'Looney Tunables' Bug Opens Millions of Linux Systems to Root Takeover

The flaw poses a significant risk of unauthorized data access, system alterations, potential data theft, and complete takeover of vulnerable systems, especially in the IoT and embedded computing space.

https://www.darkreading.com/vulnerabilit...t-takeover

On the Dark Web, Prices Are Down for Middle Eastern Network Access

A mere $35 can buy you stealth access to corporate networks across the region, according to new research.

https://www.darkreading.com/dr-global/on...ork-access

AWS Plans Multifactor Authentication Mandates for 2024

Amazon will add new MFA requirements for users with the highest privileges, with plans to include other user levels over time.

https://www.darkreading.com/cloud/aws-pl...s-for-2024

Russian Hacktivism: Flashy Non-Events or Serious Threat?

While it's tempting to dismiss Russian hacktivist DDoSing as all sizzle and no steak, experts warn the cyberattacks can cause serious damage -- and are poised to become more and more dangerous

https://www.darkreading.com/threat-intel...aine-eu-us

Patch Confusion for Critical Exim Bug Puts Email Servers at Risk — Again

Defenders have been left scrambling after the way patches were released for six flaws in the open source mail server, which is the most popular mail transfer agent on the Internet.

https://www.darkreading.com/cloud/patch-...rvers-risk

How to Measure Patching and Remediation Performance

Tracking metrics like MTTR, MTTD, MTTP, and MTTC can demonstrate the effectiveness of your patch management process and your value to the business.

https://www.darkreading.com/risk/how-to-...erformance

New 'Looney Tunables' Linux bug gives root on major distros


A new Linux vulnerability, known as 'Looney Tunables' and tracked as CVE-2023-4911, enables local attackers to gain root privileges by exploiting a buffer overflow weakness in the GNU C Library's ld.so dynamic loader. [...]


https://www.bleepingcomputer.com/news/se...r-distros/

Emergency alert on US phones and TVs today — Don’t worry, it’s just a test


The U.S. Federal Emergency Management Agency (FEMA) and the Federal Communications Commission (FCC) will run an emergency alert test today to check Emergency Alert System (EAS) and Wireless Emergency Alerts (WEA) capabilities nationwide. [...]


https://www.bleepingcomputer.com/news/te...st-a-test/

Sony confirms data breach impacting thousands in the U.S.


Sony Interactive Entertainment (Sony) has notified current and former employees and their family members about a cybersecurity breach that exposed personal information. [...]


https://www.bleepingcomputer.com/news/se...in-the-us/

Enhancing your application security program with continuous monitoring


Pen Testing as a Service and Traditional web application pen testing offers two different approaches to securing your applications. Learn more from Outpost24 on which approach may be best for your business. [...]


https://www.bleepingcomputer.com/news/se...onitoring/