Security Leftovers
-
diffoscope 220 released
The diffoscope maintainers are pleased to announce the release of diffoscope version 220. This version includes the following changes:
* Support Haskell 9.x series files and update the test files to match. Thanks to Scott Talbert for the relevant info about the new format. (Closes: reproducible-builds/diffoscope#309) * Fix a regression introduced in diffoscope version 207 where diffoscope would crash if one directory contained a directory that wasn't in the other. Thanks to Alderico Gallo for the report and the testcase. (Closes: reproducible-builds/diffoscope#310)
-
Microsoft Connects USB Worm Attacks to 'EvilCorp' Ransomware Gang | SecurityWeek.Com [Ed: Microsoft blames others for its vulnerable software, as usual]
Cybersleuths at Microsoft have found a link between the recent 'Raspberry Robin' USB-based worm attacks and EvilCorp, a notorious Russian ransomware operation sanctioned by the U.S. government.
-
911 Proxy Service Implodes After Disclosing Breach
911[.]re, a proxy service that since 2015 has sold access to hundreds of thousands of Microsoft Windows computers daily, announced this week that it is shutting down in the wake of a data breach that destroyed key components of its business operations. The abrupt closure comes ten days after KrebsOnSecurity published an in-depth look at 911 and its connections to shady pay-per-install affiliate programs that secretly bundled 911’s proxy software with other titles, including “free” utilities and pirated software.