Skip to main content

InfoSec

Search This Blog

DoD Files Found on Publicly Accessible Amazon Server

Get link
Facebook
X
Pinterest
Email
Other Apps

Feedly https://www.infosecurity-magazine.com/news/dod-files-found-on-public-amazon/ IFTTT

Get link
Facebook
X
Pinterest
Email
Other Apps

Comments

Post a Comment

Popular Posts

Vulnerabilities Patched in Aruba Access Policy Platform

HPE-owned network access solutions provider Aruba informed customers last week that the company’s ClearPass Policy Manager access policy platform is affected by several vulnerabilities. The most serious of the flaws , based on its CVSS score, is a high severity unauthenticated remote code execution vulnerability tracked as CVE-2017-5824. Another high severity issue is an information disclosure bug ( CVE-2017-5647 ) affecting Apache Tomcat. The other security holes, classified as medium and low severity, include authenticated remote code execution (CVE-2017-5826), reflected XSS (CVE-2017-5827), privilege escalation (CVE-2017-5825), arbitrary command execution via XXE (CVE-2017-5828), and access restriction bypass issues (CVE-2017-5829). The vulnerabilities affect all ClearPass Policy Manager versions prior to 6.6.5. Users have been advised to update the product to version 6.6.5 and apply an additional hotfix made available on May 24. A majority of these vulnerabilities were report...

RoughTed: The anti ad-blocker malvertiser

RoughTed is a large malvertising operation that peaked in March 2017 but has been going on for at least well over a year. It is unique for its considerable scope ranging from scams to exploit kits, targeting a wide array of users via their operating system, browser, and geolocation to deliver the appropriate payload. We estimate that the traffic via RoughTed related domains accumulated to over half a billion hits and was responsible for many successful compromises due to effective techniques that triage visitors and bypass ad-blockers. The threat actors behind RoughTed have been leveraging the Amazon cloud infrastructure, in particular, its Content Delivery Network (CDN), while also blending in the noise with multiple ad redirections from several ad exchanges, making it more difficult to identify the source of their malvertising activity. Highlights Traffic comes from thousands of publishers, some ranked in Alexa’s top 500 websites. RoughTed domains accumulated over half...

How to protect Samba from the SambaCry exploit

Image: Jack Wallen You've already heard of WannaCry, a ransomware attack that can lock down data on Windows machines. This particular exploit comes by way of an SMB vulnerability. Naturally, if you use Linux you know about Samba; but did you also know that, according to CVE-2017-7494 : All versions of Samba from 3.5.0 onwards are vulnerable to a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it. For anyone that has to administer Samba servers, you probably want to know what can be done, immediately, to prevent this vulnerability from affecting your systems. Fortunately, Debian has already pushed out a patch for this problem (see DSA-3860-1 samba ) and the official Samba patch can be found here . As long as you're running the Debian version of Samba >= 2:4.2.14+dfsg-0+deb8u6, or Samba 4.6.4, 4.5.10, or 4.4.14 you're good to go. But what else can you do to ...

Powered by Blogger