Security News

Malicious SSH backdoor sneaks into xz, Linux world's data compression library
2024-03-29 21:58

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Easy-to-use make-me-root exploit lands for recent Linux kernels. Get patching
2024-03-29 21:43

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Friday Squid Blogging: The Geopolitics of Eating Squid
2024-03-29 21:02

China's domination in seafood has raised deep concerns among American fishermen, policymakers and human rights activists. They warn that China is expanding its maritime reach in ways that are putting domestic fishermen around the world at a competitive disadvantage, eroding international law governing sea borders and undermining food security, especially in poorer countries that rely heavily on fish for protein.

Activision: Enable 2FA to secure accounts recently stolen by malware
2024-03-29 20:25

An infostealer malware campaign has collected millions of logins from users of various gaming websites, including players that use cheats, pay-to-cheat services. "The DB for the stealer represents gaming related accounts much more than anything else," Zebleer said, adding that "It's the largest infostealer malware campaign targeting gamers/cheaters in history."

Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094)
2024-03-29 18:21

A vulnerability in XZ Utils, the XZ format compression utilities included in most Linux distributions, may "Enable a malicious actor to break sshd authentication and gain unauthorized access to the entire system remotely," Red Hat warns. The cause of the vulnerability is actually malicious code present in versions 5.6.0 and 5.6.1 of the xz libraries, which was accidentally found by Andres Freund, a PostgreSQL developer and software engineer at Microsoft.

Red Hat warns of backdoor in XZ tools used by most Linux distros
2024-03-29 17:50

Today, Red Hat warned users to immediately stop using systems running Fedora development versions because of a backdoor found in the latest XZ Utils data compression tools and libraries. "No versions of Red Hat Enterprise Linux are affected. We have reports and evidence of the injections successfully building in xz 5.6.x versions built for Debian unstable."

Dormakaba Locks Used in Millions of Hotel Rooms Could Be Cracked in Seconds
2024-03-29 14:54

Security vulnerabilities discovered in Dormakaba's Saflok electronic RFID locks used in hotels could be weaponized by threat actors to forge keycards and stealthily slip into locked rooms. The...

TheMoon Botnet Resurfaces, Exploiting EoL Devices to Power Criminal Proxy
2024-03-29 12:12

A botnet previously considered to be rendered inert has been observed enslaving end-of-life (EoL) small home/small office (SOHO) routers and IoT devices to fuel a criminal proxy service called...

The Golden Age of Automated Penetration Testing is Here
2024-03-29 11:19

Network penetration testing plays a vital role in detecting vulnerabilities that can be exploited. The current method of performing pen testing is pricey, leading many companies to undertake it...

Lessons from a Ransomware Attack against the British Library
2024-03-29 11:03

You might think that libraries are kind of boring, but this self-analysis of a 2023 ransomware and extortion attack against the British Library is anything but. Carl Engelbrecht March 29, 2024 7:53 AM. Why do technologists who know better continue to propagate the erroneous statement "Ransomware attacks".