Security Leftovers
-
CERT-In identifies multiple vulnerabilities in Microsoft products and Red Hat Linux Kernel
CERT-In on Wednesday issued alerts for multiple vulnerabilities in Microsoft products including Microsoft Exchange, Microsoft Windows Support Diagnostic Tool, and Red Hat Linux Kernel. The vulnerabilities are said to be used by remote attackers to access sensitive information and execute arbitrary code on Microsoft products while in Red Hat Linux Kernel they can be exploited to gain elevated privileges and access sensitive information
-
Iron Tiger Compromises Chat Application Mimi, Targets Windows, Mac, and Linux Users [Ed: The issue is MiMi, not the OS]
We noticed a server hosting both a HyperBro sample and a malicious Mach-O executable named “rshell.” HyperBro is a malware family used by Iron Tiger (also known as Emissary Panda, APT27, Bronze Union, and Luckymouse), an advanced persistent threat (APT) group that has been performing cyberespionage for almost a decade, and there have been no reports of this group associated with a tool for Mac operating systems (OS). We analyzed the Mach-O sample and found it to be a new malware family targeting the Mac OS platform. We also eventually found samples compiled for the Linux platform that belongs to the same malware family.
-
This Week in Malware - Fileless Linux Cryptominer, 100 Packages [Ed: The issue is not "Linux" but malware that one can unwittingly install in Linux]