Security Leftovers

-
19-Year-Old Ethical Hacker Has Earned Millions From Bug Bounty
Lopez joined HackerOne, a popular bug bounty crowdfunding platforms, in 2015 and since then he has uncovered more than 1,670 bugs and vulnerabilities. He learned spot high-paying vulnerabilities like Insecure Direct Object Reference (IDOR) and Cross-Site Request Forgery (CSRF) by watching Youtube videos and other sources from Internet.
-
GeForce Driver Updates Contain Security Fixes
Normally, when we discuss graphics drivers, there are a subset of users that like to stay on old versions.
-
Friendly reminder to Drupal admins: Secure your sh!t before latest RCE-holes get you
Just days after a remote code execution flaw in open-source web publishing software Drupal was made public, researchers have already spotted live exploits in the wild – reinforcing the need for admins to patch and update their sites immediately.
As The Register reported last week: "A successful exploit of the vulnerability would allow a hacker to remotely run malicious code on the targeted website's server, effectively commandeering the site."
Drupal's maintainers told us at the time they went public that "some field types do not properly sanitize data from non-form sources", which could "lead to arbitrary PHP code execution in some cases".
-
Intel Ups Data Center, Firmware Security With New SGX Card and Open Source Software
-
Kenna Security and Sonatype Partner to Enhance Risk-Based Vulnerability Management with Open Source Intelligence
-
Sonatype's Nexus Firewall Now Protects JFrog Artifactory
-
Kenna Security and Sonatype Partner for Open Source Vulnerability Intelligence
Kenna Security and Sonatype have announced a partnership to provide risk assessment and vulnerability intelligence for open source projects. According to Sonatype research, between 80% and 90% of enterprise applications are made of open source components, and an average enterprise uses more than 150,000 open source libraries. Understanding the vulnerabilities found in those components is critical for overall enterprise security, the companies said in announcing the partnership.
-
OSSPatcher: Automated mobile application patching for bugs in open source libraries
Most software developers use well-adapted third-party open source libraries/software to accelerate the application development process. Security bugs in these libraries are popping up regularly and are getting fixed quickly, but many mobile application developers fail to keep track of disclosed bugs and to implement the fixes without delay.
OSSPatcher is aimed at making their lives easier and making their applications more secure for users.
-
StrongKey Announces FIDO Server as Free Open-Source Software
-
StrongKey Releases Free, Open-Source FIDO2 Server
StrongKey has made it even easier for web developers to meet the FIDO2 certification standard. The digital security company has announced that it will be making its FIDO server available as a free, open-source platform in an effort to accelerate the transition to a password-free society.
“Removing passwords has become a critical necessity in today’s cyberthreat environment,” said StrongKey CTO Arshad Noor, explaining that passwords are the most common source of data breaches. “We’ve decided to contribute our FIDO server to the open-source community for the betterment of everyone. We invite developers to participate so organizations can leave passwords behind.”
-
Devs take on open source security as vulnerability count shoots up [Ed: Snyk FUD again. There's a Microsoft connection, too.]
Developers are open to taking increasing responsibility for open source security, according to a report from Snyk. Unfortunately, the report also shows developers are also open about their own security shortcomings.
-

- Login or register to post comments
Printer-friendly version- 2002 reads
PDF version
More in Tux Machines
- Highlights
- Front Page
- Latest Headlines
- Archive
- Recent comments
- All-Time Popular Stories
- Hot Topics
- New Members
digiKam 7.7.0 is released
After three months of active maintenance and another bug triage, the digiKam team is proud to present version 7.7.0 of its open source digital photo manager. See below the list of most important features coming with this release.
|
Dilution and Misuse of the "Linux" Brand
|
Samsung, Red Hat to Work on Linux Drivers for Future Tech
The metaverse is expected to uproot system design as we know it, and Samsung is one of many hardware vendors re-imagining data center infrastructure in preparation for a parallel 3D world.
Samsung is working on new memory technologies that provide faster bandwidth inside hardware for data to travel between CPUs, storage and other computing resources. The company also announced it was partnering with Red Hat to ensure these technologies have Linux compatibility.
|
today's howtos
|








.svg_.png)
Content (where original) is available under CC-BY-SA, copyrighted by original author/s.

Recent comments
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago