'Looney Tunables' Linux Flaw Sees Snowballing Proof-of-Concept Exploits

Klicken Sie hier, um Informationweek.com zu abonnieren

Kategorien: Dienstleistungen | Professionals Geschäftswaren Finanziell Kantoor Marketing Einzelhandel Einzelhandel Industrie Machines Alter: 14 - 18 Jahr 19 - 30 Jahr 31 - 64 Jahre

Laden...

1 jahr vor

Html
Text

Following the publication of the critical Linux security vulnerability, security specialists released PoC exploits to test the implications of CVE-2023-4911.

Follow Dark Reading:

October 10, 2023

LATEST SECURITY NEWS & COMMENTARY

'Looney Tunables' Linux Flaw Sees Snowballing Proof-of-Concept Exploits Following the publication of the critical Linux security vulnerability, security specialists released PoC exploits to test the implications of CVE-2023-4911. Hacktivists Enter Fray Following Hamas Strikes Against Israel Killnet, Anonymous Sudan, along with other groups, pick up up their Middle East activities as war breaks out. Operation Behind Predator Mobile Spyware Is 'Industrial Scale' The Intellexa alliance has been using a range of tools for intercepting and subverting mobile and Wi-Fi technologies to deploy its surveillance tools, according to an investigation by Amnesty International and others. Patch Now: Massive RCE Campaign Wrangles Routers Into Botnet Thousands of devices, including D-Link and Zyxel gear, remain vulnerable to takeover despite the availability of patches for the several bugs being exploited by IZ1H9 campaign. Cybersecurity Talent in America: Bridging the Gap It's past time to reimagine how to best nurture talent and expand recruiting and training to alleviate the shortage of trained cybersecurity staff. We need a diverse talent pool trained for tomorrow's challenges. MORE NEWS / MORE COMMENTARY


HOT TOPICS
Critical Zero-Day Bug in Atlassian Confluence Under Active Exploit Patch now: The Atlassian security vulnerability appears to be a remotely exploitable privilege-escalation bug that cyberattackers could use to crack collaboration environments wide open. 'Looney Tunables' Bug Opens Millions of Linux Systems to Root Takeover The flaw poses a significant risk of unauthorized data access, system alterations, potential data theft, and complete takeover of vulnerable systems, especially in the IoT and embedded computing space. Preparing for the Unexpected: A Proactive Approach to Operational Resilience Try these steps to create an operational resilience action plan that will satisfy financial regulators and help sustain business without disruption. 23andMe Cyberbreach Exposes DNA Data, Potential Family Ties The information leaked in the breach involves personally identifiable information as well as genetic ancestry data, potential relatives, and geolocations. MORE

EDITORS' CHOICE

Too Rich to Ransomware? MGM Brushes Off $100M in Losses MGM wins big bet that choosing days of operations outages is a better business decision than paying a ransom, following last month's data breach. LATEST FROM THE EDGE
Insurance Companies Have a Lot to Lose in Cyberattacks Not only do insurance companies collate sensitive information from their clients, but they also generate their own corporate data to protect. LATEST FROM DR TECHNOLOGY
Google, Yahoo Push DMARC, Forcing Companies to Catch Up The move means that DMARC, already in use by half of enterprises, will become table stakes for anyone using email for marketing. LATEST FROM DR GLOBAL
Suspected Crime Gang Hacks Israeli President's Telegram Account The encrypted messaging app was hacked in the wake of an online scam before access was "swiftly restored."

WEBINARS

Building an Effective Active Directory Security Strategy

For many organizations, Microsoft's Active Directory is the source of truth for user identity and system access. For criminals, Active Directory is a gold mine of information for moving laterally through the corporate infrastructure. Despite its importance, many security teams ...

When Tech Converges, Orgs Consolidate: Navigating Change Across your Security Platforms

Convergence trends across both Web Application and API Protection (WAAP) and Secure Access Service Edge (SASE) are no coincidence. Modern organizations need the multiplicative value these security platform approaches provide, with underlying capabilities that were designed to work together. And ...

View More Dark Reading Webinars >>

WHITE PAPERS

The Forrester Wave: External Threat Intelligence Service Providers, Q3 2023 Threat Intelligence: Data, People and Processes Building Cyber Resiliency: Key Strategies for Proactive Security Operations 9 Traits You Need to Succeed as a Cybersecurity Leader The Ultimate Guide to the CISSP Rediscovering Your Identity Know your customer: Enable a 360-degree view with customer identity & access management

View More White Papers >>

FEATURED REPORTS

The State of Supply Chain Threats Everything You Need to Know About DNS Attacks How Enterprises Are Managing Application Security Risks in a Heightened Threat Environment

Concerns over API security and low-code/no-code use added to an already-full plate of application security challenges for many organizations over the last year. IT and security decision-makers are deeply concerned about compromises resulting from vulnerabilities in the software supply ...

View More Dark Reading Reports >>

PRODUCTS & RELEASES

Predictive Analysis Can Reduce Risks Associated With Data Breaches RIT Is the First University to Receive Support From the Google Cybersecurity Clinics Fund WatchGuard Threat Lab Report Finds Endpoint Malware Volumes Decreasing Despite Campaigns Growing More Expansive SecTor 2023: Full Schedule Programming for Toronto Event Cybersecurity Funding Rises by 21% in Q3 2023, Pinpoint Search Group's Report Indicates MORE PRODUCTS & RELEASES

CURRENT ISSUE

How to Deploy Zero Trust for Remote Workforce Security
DOWNLOAD THIS ISSUE
VIEW BACK ISSUES

Dark Reading Daily
-- Published By Dark Reading
Informa Tech Holdings LLC | Registered in the United States
with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA

To opt-out of any future Dark Reading Daily Newsletter emails, please respond here.

Thoughts about this newsletter? Give us feedback.

Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list:

If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation.

We take your privacy very seriously. Please review our Privacy Statement.

Teilen auf

Laden...

Weitere Newsletter von Informationweek.com

Achieving Optimal Security Outcomes Through Platformization Informationweek.com
Gestern um 16:31
FEATURES EDITION | Microsoft Highlights Security Exposure Management at Ignite Informationweek.com
Gestern um 14:31
Chinese APT Gelsemium Deploys 'Wolfsbane' Linux Variant Informationweek.com
Letzten Freitag um 14:04

Weitere Newsletter von Informationweek.com

Laden...

Andere Kategorien anzeigen

Dienstleistungen | Professionals Geschäftswaren Finanziell Kantoor Marketing Einzelhandel Einzelhandel Industrie Machines

'Looney Tunables' Linux Flaw Sees Snowballing Proof-of-Concept Exploits

How to Deploy Zero Trust for Remote Workforce Security

Teilen auf

Weitere Newsletter von Informationweek.com

Verwandte Newsletter

Andere Kategorien anzeigen