can provide valuable lessons while offering a glimpse into a future where wars will be waged both by conventional means and increasingly in the borderless realm of cyberspace.
-
JD Sports hit by cyber-attack that accessed 10m customers’ data
Mark Sweney reports: The fashion retailer JD Sports said the personal and financial information of 10 million customers was potentially accessed by hackers in a cyber-attack.
-
Atlantic General Hospital experiences ransomware event [Ed: Microsoft Windows TCO]
Sarah Ash reports: Atlantic General Hospital experienced what’s being called a ransomware event Monday afternoon. A hospital spokesperson told 47 ABC that the cause of the disruption is being investigated. Network outages did occur but we’re told patient interruption was limited. The hospital Emergency Room is continuing to receive and treat patients and will continue to service elective surgeries and other outpatient procedures.
-
Ca: Qulliq Energy stops short of labelling cyberattack another Nunavut ransomware incident
CBC reports...
-
Reality check: Is ChatGPT really the next big cybersecurity threat? [Ed: Self-promotional Microsoft propaganda/charm offensive campaigns]
ChatGPT isn't a malware-writing savant and much of the hype around it obscures just how much expertise is required to output quality code.