Fear, Uncertainty, Doubt (FUD), Patches, and Windows/Microsoft TCO
-
Microsoft Uncovers Flaws in ncurses Library Affecting Linux and macOS Systems [Ed: Meanwhile Microsoft has intentional flaws in its own software]
A set of memory corruption flaws have been discovered in the ncurses (short for new curses) programming library that could be exploited by threat actors to run malicious code on vulnerable Linux and macOS systems.
-
Free Download Manager Site Compromised to Distribute Linux Malware to Users for 3+ Years [Ed: Not official repos; this is overrated]
A download manager site served Linux users malware that stealthily stole passwords and other sensitive information for more than three years as part of a supply chain attack.
-
More Linux Malware Means More Linux Monitoring [Ed: Jack M. Germain posts more marketing trash, even borrowing "Log4j" (2021) for extra scare/FUD. This isn't journalism, it's spammy marketing disguised as information.]
For instance, it has been almost two years since the Log4j disclosure. There are still systems vulnerable to it because businesses take too long to do patches, he offered.
-
Security updates for Friday
ecurity updates have been issued by Debian (c-ares and samba), Fedora (borgbackup, firefox, and libwebp), Oracle (.NET 6.0 and kernel), Slackware (libwebp), SUSE (chromium and firefox), and Ubuntu (atftp, dbus, gawk, libssh2, libwebp, modsecurity-apache, and mutt).
-
New Europol report shines light on multi-billion euro underground criminal economy
The world is getting smaller, as trade, communication and infrastructure on a global scale brings us closer together. However, there is another, darker, side to the coin: our interconnected world is being abused by criminals who have created an underground economy to sustain their illegal operations.
-
Identity of NSA hacker behind cyberattack on China’s leading aviation university identified; to be disclosed in due course: source
During the investigation of the cyberattack against Northwestern Polytechnical University (NPU), a leading Chinese aviation university, China has successfully extracted multiple samples of the spyware named SecondDate, and with the collaborative efforts of partners in various countries, the real identity of the US’ National Security Agency (NSA) personnel responsible for launching the cyberattack on NPU has been successfully identified, Global Times learnt from National Computer Virus Emergency Response Center (CVERC) and Chinese internet security company 360 on Thursday. […]
Relevant sources have told the Global Times that the real identities of individuals involved in NSA’s cyberattacks will be disclosed through the media in due course. It is believed that this will once again draw global attention to the US government’s indiscriminate cyberattacks on other countries.
-
Personal information of thousands of Sanford Health patients potentially compromised
The imaging vendor Sanford Health uses for its mobile heart screen trucks, DMS Health Technologies, experienced a data security incident between March 27 and April 24, 2023.
According to Sanford Health, patient information was potentially compromised including name, date of birth, date of service, physician name and exam type. Sanford Health is one of numerous DMS contracted partners affected by this event.
-
AlphV responds to MGM incident and sloppy reporting
Meanwhile we continued having super administrator privileges to their Okta, along with Global Administrator privileges to their Azure tenant.
-
FL: Hillsborough County Public Schools cyberattack claimed by LockBit3.0
The sample files are routine types of district files. One did contain personal and medically related information on students. The file list suggests there may be a lot of older data in the stolen tranche but not necessarily any student databases with personal or sensitive information.
“Seems that HCPS do not care about their county’s 270 000 students and 17 000 teachers data. We give them 10 days to consider and we will release all data to public after 3 day auction to sell it private,” LockBit threatens.