Red Hat in all caps says STOP USAGE OF ANY FEDORA RAWHIDE INSTANCES Red Hat on Friday warned that a malicious backdoor found in the widely used data compression library called xz may be present in Fedora Linux 40, 41,…
Category: The Register – Security
Easy-to-use make-me-root exploit lands for recent Linux kernels. Get patching
CVE-2024-1086 turns the page tables on system admins A Linux privilege-escalation proof-of-concept exploit has been published that, according to the bug hunter who developed it, typically works effortlessly on kernel versions between at least 5.14 and 6.6.14. … This article has…
JetBrains keeps mum on 26 ‘security problems’ fixed after Rapid7 spat
Vendor takes hardline approach to patch disclosure to new levels JetBrains TeamCity users are urged to apply the latest version upgrade this week after the vendor disclosed 26 new security issues in the CI/CD web application.… This article has been…
Nvidia’s newborn ChatRTX bot patched for security bugs
Flaws enable privilege escalation and remote code execution Nvidia’s AI-powered ChatRTX app launched just six week ago but already has received patches for two security vulnerabilities that enabled attack vectors, including privilege escalation and remote code execution.… This article has…
US critical infrastructure cyberattack reporting rules inch closer to reality
After all, it’s only about keeping the essentials on – no rush America’s long-awaited cyber attack reporting rules for critical infrastructure operators are inching closer to implementation, after the Feds posted a notice of proposed rulemaking for the Cyber Incident…
Canonical cracks down on crypto cons following Snap Store scam spree
In happier news, Ubuntu Pro extended support now goes up to 12 years After multiple waves of cryptocurrency credential-stealing apps were uploaded to the Snap store, Canonical is changing its policies.… This article has been indexed from The Register –…
INC Ransom claims responsibility for attack on NHS Scotland
Sensitive documents dumped on leak site amid claims of 3 TB of data stolen in total NHS Scotland says it managed to contain a ransomware group’s malware to a regional branch, preventing the spread of infection across the entire institution.……
These 17,000 unpatched Microsoft Exchange servers are a ticking time bomb
One might say this is a wurst case scenario The German Federal Office for Information Security (BIS) has issued an urgent alert about the poor state of Microsoft Exchange Server patching in the country.… This article has been indexed from…
AI hallucinates software packages and devs download them – even if potentially poisoned with malware
Simply look out for libraries imagined by ML and make them real, with actual malicious code. No wait, don’t do that In-depth Several big businesses have published source code that incorporates a software package previously hallucinated by generative AI.… This…
Execs in Japan busted for winning dev bids then outsourcing to North Koreans
Government issues stern warning over despot money-making scheme Two executives were issued arrest warrants in Japan on Wednesday, reportedly for charges related to establishing a business that outsourced work to North Korean IT engineers.… This article has been indexed from…
China encouraged armed offensive against Myanmar government to protest proliferation of online scams
Report claims Beijing is most displaced by junta’s failure to address slave labor scam settlements The military junta controlling Myanmar has struggled to control all of its territory thanks in part to China backing rebel forces as a way of…
Apple fans deluged with phony password reset requests
Beware support calls offering a fix Apple device owners, consider yourselves warned: a targeted multi-factor authentication bombing campaign is under way, with the goal of exhausting iUsers into allowing an unwanted password reset.… This article has been indexed from The…
Apple fans flooded with phony password reset requests
Beware support calls offering a fix Apple device owners, consider yourselves warned: A targeted multi-factor authentication bombing campaign is going around with the goal of exhausting iUsers into accidentally allowing a password reset.… This article has been indexed from The…
Majority of Americans now use ad blockers
We’re dreaming of a white list, because we’re just like the ones you used to know More than half of Americans are using ad blocking software, and among advertising, programming, and security professionals that fraction is more like two-thirds to…
‘Thousands’ of businesses at mercy of miscreants thanks to unpatched Ray AI flaw
Anyscale claims issue is ‘long-standing design decision’ – as users are raided by intruders Thousands of companies remain vulnerable to a remote-code-execution bug in Ray, an open-source AI framework used by Amazon, OpenAI, and others, that is being abused by…
Meta accused of snarfing people’s Snapchat data via traffic decryption
I ain’t afraid of no ghosts, but in this case… To spy on rival Snapchat and get data on how the app was being used, Meta – when it was operating as Facebook – allegedly initiated a program called Project…
Google reveals zero-day exploits in enterprise tech surged 64% last year
Crooks know where the big bucks are Zero-day exploits targeting enterprise-specific software and appliances are now outpacing zero-day bugs overall, according to Google’s threat hunting teams.… This article has been indexed from The Register – Security Read the original article:…
Street newspaper appears to have Big Issue with Qilin ransomware gang
The days of cybercriminals having something of a moral compass are over The parent company of The Big Issue, a street newspaper and social enterprise for homeless people, is wrestling with a cybersecurity incident claimed by the Qilin ransomware gang.……
The easy road to pervasive DLP
How Forcepoint Data Security Everywhere does what it says on the tin Sponsored Post The coronavirus pandemic appears to have changed the employment landscape forever, with estimates suggesting that up to a quarter of staff still spend some of their…
Uncle Sam’s had it up to here with ‘unforgivable’ SQL injection flaws
Software slackers urged to up their game The US has clearly had enough of software vendors shipping products with “unforgivable” vulnerabilities, and is now urging them to launch formal code reviews to stamp out SQL injection flaws.… This article has…