Tux Machines
Security Leftovers
Posted by Roy Schestowitz on Jul 31, 2024
LWN ☛ Security updates for Tuesday
Security updates have been issued by Fedora (curl), Mageia (virtualbox), Oracle (squid), Red Hat (kernel), SUSE (apache2, bind, cdi-apiserver-container, cdi-cloner-container, cdi- controller-container, cdi-importer-container, cdi-operator-container, cdi- uploadproxy-container, cdi-uploadserver-container, devscripts, espeak-ng, freerdp, ghostscript, gnome-shell, gtk2, gtk3, java-11-openjdk, java-17-openjdk, kubevirt, libgit2, openssl-3, orc, p7zip, python-dnspython, and shadow), and Ubuntu (kernel, linux, linux-aws, linux-aws-hwe, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-nvidia, linux-oem-6.8, linux-raspi, linux, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-raspi, linux-xilinx-zynqmp, linux-aws, linux-aws-5.4, linux-aws-5.15, linux-ibm, linux-ibm-5.15, linux-raspi, linux-gcp-5.15, and linux-lowlatency).
Security Week ☛ Thousands Download New Mandrake Android Spyware Version From Surveillance Giant Google Play
Five Android applications containing the Mandrake spyware have been downloaded over 32,000 times from Surveillance Giant Google Play since 2022.
OpenSSF (Linux Foundation) ☛ Datadog Joins Open Source Security Foundation (OpenSSF)
OpenSSF Welcomes Datadog as Premier Member
Security Week ☛ Indian APT Targeting Mediterranean Ports and Maritime Facilities
The SideWinder APT has been targeting ports and maritime facilities in the Indian Ocean and Mediterranean Sea in recent attacks.
Silicon Angle ☛ IBM reports average breach costs hit record $4.88M in 2024, up 10% from last year
A new report from I.C.B.M. Corp. today finds that the average cost of data breaches in 2024 has hit a record high of $4.88 million, up 10% from 2023 as breaches grow more disruptive and further expand demands on cyber teams.
QSB-104: GUI-related security bugs
Bruce Schneier ☛ Providing Security Updates to Automobile Software
Auto manufacturers are just starting to realize the problems of supporting the software in older models: