Security Leftovers
-
LWN ☛ Security updates for Thursday
Security updates have been issued by AlmaLinux (grafana, NetworkManager-libreswan, python3.11, and python39:3.9 and python39-devel:3.9), Fedora (dotnet6.0, koji, python-fastapi, python-openapi-core, python-platformio, python-starlette, rust-pyo3, rust-pyo3-build-config, rust-pyo3-ffi, rust-pyo3-macros, rust-pyo3-macros-backend, and yarnpkg), Oracle (grafana, kernel, linux-firmware, NetworkManager-libreswan, and python3.11), Slackware (php81), and SUSE (apache2, buildah, cups-filters, go1.21-openssl, podman, postgresql16, python-pyOpenSSL, and webkit2gtk3).
-
Federal News Network ☛ Four companies face SEC fines for not disclosing they were affected by the SolarWinds hack
In today's Federal Newscast, the Securities and Exchange Commission fines four companies for misleading disclosures about a major cybersecurity hack.
-
OpenSSF (Linux Foundation) ☛ Case Study: Kusari’s Implementation of OpenSSF Tools and Services
Challenge For many years, the software supply chain has suffered from a lack of transparency and inefficient, unsustainable security management methods such as spreadsheets, emails, and word of mouth.
-
Science Alert ☛ The Single Biggest Vulnerability in Your Cyber Security Is You
You are the weakest link.
-
Pen Test Partners ☛ Investigating volatile data with advanced memory forensics tools – part 1
TL;DR Memory forensics enhances investigations by analysing volatile data (in RAM) unavailable in disk forensics.
-
Silicon Angle ☛ Critical vulnerability in Fortinet’s FortiManager exploited in the wild
A critical vulnerability discovered in Fortinet Inc.’s FortiManager is being exploited in the wild, and users are being advised to implement changes to protect against the threat.
-
SANS ☛ Development Features Enabled in Production, (Thu, Oct 24th)
We do keep seeing attackers "poking around" looking for enabled development features. Developers often use these features and plugins to aid in debugging web applications.
-
Scoop News Group ☛ Researchers out new Qilin ransomware-as-a-service variant
The Qilin ransomware operation first emerged in July 2022 after rebranding a previous variant known as Agenda and rewriting the malware in Rust.
-
Netcraft ☛ Hook’d: How HookBot Malware Impersonates Known Brands to Steal Customer Data
Key data
This article explores Netcraft’s research into the HookBot malware family and associated attacks on Android devices, including examples of: [...]