PortSmash Side-Channel Attack Siphons Data From Intel, Other CPUs
An exploit was released for a flaw existing in a process in CPUs called Simultaneous Multithreading (SMT).
Lindsey O'Donnell
Two Critical RCE Bugs Patched in Drupal 7 and 8
Drupal’s advisory also included three patches for “moderately critical” bugs.
AWS FreeRTOS Bugs Allow Compromise of IoT Devices
The bugs let hackers crash IoT devices, leak their information, and completely take them over.
Simple technique enables attackers to leverage Windows OS component to maintain stealth and persistence post system compromise.
Tumblr stressed that there is no evidence the security bug was being abused or that unprotected account data was accessed.
The update includes one critical flaw in Oracle GoldenGate with a CVSS 3.0 score of 10.0.
The update also features 23 security fixes.
Support for PHP 5.6 drops on December 31 – but a recent report found that almost 62 percent of websites are still using version 5.
The Emotet Trojan is behind a crippling ransomware attack that hit the Onslow Water and Sewer Authority.
As more states take cybersecurity and privacy issues into their own hands, experts worry that big tech will push for preemption.
