Security Leftovers
-
StackRot Linux Kernel Bug Has Exploit Code on the Way
Exploit code will soon become available for a critical vulnerability in the Linux kernel that a security researcher discovered and reported to Linux administrators in mid-June.
The bug, which the researcher labeled StackRot (CVE-2023-3269), affects Linux kernel 6.1 through 6.4 and gives attackers a way to escalate privileges on affected systems.
-
Researchers Uncover New Linux Kernel 'StackRot' Privilege Escalation Vulnerability
Details have emerged about a newly identified security flaw in the Linux kernel that could allow a user to gain elevated privileges on a target host.
Dubbed StackRot (CVE-2023-3269, CVSS score: 7.8), the flaw impacts Linux versions 6.1 through 6.4. There is no evidence that the shortcoming has been exploited in the wild to date
-
Security updates for Friday [LWN.net]
Security updates have been issued by Debian (debian-archive-keyring, libusrsctp, nsis, ruby-redcloth, and webkit2gtk), Fedora (firefox), Mageia (apache-ivy, cups, curaengine, glances, golang, keepass, libreoffice, minidlna, nodejs, opensc, perl-DBD-SQLite, python-setuptools, python-wheel, skopeo/buildah/podman, systemd, testng, and webkit2), SUSE (bind), and Ubuntu (Gerbv, golang-websocket, linux-gke, linux-intel-iotg, and linux-oem-5.17).
-
Tracy Resident Charged With Computer Attack On Discovery Bay Water Treatment Facility
A federal grand jury has indicted Rambler Gallo, charging him with intentionally causing damage to a protected computer after he allegedly accessed the computer network for the Discovery Bay Water Treatment Facility, located in the Town of Discovery Bay, Calif., and intentionally uninstalled the main operational and monitoring system for the water treatment plant and then turned off the servers running those systems, announced United States Attorney Ismail J. Ramsey and Federal Bureau of Investigation Special Agent in Charge Robert K. Tripp.
-
College learns that two of its vendors were impacted by MOVEit breach.
Earlier this week, DataBreaches reported that Imagine360 had the unfortunate experience of discovering that two of their file-sharing platforms had both suffered breaches within days of each other: Citrix and Fortra/GoAnywhere.
Today we bring you another double-whammy scenario. But in this one, it’s not two different platforms being breached within days of each other. This time, it’s two different vendors both falling prey to the MOVEit breach.
-
“Almost everything you have posted in your news article about this incident is a total crap” — BlackCat to Bangladeshi news outlets