Tux Machines

Security Leftovers

Posted by Roy Schestowitz on Jul 08, 2023,

updated Jul 08, 2023

Security advisory: QXmlStreamReader

A recently reported potential buffer overflow issue in QXmlStreamReader has been assigned the CVE id CVE-2023-37369

Truebot Hackers Exploiting Netwrix Auditor Flaw: CISA, FBI Alert

Hackers linked to the Truebot malware are exploiting a year-old Netwrix Auditor flaw to break into organizations in the U.S. and Canada.

JumpCloud Says All API Keys Invalidated to Protect Customers

JumpCloud is responding to an incident that has triggered a reset of all API keys in order to protect customers and their operations.

Vodafone is preparing for quantum attacks on smartphones [Ed: Those phones have back doors, no need to interject "quantum" hype here]

British telecommunications company Vodafone is anticipating a future in which the power of quantum technology will override existing online security controls and render most smartphone networks vulnerable to cyber attacks.

Android Security Updates Patch 3 Exploited Vulnerabilities

Google’s July 2023 security updates for Android patches 43 vulnerabilities, including three exploited in the wild.

28,000 Impacted by Data Breach at Pepsi Bottling Ventures

The personal, financial, and health information of over 28,000 individuals stolen in data breach at Pepsi Bottling Ventures.

Shell Confirms MOVEit-Related Breach After Ransomware Group Leaks Data

Shell confirms that employee personal information has been stolen after the Cl0p ransomware group leaked data allegedly stolen from the energy giant.

Interpol: Key Member of Major Cybercrime Group Arrested in Africa [Ed: Microsoft Windows TCO]

Law enforcement authorities have arrested a suspected senior member of the French-speaking Opera1er cybercrime group.

StackRot Linux Kernel Vulnerability Shows Exploitability of UAFBR Bugs

A new Linux kernel vulnerability tracked as StackRot and CVE-2023-3269 shows the exploitability of use-after-free-by-RCU (UAFBR) bugs.

Vulnerability in Cisco Enterprise Switches Allows Attackers to Modify Encrypted Traffic

Cisco says a high-severity vulnerability in Nexus 9000 series switches could allow attackers to intercept and modify encrypted traffic.

Vulnerability in Cisco Nexus 9000 switches may allow encrypted traffic to be intercepted

Cisco Systems Inc. published a security advisory Wednesday warning customers of a high-severity vulnerability in its Nexus 9000 Series Fabric Switches in ACI mode that could allow an unauthenticated, remote attacker to read or modify inter-site encrypted traffic.

New tool exploits Microsoft Teams bug to send malware to users

A member of U.S. Navy’s red team has published a tool called TeamsPhisher that leverages an unresolved security issue in Microsoft Teams to bypass restrictions for incoming files from users...