Independent – Page 177 – Computer Security Articles

Credit to Author: SSD / Ori Nimron| Date: Wed, 15 Aug 2018 05:26:28 +0000

Vulnerability Summary UAF vulnerability in Linux Kernel’s implementation of AF_PACKET leads to privilege escalation. AF_PACKET sockets allow users to send or receive packets on the device driver level, which lets them implement their own protocol on top of the physical layer or sniffing packets including Ethernet and higher levels protocol and higher levels of the … Continue reading SSD Advisory – Linux Kernel AF_PACKET Use After Free (packet_sock)

ComputerWorld Independent

August 15, 2018 admin

Patch Tuesday fallout: Bad docs, but so far no major problems

Credit to Author: Woody Leonhard| Date: Wed, 15 Aug 2018 08:46:00 -0700

Microsoft may have fixed July’s horrible, no good, very bad patches. Although the initial documentation for this month’s patches included warnings about many of the bugs that persisted from July, it ends up that the docs were wrong, and most of the known problems seem to be fixed.

As of early Reboot Wednesday morning, the patches seem to be behaving themselves. Of course, it frequently takes days or even weeks for bugs to appear, so you’d be well advised to avoid jumping into the unpaid battle zone for now.

To read this article in full, please click here

Independent Krebs

August 15, 2018 admin

Patch Tuesday, August 2018 Edition

Credit to Author: BrianKrebs| Date: Wed, 15 Aug 2018 14:52:21 +0000

Adobe and Microsoft each released security updates for their software on Tuesday. Adobe plugged five security holes in its Flash Player browser plugin. Microsoft pushed 17 updates to fix at least 60 vulnerabilities in Windows and other software, including two “zero-day” flaws that attackers were already exploiting before Microsoft issued patches to fix them.

ComputerWorld Independent

August 15, 2018 admin

Blockchain phase 2: Will it scale?

Credit to Author: Lucas Mearian| Date: Wed, 15 Aug 2018 03:11:00 -0700

More than one organization has been working on solving a major blockchain conundrum: how to improve sluggish transaction performance.

To read this article in full, please click here

(Insider Story)

ComputerWorld Independent

August 14, 2018 admin

A hidden Android Pie security setting everyone should enable

Credit to Author: JR Raphael| Date: Tue, 14 Aug 2018 09:24:00 -0700

Google’s new Android 9 Pie release has plenty of fresh features and interface changes, but one of the software’s most significant security improvements has managed to stay mostly off the radar.

In addition to all of the oft-discussed privacy and security enhancements, y’see, Pie has an out-of-sight and semi-advanced option. It’s not something you’d use every day — or often at all, really — but if the right sort of occasion ever comes along, you’ll be glad you have it enabled.

To read this article in full, please click here

ComputerWorld Independent

August 13, 2018 admin

Blue Team Village, DEF CON 2018 | Salted Hash Ep 43

Host Steve Ragan talks to Munin, a staffer at the DEF CON Blue Team Village about what's happening and what you can expect.

ComputerWorld Independent

August 13, 2018 admin

Patch Tuesday’s coming: Block Windows Update and pray we don’t get fooled again

Credit to Author: Woody Leonhard| Date: Mon, 13 Aug 2018 06:37:00 -0700

July 2018 patches for both Windows and Office brought bugs and bugs of bugs — many of which haven’t been solved, even now. We have even reached the unprecedented stage where the .NET team openly warned people against installing buggy updates, and the Monthly Rollup previews got shoved down the Automatic Update chute to fix bugs in the primary Monthly Rollup.

July was more galling than most months because the patches caused widespread problems for many, while plugging security holes for exactly zero widespread infections.

To read this article in full, please click here

Independent Krebs

August 12, 2018 admin

FBI Warns of ‘Unlimited’ ATM Cashout Blitz

Credit to Author: BrianKrebs| Date: Mon, 13 Aug 2018 00:28:11 +0000

The Federal Bureau of Investigation (FBI) is warning banks that cybercriminals are preparing to carry out a highly choreographed, global fraud scheme known as an “ATM cash-out,” in which crooks hack a bank or payment card processor and use cloned cards at cash machines around the world to fraudulently withdraw millions of dollars in just a few hours.