Test2

A new crypto-mining group is targeting Linux servers. According to ZDNet, the attackers, called Pacha Group, are believed to be from China and have been attacking Linux servers since this past fall, inserting malware that mines cryptocurrency. Security researchers at Intezer discovered that the attackers “use brute-force attacks to compromise services like WordPress or PhpMyAdmin, and once they have an initial ...

Linux kernel 5.0 is out. Linus writes, “We have more than a handful of real fixes in the last week, but not enough to make me go “Hmm, things are really unstable”. In fact, at least two thirds of the patches are marked as being fixes for previous releases, so it’s not like 5.0 itself looks bad.” The merge window ...

A proof-of-concept hack allows adversaries to tweak old exploits, have code jump containers and attack underlying infrastructure. Researchers at CyberArk have created a proof-of-concept attack that allows adversaries to bypass container security, escape the container and compromise an entire host system. However, the attack scenario is limited, in that a successful attack depends on unpatched vulnerabilities to be present in ...

With no official Google Drive Linux client available, it’s left to third-party apps, devs services to fill the file-syncing void for FOSS fans. And boy are there are a lot of options out there that do just that! One could compile a list of various Google Drive Linux clients available for Linux, ranging from those with a GUI to those using a CLI. I ...

KDE announces it’s been selected to participate in the Google Summer of Code for the 14th year. See the KDE Community Wiki for ideas and instructions for students interested in working with KDE for GSoC 2019. MariaDB announced it is releasing a new version of its MySQL-compatible database management system called MariaDB Enterprise Server 10.4. ZDNet reports that “This new business server comes with more powerful and fine-grained ...

In my day job at LinuxGizmos, I’ve been neck deep recently in embedded Linux hardware news from the Embedded World show in Nuremberg. There are plenty of new SBCs and compute modules — many based on NXP’s newly shipping i.MX8M Mini — as well as a new Qualcomm Robotics RB3 Platform, more IoT gateways, and Linux-ready chips like ST’s STM32MP1 and Octavo SiP version of the SoC. Yet, Embedded World ...

A new cryptovirus called “B0r0nt0K” has been putting Linux and possibly Windows Web servers at risk of encrypting all of the infected domain’s files. The new ransomware threat and the ransom of 20 bitcoins (about US$75,000) first came to light last week, based on a post on Bleeping Computer’s user forum. A client’s website had all its files encrypted and renamed with ...

Thunderclap vulnerabilities allow the creation of highly dangerous malicious peripherals that can steal data from OS memory. Windows, Mac, Linux, and FreeBSD systems are all impacted by a new vulnerability that was disclosed this week at the NDSS 2019 security conference. The vulnerability –named Thunderclap– affects the way Thunderbolt-based peripherals are allowed to connect and interact with these operating systems, ...

Cmd helps organizations monitor, authenticate, and block user activity that goes beyond expected system usage. There’s a new Linux security tool you should be aware of — Cmd (pronounced “see em dee”) dramatically modifies the kind of control that can be exercised over Linux users. It reaches way beyond the traditional configuration of user privileges and takes an active role in monitoring ...

The Eclipse Foundation this morning announced that Eclipse IoT, “a leading collaboration of vendors working together to define an open, modular architecture to accelerate commercial IoT adoption”, has reached “3 million lines of code, 41 member companies, 37 IoT projects and 350 contributors”. See the Eclipse IoT website for more on how “Eclipse IoT is the open source center of gravity for ...