Security Leftovers
-
Security updates for Tuesday
Security updates have been issued by Debian (libssh and sssd), Fedora (microcode_ctl and python3.6), Gentoo (cgal, firefox firefox-bin, openimageio, squashfs-tools, thunderbird thunderbird-bin, tiff, tomcat, webkit-gtk, and xorg-server xwayland), SUSE (c-ares and go1.18-openssl), and Ubuntu (Jhead, node-hawk, node-nth-check, and perl).
-
Developing: RaidForums users db leaked
The database appears to date to September 2020. It contains entries for the site owner, Omnipotent, as well as moderators, and well-known users. DataBreaches spot-checked the database and found individuals with their known usernames, email addresses, and jabber IDs.
The administrator who posted the leak noted that “ps: there are some removed users.” They did not clarify whether they had removed users from the database or others had.
There is no indication as yet as to how this database was leaked, who first leaked it, or why it is first being publicly leaked now. The popular hacking forum was seized in 2022, but the owner was reportedly arrested months before the seizure was made public.
-
Worst cyberattack in Greece disrupts high school exams, causes political spat
Greece’s Education Ministry says it has been targeted in a cyberattack described as the most extensive in the country’s history, aimed at disabling a centralized high school examination platform.
It said the distributed denial of service, or DDoS, attacks aimed at overwhelming the platform occurred for a second consecutive day Tuesday. The attack involved computers from 114 countries, causing outages and delays in high school exams but failing to incapacitate the system, the ministry said.