Security Leftovers

posted by Roy Schestowitz on Feb 23, 2023,
updated Feb 23, 2023

• Security updates for Wednesday [LWN.net]

  Security updates have been issued by Debian (amanda, apr-util, and tiff), Fedora (apptainer, git, gssntlmssp, OpenImageIO, openssl, webkit2gtk3, xorg-x11-server, and xorg-x11-server-Xwayland), Oracle (firefox and thunderbird), Red Hat (python3), SUSE (gnutls, php7, and python-Django), and Ubuntu (chromium-browser, libxpm, and mariadb-10.3, mariadb-10.6).

• Cisco ClamAV anti-malware scanner vulnerable to serious security flaw [Ed: When your security software is a security hole]

  Patch released for bug that poses a critical risk to vulnerable technologies

• Announcing Istio 1.16.3

  This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.16.2 and Istio 1.16.3.

  This release includes security fixes in Go 1.19.6 (released 2/14/2023) for the path/filepath, net/http, mime/multipart, and crypto/tls packages.

• Activision Got Hacked but Didn't Tell Its Employees: Report

  This week, gaming giant Activision revealed that a cybercriminal had managed to get inside of its network late last year. How did the hacker do that, exactly? Better take a guess.

• IBM finds defenders are becoming more successful in detecting and preventing ransomware

• New ‘Stealc’ information-stealing malware grows in popularity on dark web

• Beware of this Disney+ impersonation email which leads to a phishing website

  This scam email offers a 12-month subscription to Disney+ for £2