Tag Archives: Linux

SuSe, Yes Please

Posted on April 3, 2016 by Carmelo
Posted in Security Blog | Tagged , , , | Comments Off on SuSe, Yes Please

Rowhammer

Posted on March 11, 2015 by Carmelo

Intel-compatible PCs running Linux are exploitable through the physical weaknesses in certain varieties of DDR DRAM (double data rate dynamic random-access memory) chips and gaining higher kernel privileges on the system. Google’s Project Zero has released an in-depth article on … Continue reading →

Posted in Security Blog | Tagged , , , , , , , | Comments Off on Rowhammer

Ghost to the Shell

Posted on January 27, 2015 by Carmelo

During a code audit, researchers at Qualys discovered a buffer overflow in the __nss_hostname_digits_dots() function of glibc which can get access to the shell. The GHOST vulnerability is a serious weakness in the Linux glibc library. It allows attackers to … Continue reading →

Posted in Security Blog | Tagged , , , , , | Comments Off on Ghost to the Shell

Is that a Mouse in your Pocket or?

Posted on January 22, 2015 by Carmelo

You ready to bring unauthorized hardware on my ‘secure’ network? Mouse-box, the computer in a mouse, is still in prototype. All we know right now is that it is running ChromeOS or Linux. Maybe a variant of Kali will work too. … Continue reading →

Posted in Security Blog | Tagged , , , , , , | Comments Off on Is that a Mouse in your Pocket or?

WOPBOT BotNet

Posted on September 26, 2014 by Carmelo

A botnet runs on Linux and Linux variant servers, named wopbot that uses the Bash Shellshock bug to auto-infect others. The wopbot botnet is active and scanning the internet for vulnerable systems, including network ranges at the United States Department … Continue reading →

Posted in Security Blog | Tagged , , , , , , , , , , | Comments Off on WOPBOT BotNet

BASH (Bourne-Again SHell) ShellShock Bug

Posted on September 24, 2014 by Carmelo

Stephane Chazelas, IT Manager at SeeByte, discovered a vulnerability in bash, related to how environment variables are processed: trailing code in function definitions was executed, independent of the variable name. For those unknowing, Bash is a command processor, typically run … Continue reading →

Posted in Security Blog | Tagged , , , , , , , | Comments Off on BASH (Bourne-Again SHell) ShellShock Bug