#security (2019-05)

A short story about how Sysdig helped us to unreveal a malware - Issif/sysdig-vs-malware

What computer do you use? Who made it? Have you ever thought about what came with your computer? When we think of Remote Code Execution (RCE) vulnerabilities in mass, we might think of vulnerabilities in the operating system, but another attack vector to consider is “What third-party software came with my PC?”. In this article, I’ll be looking at a Remote Code Execution vulnerability I found in Dell SupportAssist, software meant to “proactively check the health of your system’s hardware and software” and which is “preinstalled on most of all new Dell devices”.

Common Vulnerabilities and Exposures (CVE®) is a list of entries — each containing an identification number, a description, and at least one public reference — for publicly known cybersecurity vulnerabilities. Assigned by CVE Numbering Authorities (CNAs) from around the world, use of CVE Entries ensures confidence among parties when used to discuss or share information about a unique software vulnerability, provides a baseline for tool evaluation, and enables data exchange for cybersecurity automation.

Two different groups of researchers found another speculative execution attack that can steal all the data a CPU touches.

A very bad vulnerability in Windows XP could have serious ramifications, even with a patch.

Hacker Breaks Into Stack Overflow Q&A Site, No Evidence of Data Breach

SandboxEscaper has now published seven zero-days in Microsoft products; two more to come.