Security Leftovers

-
Security updates for Friday [LWN.net]
Security updates have been issued by Fedora (composer, golang-x-crypto, rubygem-nokogiri, wavpack, xen, and xz) and SUSE (dnsmasq, openjpeg, swtpm, tomcat, and xen).
-
Java Cryptography Implementation Mistake Allows Digital-Signature Forgeries
The vulnerability, which Oracle patched on Tuesday, affects the company’s implementation of the Elliptic Curve Digital Signature Algorithm in Java versions 15 and above. ECDSA is an algorithm that uses the principles of elliptic curve cryptography to authenticate messages digitally.
-
Critical cryptographic Java security blunder patched – update now!
Unlike other software behemoths such as Microsoft, Adobe and Google, who produce official security updates once a month, thus following a schedule that is both regular and frequent, Oracle has historically and resolutely stuck to just four scheduled updates a year.
-
Error in ALPHV/BlackCat ransomware code may offer some Linux users a shield [Ed: Well, ransomware is almost entirely a Windows issue; this serve to distract from it]
Researchers at Forescout discovered a mechanism to stop current versions of ALPHV ransomware from deploying on most Linux systems.
-
FBI Releases IOCs Associated with BlackCat/ALPHV Ransomware | CISA
The Federal Bureau of Investigation (FBI) has released a Flash report detailing indicators of compromise (IOCs) associated with attacks involving BlackCat/ALPHV, a Ransomware-as-a-Service that has compromised at least 60 entities worldwide.
-

- Login or register to post comments
Printer-friendly version- 1299 reads
PDF version
More in Tux Machines
- Highlights
- Front Page
- Latest Headlines
- Archive
- Recent comments
- All-Time Popular Stories
- Hot Topics
- New Members
digiKam 7.7.0 is released
After three months of active maintenance and another bug triage, the digiKam team is proud to present version 7.7.0 of its open source digital photo manager. See below the list of most important features coming with this release.
|
Dilution and Misuse of the "Linux" Brand
|
Samsung, Red Hat to Work on Linux Drivers for Future Tech
The metaverse is expected to uproot system design as we know it, and Samsung is one of many hardware vendors re-imagining data center infrastructure in preparation for a parallel 3D world.
Samsung is working on new memory technologies that provide faster bandwidth inside hardware for data to travel between CPUs, storage and other computing resources. The company also announced it was partnering with Red Hat to ensure these technologies have Linux compatibility.
|
today's howtos
|








.svg_.png)
Content (where original) is available under CC-BY-SA, copyrighted by original author/s.

Focus shifters
Cryptomining botnet targeting Docker on Linux systems [Ed: Microsoft CrowdStrike (Microsoft connected!) writes about a group which targets Microsoft Windows but makes it about "Linux" instead (for FUD's worth)]
Marketing disguised as "research" or "benchmark"
Benchmarking Linux Security – Latest Research Findings