Security Leftovers
-
LWN ☛ Security updates for Friday
Security updates have been issued by Debian (chromium), Fedora (firefox and man2html), Mageia (erlang, ffmpeg, and vim), Oracle (doxygen, firefox, python-jinja2, squid, and webkit2gtk3), Red Hat (nodejs:18), SUSE (emacs, go1.23, go1.24, and pcp), and Ubuntu (ansible, firefox, linux-azure, linux-nvidia, and python-django).
-
Scoop News Group ☛ CISA completed its election security review. It won’t make the results public
Critics said the decision creates broad uncertainty among other stakeholders who work to protect elections.
-
Security Week ☛ Medusa Ransomware Attacks Increase [Ed: Windows TCO?]
The number of Medusa ransomware attacks observed in the first two months of 2025 doubled compared to the same period last year.
-
Security Week ☛ Many Schools Report Data Breach After Retirement Services Firm Hit by Ransomware [Ed: Windows TCO?]
Dozens of schools and thousands of individuals are impacted by a data breach resulting from a ransomware attack on Carruth Compliance Consulting.
-
Security Week ☛ FBI: Fake Ransomware Attack Claims Sent to US Executives via Snail Mail [Ed: Windows TCO leads to presumptions as such?]
An extortion group has been sending physical mail to corporate executives, threatening to leak their data unless a ransom is paid.
-
Security Week ☛ 18,000 Organizations Impacted by NTT Com Data Breach
NTT Communications Corporation has disclosed a data breach impacting the information of nearly 18,000 customer organizations.
-
Security Week ☛ Cyberattack Disrupts National Presto Industries Operations
National Presto Industries says a cyberattack has resulted in a system outage and operational disruptions.
-
Security Week ☛ Edimax Camera Zero-Day Disclosed by CISA Exploited by Botnets
Multiple Mirai-based botnets are exploiting CVE-2025-1316, an Edimax IP camera vulnerability that allows remote command execution.
-
Security Week ☛ In Other News: EntrySign AMD Flaw, Massive Attack Targets ISPs, ENISA Report
Noteworthy stories that might have slipped under the radar: Surveillance Giant Google discloses AMD CPU flaw named EntrySign, ISPs in the US and China targeted in massive attack, ENISA report on NIS2 Directive.