Tux Machines

Security Leftovers

Posted by Roy Schestowitz on Sep 17, 2022

Weekly Review of openSUSE Tumbleweed Progress and SUSE Linux Enterprise Micro 5.3 Public RC (RC 2)

This Week in GNOME #61 Overview Tabs

↺ Bruce Schneier

Security updates for Friday [LWN.net]

↺ Security updates for Friday [LWN.net]

> Security updates have been issued by Debian (bzip2, chromium, glib2.0, libraw, mariadb-10.3, and mod-wsgi), Fedora (kdiskmark, wordpress, and zlib), Oracle (.NET 6.0, .NET Core 3.1, mariadb:10.3, nodejs:14, nodejs:16, ruby:2.7, and ruby:3.0), Red Hat (.NET 6.0, php:7.4, and webkit2gtk3), SUSE (389-ds, flatpak, kernel, libgit2, and thunderbird), and Ubuntu (sqlite3, vim, and wayland).

Massive Data Breach at Uber

↺ Massive Data Breach at Uber

> It looks like a pretty basic phishing attack; someone gave the hacker their login credentials. And because Uber has lousy internal security, lots of people have access to everything. So once a hacker gains a foothold, they have access to everything.

Uber hacked, internal systems breached and vulnerability reports stolen

↺ Uber hacked, internal systems breached and vulnerability reports stolen

> Uber suffered a cyberattack Thursday afternoon with an allegedly 18-year-old hacker downloading HackerOne vulnerability reports and sharing screenshots of the company's internal systems, email dashboard, and Slack server.

> The screenshots shared by the hacker and seen by BleepingComputer show what appears to be full access to many critical Uber IT systems, including the company's security software and Windows domain.

> Other systems accessed by the hacker include the company's Amazon Web Services console, VMware vSphere/ESXi virtual machines, and the Google Workspace admin dashboard for managing the Uber email accounts.

> The threat actor also breached the Uber Slack server, which he used to post messages to employees stating that the company was hacked. However, screenshots from Uber's slack indicate that these announcements were first met with memes and jokes as employees had not realized an actual cyberattack was taking place.

Microsoft 365 now auto-updates apps on locked or idle devices [Ed: What next? Microsoft mining "cryptocurrencies" off your power bills? Microsoft does not even care about security, it actively undermines it for the NSA.]

↺ Microsoft 365 now auto-updates apps on locked or idle devices

> Microsoft says customers will see fewer Microsoft 365 update notifications because Office apps will update automatically while their computers are locked or idle.

Cyber Security Today, Sept. 16, 2022 – Queen’s death exploited by phishing scam, new Linux backdoor found, and more [Ed: No, it's not "Linux backdoor", it's malware that targets systems and, if it gets past defences through weak passwords or dumb administrators, then it allows remote control by malicious entities. Backdoors is what Microsoft does.]

↺ Cyber Security Today, Sept. 16, 2022 – Queen’s death exploited by phishing scam, new Linux backdoor found, and more

gemini.tuxmachines.org