Tux Machines

Security Leftovers

Posted by Roy Schestowitz on Mar 31, 2023

Podcasts: BSD Now 500 and Linux Action News 286

today's howtos

How to avoid the aCropalypse

↺ How to avoid the aCropalypse

> By Henrik Brodin, Lead Security Engineer, Research The aCropalypse is upon us! Last week, news about CVE-2023-21036, nicknamed the “aCropalypse,” spread across Twitter and other media, and I quickly realized that the underlying flaw could be detected by our tool, PolyTracker.

The FDA will no longer approve digital medical devices that are vulnerable to cyber attacks

↺ The FDA will no longer approve digital medical devices that are vulnerable to cyber attacks

> The majority of digital medical devices (53%) in the US, as well as internet-connected tools in hospitals, are at risk of cyberattack, according to a 2022 FBI report.

↺ 2022 FBI report

‘They outsmarted us.’ 3CX CEO acknowledges mistakes handling potential supply chain cyberattack

↺ ‘They outsmarted us.’ 3CX CEO acknowledges mistakes handling potential supply chain cyberattack

> "We have a security team, we do our own pentesting, we've got software scanners, we got a CSO ... Nonetheless, they outsmarted us."

Biden administration goes global in effort to constrain spyware use

↺ Biden administration goes global in effort to constrain spyware use

> Eleven nations agreed on Thursday to responsible use of commercial spyware. Israel, a key spyware exporter, is not part of the deal.

Time to prepare for Ubuntu 18.04 LTS end of standard support on 31 May 2023 – Options for AWS users.

↺ Time to prepare for Ubuntu 18.04 LTS end of standard support on 31 May 2023 – Options for AWS users.

> As mentioned in our recent blog post, Ubuntu 18.04 LTS ‘Bionic Beaver‘ will reach the end of the standard five-year maintenance window on 31 May 2023.

gemini.tuxmachines.org