The malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating remote code execution, a new analysis has revealed.
The audacious supply chain compromise, tracked as CVE-2024-3094 (CVSS score: 10.0), came to light last week when Microsoft engineer and PostgreSQL developer Andres Freund
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-04-02 14:08:152024-04-02 14:08:15Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution
A classic type of fraud — when a crook impersonates a business or a government agency — appears to be bigger than ever, according to federal statistics, and it’s now most likely to begin via text message or email instead of a phone call.
The National Institute of Standards and Technology (NIST) blamed increases in the volume of software and “a change in interagency support” for the recent backlog of vulnerabilities analyzed in the organization’s National Vulnerability Database (NVD).
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-04-02 13:08:012024-04-02 13:08:01Vulnerability Database Backlog Due to Increased Volume, Changes in ‘Support,’ NIST Says
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-04-02 13:08:002024-04-02 13:08:00Hundreds of Indians Rescued from Cambodian Cybercrime Gangs
Evasive, basic, and encrypted malware all increased in Q4 2023, fueling a rise in total malware, according to WatchGuard. The average number of malware detections rose 80% from the previous quarter.
In late February 2024, the Foundation received a few support requests and became aware of a misconfiguration of OWASP’s old Wiki web server. The misconfiguration led to a data breach involving old member resumes.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-04-02 13:08:002024-04-02 13:08:00OWASP Discloses a Data Breach Due to Wiki Misconfiguration
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-04-02 13:07:592024-04-02 13:07:59Swalwell for Congress Campaign Partners with Wolfsbane.ai to Protect Against AI Generated Cloning
BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution
/in General NewsThe malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating remote code execution, a new analysis has revealed.
The audacious supply chain compromise, tracked as CVE-2024-3094 (CVSS score: 10.0), came to light last week when Microsoft engineer and PostgreSQL developer Andres Freund
The Hacker News – Read More
Losses Linked to Impersonation Scams Top $1 Billion Yearly, FTC Says
/in General NewsA classic type of fraud — when a crook impersonates a business or a government agency — appears to be bigger than ever, according to federal statistics, and it’s now most likely to begin via text message or email instead of a phone call.
Cyware News – Latest Cyber News – Read More
Instilling the Hacker Mindset Organizationwide
/in General NewsIt’s critical for security teams to stay vigilant not only when it comes to major security issues, but also with minor lags in security best practice.
darkreading – Read More
Hotel Self Check-In Kiosks Exposed Room Access Codes
/in General NewsSelf check-in kiosks at Ibis Budget hotels were affected by a vulnerability that exposed keypad codes that could be used to enter rooms.
The post Hotel Self Check-In Kiosks Exposed Room Access Codes appeared first on SecurityWeek.
SecurityWeek – Read More
Vulnerability Database Backlog Due to Increased Volume, Changes in ‘Support,’ NIST Says
/in General NewsThe National Institute of Standards and Technology (NIST) blamed increases in the volume of software and “a change in interagency support” for the recent backlog of vulnerabilities analyzed in the organization’s National Vulnerability Database (NVD).
Cyware News – Latest Cyber News – Read More
Hundreds of Indians Rescued from Cambodian Cybercrime Gangs
/in General NewsBy Waqas
Indian authorities rescue hundreds trafficked for cybercrime in Cambodia. Victims lured by false jobs, forced to work in…
This is a post from HackRead.com Read the original post: Hundreds of Indians Rescued from Cambodian Cybercrime Gangs
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Escalating Malware Tactics Drive Global Cybercrime Epidemic
/in General NewsEvasive, basic, and encrypted malware all increased in Q4 2023, fueling a rise in total malware, according to WatchGuard. The average number of malware detections rose 80% from the previous quarter.
Cyware News – Latest Cyber News – Read More
Top 6 Passwordless Authentication Solutions for 2024
/in General NewsDiscover the top passwordless authentication solutions that can enhance security and user experience. Find the best solution for your business needs.
Security | TechRepublic – Read More
OWASP Discloses a Data Breach Due to Wiki Misconfiguration
/in General NewsIn late February 2024, the Foundation received a few support requests and became aware of a misconfiguration of OWASP’s old Wiki web server. The misconfiguration led to a data breach involving old member resumes.
Cyware News – Latest Cyber News – Read More
Swalwell for Congress Campaign Partners with Wolfsbane.ai to Protect Against AI Generated Cloning
/in General NewsBy Cyber Newswire
Los Angeles, United States, April 2nd, 2024, Cyberwire Today, Congressman Eric Swalwell, CA-14, announced that he has partnered…
This is a post from HackRead.com Read the original post: Swalwell for Congress Campaign Partners with Wolfsbane.ai to Protect Against AI Generated Cloning
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More