Collaborate Disseminate
There’s a trend recently, of big-name security appliances getting used in state-sponsored attacks. It looks like Cisco is the latest victim, based on a report by their own Talos Intelligence. …read more Continue reading This Week in Security: Cisco, Mitel, and AI False Flags
This week Jonathan Bennett and Aaron Newcomb chat with Isaac Connor about Zoneminder! That’s the project that’s working to store and deliver all the bits from security cameras — but …read more Continue reading FLOSS Weekly Episode 780: Zoneminder — Better Call Randal
It may be time to rotate some keys. The venerable PuTTY was updated to 0.81 this week, and the major fix was a change to how ecdsa-sha2-nistp521 signatures are generated. …read more Continue reading This Week in Security: Putty Keys, Libarchive, and Palo Alto
This week Jonathan Bennett and Dan Lynch sit down with Andy Stewart to talk about Andy’s Ham Radio Linux (AHRL)! It’s the Linux distro designed to give hams the tools …read more Continue reading FLOSS Weekly Episode 779: Errata Prevention Specialist
So first up, we have BatBadBut, a pun based on the vulnerability being “about batch files and bad, but not the worst.” It’s a weird interaction between how Windows uses …read more Continue reading This Week in Security: BatBadBut, DLink, and Your TV Too
This week Jonathan Bennett and Katherine Druckman sit down with Gina Häußge to talk OctoPrint! It’s one of our favorite ways to babysit our 3D printers, and the project has …read more Continue reading FLOSS Weekly Episode 778: OctoPrint — People Are Amazing at Breaking Things
The xz backdoor is naturally still the top story of the week. If you need a refresher, see our previous coverage. As expected, some very talented reverse engineers have gone …read more Continue reading This Week in Security: XZ, ATT, and Letters of Marque
This week Jonathan Bennett and David Ruggles sit down with Joshua Colp to talk about Asterisk! That’s the Open Source phone system software you already interact with without realizing it. …read more Continue reading FLOSS Weekly Episode 777: Asterisk — Wait, Faxes?
In breaking news that dropped just after our weekly security column went live, a backdoor has been discovered in the xz package, that could potentially compromise SSH logins on Linux …read more Continue reading Security Alert: Potential SSH Backdoor Via Liblzma
The Linux command wall is a hold-over from the way Unix machines used to be used. It’s an abbreviation of Write to ALL, and it was first included in AT&T …read more Continue reading This Week in Security: Peering Through the Wall, Apple’s GoFetch, and SHA-256