This Week in Security: Rackspace Falls Over, Poison Ping, and the WordPress Race
In what’s being described as a Humpty-Dumpty incident, Rackspace customers have lost access to their hosted Exchange service, and by extension, lots of archived emails. The first official word of...
View ArticleThis Week in Security: Gitlab, KeyPassMini, and Horse
There’s a really nasty CVSS 10.0 severity vulnerability in Gitlab 16.0.0. The good news is that this is the only vulnerable version, and the fix came a mere two days after the vulnerable release. If...
View ArticleThis Week in Security: Bogus CVEs, Bogus PoCs, And Maybe a Bogus Breach
It appears we have something of a problem. It’s not really a new problem, and shouldn’t be too surprising, but it did pop up again this week: bogus CVEs. Starting out in the security field? What’s the...
View ArticleFLOSS Weekly Episode 768: Open Source Radio
This week Jonathan Bennett and Doc Searls talk with Tony Zeoli about Netmix and the Radio Station WordPress plugin. The story starts with the Netmix startup, one of the first places doing Internet...
View ArticleThis Week in Security: Forksquatting, RustDesk, and M&Ms
Github is struggling to keep up with a malware campaign that’s a new twist on typosquatting. The play is straightforward: Clone popular repositories, add malware, and advertise the forks as the...
View ArticleThis Week in Security: Crash your iPhone, Hack Your Site, and Bluetooth Woes
There have been some hilarious issues on mobile devices over the years. The HTC Dream had a hidden shell that was discovered when a phone rebooted after sending a text containing just the word...
View ArticleThis Week in Security: The Rest of the IPv6 Story, CVE Hunting, and Hacking...
We finally have some answers about the Windows IPv6 vulnerability — and a Proof of Concept! The patch was a single change in the Windows TCP/IP driver’s Ipv6pProcessOptions(), now calling...
View Article