Ubuntu Security Notice USN-5001-1 – KK Hack Labs

ByPR 24


Ubuntu Security Notice 5001-1 – Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code. Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation did not properly clear received fragments from memory in some situations. A physically proximate attacker could possibly use this issue to inject packets or expose sensitive information. Various other issues were also addressed.

Similar Posts

Exclusive: U.S. to give ransomware hacks similar priority as terrorism

Exclusive: U.S. to give ransomware hacks similar priority as terrorism

ByPR 24

The U.S. Department of Justice is elevating investigations of ransomware attacks to a similar priority as terrorism in the wake of the Colonial Pipeline hack and mounting damage caused by cyber criminals, a senior department official told Reuters. Internal guidance sent on Thursday to U.S. attorney’s offices across the country said information about ransomware investigations…

Ransomware: REvil’s websites become unreachable

Ransomware: REvil’s websites become unreachable

ByPR 24

Washington: Websites run by the ransomware gang REvil suddenly became unreachable on Tuesday (Wednesday AEST), sparking widespread speculation that the group had been knocked offline. The Russia-linked cybercrime ring has collected tens of millions of dollars in ransom payments in return for restoring computer systems it has hacked. In recent weeks it claimed responsibility for…

$2.3 Million of Colonial Pipeline Ransom Payment Recovered

$2.3 Million of Colonial Pipeline Ransom Payment Recovered

ByPR 24

Justice Department Tracked the Payment to an FBI-Controlled Bitcoin Wallet Doug Olenick (DougOlenick) • June 7, 2021     The U.S. Justice Department on Monday reported it recouped $2.3 million of the $4.4 million ransom Colonial Pipeline Co. paid following a May 7 DarkSide ransomware attack. The DOJ’s Ransomware and Digital Extortion Task Force…

Five Months After Takedown Attempt, CISA and FBI Warn of Ongoing TrickBot Attacks

Five Months After Takedown Attempt, CISA and FBI Warn of Ongoing TrickBot Attacks

ByPR 24

Attacks employing the TrickBot malware continue, leveraging phishing emails as the initial infection vector, the Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) warn. In a joint advisory published on Wednesday, the two agencies revealed that a sophisticated group of cybercrime actors is leveraging a traffic infringement phishing scheme to lure…