Menu

Category Archives: Security

Articles about security

Several security issues were fixed in the Linux kernel.

GitHub survey finds nearly all developers using AI coding tools
The AI Fix #12: AI made from human brain cells, and is there life after death?
110K domains targeted in ‘sophisticated’ AWS cloud extortion campaign
Russia tells citizens to switch off home surveillance because the Ukrainians are coming

* bsc#1177179 Cross-References: * CVE-2020-26159

* bsc#1228574 * bsc#1228575 Cross-References: * CVE-2024-31145

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Martin Kaesberger discovered a vulnerability which affects multiple OpenStack components (Nova, Glance and Cinder): Malformed QCOW2 disk images may result in the disclosure of arbitrary files.

Microsoft’s new Phi 3.5 LLM models surpass Meta and Google
State of JavaScript: Insights from the latest JavaScript developer survey
3 languages changing data science
API security starts with API discovery
Deadbeat dad faked his own death by hacking government databases
Meta working on a Self-Taught Evaluator for LLMs
Chipmaker Microchip reveals cyber attack whacked manufacturing capacity

https://security-tracker.debian.org/tracker/DSA-5752-1

https://security-tracker.debian.org/tracker/DSA-5753-1

https://security-tracker.debian.org/tracker/DSA-5754-1

https://security-tracker.debian.org/tracker/DSA-5755-1

https://security-tracker.debian.org/tracker/DSA-5756-1

Use the AI S-curve to drive meaningful technological change
Plane tracker FlightAware admits user passwords, SSNs exposed for years

Several security issues were fixed in Cacti.

* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222986 * bsc#1222987

* bsc#1228046 * bsc#1228047 * bsc#1228048 * bsc#1228050 * bsc#1228051

* bsc#1228046 * bsc#1228047 * bsc#1228048 * bsc#1228050 * bsc#1228051

* bsc#1212968 * bsc#1215311 * bsc#1227322 Cross-References:

* bsc#1228143 Cross-References: * CVE-2024-1013

Achieving cloudops excellence
Java polymorphism and its types
Download the high-performance AI enterprise buyer’s guide
Iran named as source of Trump campaign phish, leaks
Digital wallets can allow purchases with stolen credit cards
Microsoft .NET 9 previews C#, runtime, SDK improvements
OpenAI kills Iranian accounts using ChatGPT to write US election disinfo

Introducing key EDR functionality In today’s rapidly evolving cyber landscape, staying ahead of threats requires not just robust defenses, but also smart, efficient tools that empower defenders without overburdening them. Webroot by OpenText recognizes the vital role that endpoint detection and response (EDR) capabilities play in a comprehensive cybersecurity strategy. As we continue our EDR […]

Multiple flaws in Microsoft macOS apps unpatched despite potential risks
National Public Data tells officials ‘only’ 1.3M people affected by intrusion

* bsc#1011205 * bsc#1093641 * bsc#1125882 * bsc#1167400 * bsc#1207973

* bsc#1223155 Cross-References: * CVE-2024-31744

* bsc#1192145 * bsc#1209657 * bsc#1218336 * bsc#1218447 * bsc#1218479

* bsc#1222835 * bsc#1222837 * jsc#SLE-23879 Cross-References:

* bsc#1184942 * bsc#1186060 * bsc#1192145 * bsc#1194516 * bsc#1208995

* bsc#1160688 * bsc#1223100 * jsc#PED-7677 * jsc#SLE-9298

How to bring runaway cloud costs under control
Cutting Kubernetes costs with virtual clusters
Security takes a front seat
RansomHub-linked EDR-killing malware spotted in the wild

https://security-tracker.debian.org/tracker/DSA-5751-1

https://security-tracker.debian.org/tracker/DSA-5750-1

* bsc#1082555 * bsc#1193454 * bsc#1193554 * bsc#1193787 * bsc#1194324

* bsc#1065729 * bsc#1179610 * bsc#1186463 * bsc#1216834 * bsc#1218820

* bsc#1228613 * bsc#1228693 * bsc#1228694 * bsc#1228695

* bsc#1228105 Cross-References: * CVE-2024-6345

How a BEC scam cost a company $60 Million – Week in security with Tony Anscombe

Business email compromise (BEC) has once again proven to be a costly issue, with a company losing $60 million in a wire transfer fraud scheme

After nearly 3B personal records leak online, Florida data broker confirms it was ransacked by cyber-thieves
Unicoin hints at potential data meddling after G-Suite compromise
String comparisons in Java
Navigating the future of cybersecurity

* bsc#1229129 Cross-References: * CVE-2023-42667 * CVE-2023-49141

* bsc#1229069 Cross-References: * CVE-2023-31315

* bsc#1229069 Cross-References: * CVE-2023-31315

* bsc#1214327 * bsc#1218413 * bsc#1222120 * bsc#1227426 * bsc#1227513

* bsc#1065729 * bsc#1088701 * bsc#1149446 * bsc#1179610 * bsc#1186463

Revolutionizing cloud security with AI
Everything’s coming up Python!

* bsc#1082555 * bsc#1156395 * bsc#1190336 * bsc#1191958 * bsc#1193454

Rust team announces 2024 development goals
GitHub rolls out AI-powered fixes for code vulnerabilities
Anthropic adds prompt caching to Claude, cutting costs for developers

https://security-tracker.debian.org/tracker/DSA-5749-1

DARPA, ARPA-H award $14m to 7 AIxCC semifinalists, with a catch
Google raps Iran’s APT42 for raining down spear-phishing attacks

* bsc#1156395 * bsc#1190336 * bsc#1191958 * bsc#1193454 * bsc#1193554

* bsc#1228535 Cross-References: * CVE-2024-7264

* bsc#1226463 * bsc#1227138 Cross-References: * CVE-2024-5535

* bsc#1225907 * bsc#1226463 * bsc#1227138 Cross-References:

Russian man who sold logins to nearly 3,000 accounts gets 40 months in jail
Mad Liberator extortion crew emerges on the cyber-crook scene

* bsc#1227178 Cross-References: * CVE-2024-39134

* bsc#1227178 Cross-References: * CVE-2024-39134

Over 40 million Kakao Pay users’ data somehow ended up with Alipay
China-linked cyber-spies infect Russian govt, IT sector

https://security-tracker.debian.org/tracker/DSA-5743-2

Russian cyber snoops linked to massive credential-stealing campaign
Texas sues GM for selling driver data to analytics, insurance companies
Enzo Biochem ordered to cough up $4.5 million over lousy security that led to ransomware disaster
Ransomware kingpin who called himself “J P Morgan” extradited to United States
Palo Alto Networks execs apologize for ‘hostesses’ dressed as lamps at Black Hat booth

* bsc#1228105 Cross-References: * CVE-2024-6345

* bsc#1228105 Cross-References: * CVE-2024-6345

* bsc#1065729 * bsc#1088701 * bsc#1149446 * bsc#1179610 * bsc#1186463

* bsc#1156395 * bsc#1190336 * bsc#1191958 * bsc#1193454 * bsc#1193554

* bsc#1228105 Cross-References: * CVE-2024-6345

* bsc#1228613 * bsc#1228693 * bsc#1228694 * bsc#1228695

Improved vulnerability reporting on Quay.io
Is Lenovo a blind spot in US anti-China security measures?