"Nasty regreSSHion bug in openSSH puts around 700K Linux boxes at risk."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 01 July 2024, 1448 UTC.

Content and Source:  https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.theregister.co.uk%2Fsecurity%2Fheadlines.atom/The Register-Security.

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

The Register – Security

87K followers31 articles per week#security#tech

7

TODAY

Nasty regreSSHion bug in OpenSSH puts around 700K Linux boxes at risk

2 TTPs

•

by Connor Jones / 41min

Full system takeovers on the cards, for those with enough patience to pull it off Glibc-based Linux systems are vulnerable to a new bug (CVE-2024-6387) in OpenSSH's server (sshd) and should upgrade to the latest version.…

Juniper Networks flings out emergency patches for perfect 10 router vuln

CVE-2024-2973

•

by Connor Jones / 3h

Get 'em while they're hot A critical vulnerability affecting Juniper Networks routers forced the vendor to issue emergency patches last week, and users are advised to apply them as soon as possible.…

Poyfill.io claims reveal new cracks in supply chain, but how deep do they go?

Polyfill.io supply chain attack impacts 100K+

•

by Rupert Goodwins / 4h

There will always be bad actors in the system. We can always learn from the drama they create Opinion Libraries. Hushed temples to the civilizing power of knowledge, or launchpads of global destruction? Yep, another word tech has borrowed and debased. Code libraries are essential for adding just the right standard tested functionality to a project. They're also a natural home for supply chain att

YESTERDAY

CISA director: US is 'not afraid' to shout about Big Tech's security failings

by Connor Jones / 5h

Jen Easterly hopes CSRB's Microsoft report won't impede future private sector collaboration CISA director Jen Easterly says the Cybersecurity Safety Review Board (CSRB) "is not afraid to say when something is amiss" in response to questions about fears around private sector collaboration following the board's scathing Microsoft report.…

Police allege ‘evil twin’ of in-flight Wi-Fi used to steal passenger’s credentials

Wi-Fi scam targets airport users

•

by Simon Sharwood / 8h

Fasten your seat belts, secure your tray table, and try not to give away your passwords Australia’s Federal Police (AFP) has charged a man with running a fake Wi-Fi networks on at least one commercial flight and using it to harvest fliers’ credentials for email and social media services.…

Indonesian government didn't have backups of ransomwared data, because DR was only an option

Indonesia government agencies disrupted ransomware

•

by Laura Dobberstein / 9h

President has ordered a datacenter audit and made backups mandatory Indonesia’s president Joko Widodo has ordered an audit of government datacenters after it was revealed that most of the data they store is not backed up.…

Microsoft tells yet more customers their emails have been stolen

9 TTPs

•

21by Brandon Vigliarolo / 11h

Plus: US auto dealers still offline; Conti coders sanction; Rabbit R1 hardcoded API keys; and more security in brief It took a while, but Microsoft has told customers that the Russian criminals who compromised its systems earlier this year made off with even more emails than it first admitted. …

END OF FEED