Security Leftovers
-
LWN ☛ Security updates for Monday
Security updates have been issued by AlmaLinux (bind, bind9.18, libpq, mysql, postgresql, postgresql:15, and postgresql:16), Debian (fort-validator, gnutls28, krb5, libxml2, and python-werkzeug), Fedora (chromium, openssh, proftpd, python3.8, vaultwarden, and vim), Oracle (bind, bind9.16, bind9.18, libpq, libsoup, mysql, mysql:8.0, nodejs:18, nodejs:22, postgresql, postgresql:13, postgresql:15, and postgresql:16), Red Hat (mysql, mysql:8.0, and python3), SUSE (chromedriver, dcmtk, grub2, java-1_8_0-ibm, java-23-openjdk, luanti, openssh, postgresql14, postgresql15, postgresql16, postgresql17, proftpd, radare2, and webkit2gtk3), and Ubuntu (intel-microcode, netty, and nginx).
-
2025-02-18 [Older] Health Net Federal Services, LLC and Centene Corporation Agree to Pay Over $11 Million to Resolve False Claims Act Liability for Cybersecurity Violations
-
2025-02-20 [Older] How federal rules on cybersecurity breach transparency for businesses were challenged in court in 2024
-
2025-02-19 [Older] $10 Infostealers Are Breaching Critical US Security: Military and Even the FBI Hit
-
CISA ☛ 2025-02-20 [Older] Rapid Response Monitoring My Security Account App
-
2025-02-20 [Older] HHS Office for Civil Rights Imposes a $1,500,000 Civil Money Penalty Against Warby Parker in HIPAA Cybersecurity Hacking Investigation
-
2025-02-21 [Older] Enterprise Linux Security Episode 108 - Ten Tips for Effective Automation
-
Security Week ☛ US Charges Genesis Market User
A Michigan man has been charged for buying compromised credentials on Genesis Market and using and selling them.
-
Security Week ☛ $1.5 Billion Bybit Heist Linked to North Korean Hackers
Companies and experts have found evidence linking the $1.5 billion Bybit cryptocurrency heist to North Korean Lazarus hackers.
-
Entrapment (Microsoft GitHub)
-
InfoQ ☛ GitHub Actions Adds Linux ARM64 Hosted Runners in Public Preview [Ed: Entrapment (Microsoft GitHub) with proprietary, secret, remotely controlled compilers that could event plan back doors in FOSS projects]
GitHub recently announced the public preview of Linux arm64 hosted runners for GitHub Actions. Free for public repositories, this update provides developers with more efficient tools for building and testing software on Arm-based architectures.
-