An analysis of recent security disclosures covers an OpenSSH flaw affecting musl-based Linux environments, an APT package manager vulnerability, and a zero-day patch for Zyxel GS1900 switches.
Security gaps and intrusion attempts
A problem in the popular OpenSSH tool, dubbed SSHole, allows unknown parties to attempt to connect to Linux systems that use specific libraries, while the first attempts to exploit it have already been recorded from various addresses on the internet.
At the same time, researchers discovered a modified version of a website management program used on Linux that hides a hidden access tool. This way, attackers can execute commands remotely without leaving traces in the log files.
In another development, a weakness in the software management system used by Debian and Ubuntu could allow the installation of unchecked programs under certain internet communication conditions.
Attacks on devices and services
Zyxel has fixed a critical security issue in its GS1900 series network devices, which had already been exploited by unknown attackers to compromise approximately a thousand devices worldwide, with the aim of stealing settings and connection details.
↳
READ ALSO
HACKS.GR / RELATED
Cyber Attacks & Data Breaches
Who Gives a Crap confirms leak of customer personal data
↗
At the same time, unknown individuals used stolen login credentials to gain access to infrastructure and distribute a dangerous message through the official information channels of a security service.
Warnings from companies and new measures
Password management application mSecure has urged its users to change their passwords and reset their authentication measures after detecting suspicious activity on its systems, without specifying whether any data was leaked.
Similarly, payment service Gnosis Pay detected unauthorized access to an older card system that was due to be retired anyway, which led to the exposure of personal customer information.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
