This Week in Security: Anonymous, Apple, Chrome, Java, Petya, Samba
This Week in Security: Anonymous, Apple, Chrome, Java, Petya, Samba
Apple and Oracle Patches, PNG Trojans, IoT vulnerabilities, infrastructure attacks, and more.
Join the DZone community and get the full member experience.
Join For FreexMatters delivers integration-driven collaboration that relays data between systems, while engaging the right people to proactively resolve issues. Read the Monitoring in a Connected Enterprise whitepaper and learn about 3 tools for resolving incidents quickly.
Apple
Apple have patched their operating systems for a cryptography vulnerability that would allow decryption of communications in the messages app.
Read more here
Java
Oracle have advised that people should upgrade their JVM because of a flaw in Java when running within a browser. The flaw can be exploited via the network without the need for authentication. A user would have to visit a site that deliberately tries to exploit this flaw, which could cause unavailability, integrity issues or even confidentiality breaches. This is not an issue that affects server deployments.
Read more here
Trojan virus hidden in PNG files from Brazil
Kaspersky have discovered a PNG being used to conceal and deploy a trojan virus. This is not the first of its kind but seems is becoming more prolific. It uses a technique called RunPE which uses the function that loads the PNG into memory because it also is responsible for decryption and execution.
Read more here
Petya Ransomware
A new ransomware has popped up which now encrypts the entire contents of you hard disk by encrypting the master file table.
Read more here
Surveillance Cameras
A remote code execution vulnerability has been found in the firmware of surveillance cameras of 70 different vendors.
Read more here
Google Chrome Vulnerability Fixes
Google have fixed a number of vulnerabilities that include an out-of-bounds read in the V8 JavaScript engine, a buffer overflow in libANGLE, use-after-free in Navigation, use-after-free in Extensions as well as a series of other smaller issues.
Read more here
Anonymous
Anonymous targets ISIS after the Brussels attacks, shutting down their sites and stealing their bitcoins. They are also targeting presidential candidates Donald Trump and Ted Cruz because they do not approve of their ideals.
Read more here
Water Treatment Plant Hacked
A water treatment plant has been hacked and the chemical treatment settings were altered in the drinking water treatment process. The incident was described in Verizon’s Data Breach Digest although the exact location where this occurred was not disclosed.
Read more here
Windows and Samba
A critical floor in the SMB protocol being called BadLock has been discovered although very little is currently known, the details will be disclosed on 12th of April and a patch will also be made available in April.
Read more here
Discovering, responding to, and resolving incidents is a complex endeavor. Read this narrative to learn how you can do it quickly and effectively by connecting AppDynamics, Moogsoft and xMatters to create a monitoring toolchain.
Like This Article? Read More From DZone
Opinions expressed by DZone contributors are their own.
{{ parent.title || parent.header.title}}
{{ parent.tldr }}
{{ parent.linkDescription }}
{{ parent.urlSource.name }}