Tux Machines

Security Leftovers

Posted by Roy Schestowitz on May 16, 2024

today's leftovers

today's howotos

LWN ☛ Security updates for Wednesday

↺ Security updates for Wednesday

> Security updates have been issued by Mageia (sssd and tcpdump), Red Hat (.NET 7.0, .NET 8.0, expat, kernel, and kernel-rt), Slackware (mozilla), SUSE (kernel, postgresql15, postgresql16, python-arcomplete, python-Fabric, python-PyGithub, python- antlr4-python3-runtime, python-avro, python-chardet, python-distro, python- docker, python-fakeredis, python-fixedint, pyth, and python3), and Ubuntu (linux-bluefield).

Security Week ☛ Threat Actors Abuse Microsoft's proprietary prison GitHub to Distribute Multiple Information Stealers

↺ Threat Actors Abuse Microsoft's proprietary prison GitHub to Distribute Multiple Information Stealers

> Russian-speaking threat actors are caught abusing a Microsoft's proprietary prison GitHub profile to distribute information stealers posing as legitimate software.

Silicon Angle ☛ Cofense warns that sophisticated phishing campaign is targeting Meta business accounts

↺ Cofense warns that sophisticated phishing campaign is targeting Meta business accounts

> A new report released today by phishing detection and response solutions company Cofense Inc. warns that Meta Platforms Inc. business accounts are being targeted by a sophisticated phishing campaign. The report details a phishing operation that has the ability to bypass multifactor authentication protections, which are meant to prevent accounts from unauthorized access.

TechTarget ☛ Google discloses 2 zero-day vulnerabilities in less than a week

↺ Google discloses 2 zero-day vulnerabilities in less than a week

> Google released fixed versions to address the two vulnerabilities in its Chrome web browser, but the updates will roll out in stages with no specific dates available.

TechTarget ☛ What is a cloud security engineer, and how do I become one?

↺ What is a cloud security engineer, and how do I become one?

> A cloud security engineer has specific responsibilities for helping to secure cloud infrastructure, applications and IT assets.

gemini.tuxmachines.org