news
Security Leftovers
-
LWN ☛ Security updates for Wednesday
Security updates have been issued by AlmaLinux (container-tools:rhel8, kernel, and podman), Debian (node-sha.js), Fedora (firefox, kea, and perl-JSON-XS), Mageia (java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk, java-latest-openjdk), Oracle (kernel, libarchive, podman, and python-cryptography), Red Hat (multiple packages, mysql:8.4, and python3.11), SUSE (expat, java-1_8_0-ibm, krb5, libavif, net-tools, nginx, nvidia-open-driver-G06-signed, onefetch, pcp, rabbitmq-server313, raptor, and vim), and Ubuntu (libyang2, linux, linux-aws, linux-aws-5.4, linux-bluefield, linux-gcp,
linux-gcp-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot,
linux-kvm, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp, linux-aws-fips, linux-fips, linux-gcp-fips, and python-xmltodict).
-
Security Week ☛ BreachForums Owner Sent to Prison in Resentencing
Conor Fitzpatrick, who pleaded guilty in July 2023, was sentenced last year to time served and supervised release.
-
Federal News Network ☛ The front door is the new frontline of physical security
"The nature of threats has changed. And we must also change how we look at the landscape," said Jason Mordeno.
-
Federal News Network ☛ House CR includes short-term CISA 2015 extension
The House CR tacks on a short-term extension of the CISA 2015 law, potentially giving lawmakers more time to work out updates to the decade-old law.
-
Security Week ☛ Details Emerge on Chinese Hacking Operation Impersonating US Lawmaker
The campaign targeted US government, think tank, and academic entities involved in US-China relations, international trade, and economic policy.
-
Tom's Hardware ☛ Modern memory is still vulnerable to Rowhammer vulnerabilities — Phoenix root privilege escalation attack proves that Rowhammer still smashes DDR5 security to bits
A new attack on DDR5 further demonstrates that current countermeasures against Rowhammer-style assaults aren't enough.